Your life.
Your records.

What stays on your device

Littiva has no account, signup or developer-operated health database. Your habits, schedules, food entries, portions, notes, personal foods, saved meals and review history are kept in an encrypted store on your phone. Littiva does not upload that health history to an account, advertising service or analytics provider.

The encryption key is held in the phone’s secure storage. Records and keys are configured to be excluded from operating-system backup and device transfer. There is no Littiva cloud recovery or export. Losing your phone or key, clearing storage or uninstalling can lose your history.

App lock uses your phone’s authentication system. Littiva receives the outcome, not your passcode or biometric template. Barcode recognition happens on the device; camera images are not uploaded by Littiva. Reminders use generic notification text without habit names or quantities.

What can use the internet

Optional app analytics

Usage analytics is off by default. If you enable it, Littiva uses Plausible Analytics hosted by us at plausible.zixdev.com, under mobile.littiva.app. We measure screen visits, app launches, visits to Plus and startup duration ranges, with the app version and platform. These requests exclude health records, questionnaire answers, food searches, barcodes and user-entered text.

These analytics requests use no cookies, advertising IDs or persistent user or installation identifiers. Plausible processes the request's IP address and a coarse platform user-agent to estimate daily visitors and approximate location. It does not store raw IP addresses in its analytics database. Network and security logs are separate from analytics data.

You can turn usage analytics off in Settings → Privacy & storage. This stops future app analytics requests; it does not erase information already received. Offline events are discarded, not queued for later. Analytics is separate from purchases and native scanner diagnostics.

Purchases and native services

Apple or Google handles payments through your store account. Littiva can check prices and purchase access at startup and when you purchase or restore. It does not ask for payment-card details or send health records to the store.

Littiva keeps store product, subscription access and available entitlement dates locally to unlock features. Payment, renewal, cancellation and refunds are handled by the store. See Apple's privacy policy and Google's privacy policy for their processing.

Barcode scanning and native diagnostics

Android barcode scanning uses Google's ML Kit. It processes camera input on the device. The SDK can send technical information such as device and app versions, per-installation identifiers, performance measurements, scanner events and error codes to Google for diagnostics and usage analytics. Google describes HTTPS encryption for this traffic in its ML Kit data disclosure. The iPhone scanner uses Apple's on-device camera framework.

Native store and scanner services can make their own connections, separate from the app analytics setting. Turning off Plausible does not switch off every native service. Littiva does not attach its health database, camera images or user-entered text to these requests.

Advertising

Production ads are currently disabled. An ads-enabled release would require updated disclosures and verified consent behavior before activation.

This website

This website does not load an analytics tracker, use cookies or save information in your browser. Marketing analytics is currently disabled.

There are no accounts, email signup forms or health-entry fields on this site. Local fonts, branding and app screenshots are bundled with it. Following an external store or help link opens a service with its own terms and privacy practices.

When you visit this website, its host receives technical request information such as your IP address and browser information to deliver and protect the site. Hosting logs and security processing are separate from your app's local health records.

Your choices

Leave app analytics off, choose whether to allow notifications and camera access, and enable app lock if useful. To delete local health records, open Settings → Privacy & storage → Delete my health data. Read the explanation and confirm. Local deletion is permanent and does not cancel subscriptions or erase store transactions.

If you email support, we receive your email address and the information you choose to send so we can respond. There is no automatic health-record attachment or support upload. Please send only the technical details needed to describe an issue, and avoid private health records or device passcodes. Get help.

Retention and deletion

Local records remain on your device until you delete them or the app's storage is removed. Littiva has no server copy to recover. Deleting local records does not cancel a subscription or delete store transactions, messages you sent to support, or analytics previously received by the service. Those are separate from the local health diary.

We retain usage statistics for understanding product use and performance over time. Technical logs are retained for operating the service, troubleshooting and security; support correspondence is retained for handling your request and related follow-up. Retention is determined by these purposes and any applicable legal obligations. Turning off analytics or deleting local records does not trigger automatic deletion of these separate records.

You can contact contact@zixdev.com with privacy questions or to request access, correction or deletion of information held by us. We can only act on information we can identify as yours; analytics is not tied to a Littiva account or your local health diary. Please do not send health records to identify an analytics visit. Store providers handle their own transaction records under their policies.

Changes to this policy

We may update this policy as Littiva changes. The date above identifies the current version. Provider services and external links have their own privacy policies.