Privacy policy
Last updated: 18 October 2026
- Without an account, your tasks stay in your browser. We never receive them.
- With an account, we keep your tasks so they follow you between devices — stored in the EU.
- Payments go through Stripe. We never see your card number.
- No ads, no analytics, no tracking cookies. We do not sell your data.
1. Who is responsible
Levelix is run by Andreas Papadopoulos, a sole proprietor trading as Levelix, who is the controller of the personal data described here:
Andreas Papadopoulos, trading as LevelixRiga Feraiou 44, 56625 Thessaloniki, Greece
Tax ID (ΑΦΜ) 150496621 · Tax office (ΔΟΥ) Ε΄ Θεσσαλονίκης
info@levelix.eu
2. What we collect and why
Using Levelix without signing in
Your tasks, dates, priorities, timers and preferences are kept only in your browser's local storage. They are not sent to us, and clearing your browser data deletes them.
Your account
When you sign in with Google or with a link sent to your email, we receive your email address — and, with Google, your name, profile photo and a Google account identifier. This is handled by Firebase Authentication and is used only to sign you in and keep your data yours. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).
Your planner, when you are signed in
Your tasks (titles, dates, priorities, whether they are done), timers and time tracked, your settings and your email address are stored in Google Cloud Firestore, in the EU, so they sync and stay backed up across your devices. Only your signed-in account can read them. Legal basis: contract (Art. 6(1)(b)).
Levelix Pro
Payments are processed by Stripe. From Stripe we receive your name, email address, country, the amount and whether the payment went through — never your full card details. We use your email address to send your Pro code, and we record which account redeemed a code and until when its Pro period runs. Legal bases: contract (Art. 6(1)(b)), and our legal obligation to keep tax and accounting records (Art. 6(1)(c)).
When you write to us
We use your email address and message to answer you. Legal basis: contract, or our legitimate interest in answering questions (Art. 6(1)(f)).
Technical logs
When your browser loads levelix.eu, our hosting provider processes your IP address and request details to deliver the site and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f)).
3. Cookies and local storage
Levelix uses no advertising or analytics cookies and does not track you. It uses your browser's local storage to keep your tasks and preferences (for example, which page you were on), and Firebase keeps your sign-in session in the browser. These are strictly necessary for the app to work.
4. Who processes data for us
- Google Ireland Ltd — Firebase Hosting, Authentication and Cloud Firestore: hosting the site, signing you in and storing your planner (in the EU).
- Stripe Payments Europe Ltd (Ireland) — processing payments.
- Our email provider — the info@levelix.eu mailbox.
We share personal data only with these providers, acting on our instructions, or where the law requires it. We never sell or rent it.
5. Transfers outside the EU
Google and Stripe are global companies. Where they process data outside the European Economic Area, they rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Account and planner data: until you delete it, or delete your account (account menu → gear → Delete account).
- Purchase records: for as long as Greek tax and accounting law requires.
- Emails: as long as needed to deal with your request.
- Hosting logs: for the short periods set by our hosting provider.
7. Your rights
You can ask to access, correct, delete or export your data, to restrict how we use it, or object to it. Signed in, open the account menu and the gear next to Sign out: Clear account deletes all your tasks at once, and Delete account deletes the account itself together with its tasks, settings and Pro time — for good. Purchase records are kept only as long as tax law requires. For anything else, write to info@levelix.eu; we answer within one month.
You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority where you live.
8. Security
Levelix is served only over HTTPS. Sign-in runs through Google's Firebase — we never handle or store passwords — and database rules let each account read and write only its own data.
9. Children
Levelix is not intended for children under 15.
10. Changes
If this policy changes, we update this page and the date at the top; important changes are also announced in the app.