Privacy Policy
How The Lively Three uses cookies and similar technologies,
and how you can control them.
You decide. Not us.
We don't claim ownership of your data. You choose what is allowed. And you can change your mind.
Only what is needed
We use data to run the app and create your insights. No optional analytics or sharing happens without your permission.
Clear permissions
Any extra analytics or sharing is enabled only if you say so. And you can change it anytime based on the terms you agreed to.
Share for value. Your terms.
If you ever share beyond the app, it is transparent and non-exclusive. For good cause, reward, or payment.
Welcome to The Lively Three. We help you track plant-focused intake and turn your entries into personal insights and (opt-in) community benchmarks. You control what you share and can manage access and deletion in the app. This policy explains what we collect, how we use it, and your rights.
This Privacy Policy applies to users in Switzerland (CH), the European Union/EEA (EU), the United Kingdom (UK), and Canada (CA).
1) Controller (Who we are)
The Lively Three - powered by Beeqster GmbH.
Bühlstrasse 18, 8172 Niederglatt, Switzerland
2) EU & UK Representatives (GDPR / UK GDPR)
EU Representative (Article 27 GDPR)
Prighter EU Rep GmbH, Schellinggasse 3/10, 1010 Vienna, Austria
UK Representative (UK GDPR)
Prighter Ltd (UK), 20 Mortlake High Street, London SW14 8JN, United Kingdom
Privacy Requests (EU/UK Trust Center)
https://app.prighter.com/portal/thelivelythree-privacy
You may contact the representatives regarding GDPR/UK GDPR matters. You may also contact us directly at privacy@thelivelythree.earth. Responsibility for processing remains with The Lively Three.
3) What data we collect
A) Data you provide
Account and profile
- Email/login identifiers and account settings
- Country of residence (optional)
- Height, weight, gender (optional)
- Activity level, lifestyle goals (optional)
- Preferences such as weekly fiber, protein, and water goals (optional)
- Dietary preferences (optional)
Food & lifestyle logs
- Daily consumption entries for a variety of food items (portion size per food item)
- Water intake (if you choose to log it)
Community Kitchen
- Meal compositions you choose to share (anonymised; no name or account identifier visible to other users)
- Adoption count per shared meal (number of times other users have added it to their list; displayed publicly in the community view, not linked to your identity)
B) Data we generate (derived indicators)
- Health score, sustainability score, consistency metrics, averages, and other analytics generated from your inputs
- Adoption count for Community Kitchen meals: the number of times other users have added your shared meal to their own list. This count is stored against your account internally and is visible to you within the app.
C) Technical & device data (app only)
Where you use the App, we may collect technical data needed to operate and secure the service, such as:
- device and operating system information (e.g., device model, OS version)
- app version and language settings
- diagnostic and performance data (e.g., crash reports)
- log data such as timestamps and basic network information (e.g., IP address)
- push notification tokens (if you enable notifications)
We use this data for security, troubleshooting, fraud prevention, and service reliability.
D) Website data (website only)
Where you use our website, and depending on your cookie preferences, we may collect:
- analytics events such as page views, clicks, and engagement (where enabled)
- marketing/advertising measurement data (where enabled), such as conversion events and audience/retargeting signals collected via website tags
E) Future data streams (roadmap)
- Wearable/sensor data (only if you explicitly opt in via a dedicated Data Contract)
F) Data sources (summary)
We collect data (i) directly from you when you create an account and log entries, (ii) generate analytics and indicators from your entries, and (iii) receive limited account- and subscription-related information from app stores and sign-in providers as needed to operate the service.
4) Required processing to provide the service
To operate The Lively Three and provide the features you request (food logging and your personal indicators), we must process certain personal data, including your account data, the entries you log, and the indicators derived from those entries. If you do not agree to this required processing, we cannot provide the service.
5) Optional processing via Data Contracts (opt-in)
In addition to the core service, we may offer optional features via Data Contracts. Data Contracts are contextual opt-ins that specify:
- who requests data
- what is requested
- what you receive (e.g., additional analytics or features)
- duration and how withdrawal works
Managing Data Contracts: The primary way to manage Data Contracts is in the app (Settings → Data Transparency). If you cannot access the app, contact us at privacy@thelivelythree.earth or use the Trust Center above.
Preventing "silent expansion": If we introduce new optional processing, we will do so via a new Data Contract that clearly explains scope, purpose, duration, and withdrawal.
Community features: Data Contracts also govern optional community features, such as sharing a meal to the Community Kitchen, where The Lively Three acts as the initiating party on behalf of the user community. These contracts follow the same structure: scope, purpose, what you receive, duration, and how to withdraw.
6) How we use your data
We use personal data to:
- provide and operate the app and its core features
- generate your personal dashboards and indicators
- operate, secure, and improve the service
- respond to support requests
- (where enabled) measure and improve website performance and usability
- (if you opt in) enable optional features and any sharing described in a Data Contract
Service and marketing communications
- Service communications: We may send emails necessary to provide the service (e.g., account verification, security notices, password reset).
- Marketing communications (if enabled): Only where permitted by applicable law. You can opt out at any time.
- No advertising targeting (in-app): We do not use your in-app consumption logs, body metrics, or derived indicators to target you with advertising.
- Website advertising measurement (cookie-based): If you opt in, we may use marketing/advertising cookies to measure campaign effectiveness.
- We don't combine in-app nutrition data with website advertising audiences.
7) Legal bases (EU/EEA and UK users)
Where EU/EEA GDPR or UK GDPR applies, we rely on one or more of the following bases:
- Contract (to provide the service you request)
- Legitimate interests (security, fraud prevention, service reliability and improvement)
- Consent (where required, e.g., optional Data Contracts and non-essential website cookies)
- Legal obligation (where applicable)
8) Service providers, third parties, and disclosures
We do not sell your personal data.
A) Service providers (processors)
To operate The Lively Three, we use service providers that process personal data on our behalf. These providers are contractually required to:
- process data only based on our instructions
- keep it confidential and secure
- not use it for their own purposes
We use Supabase (database/auth), AWS (hosting), and Resend (transactional email). These run in Germany and Ireland.
For website measurement (where consented), we may use Google Tag Manager, Google Analytics 4, Google Ads, and Meta Pixel.
B) Third parties (optional, opt-in only)
We do not disclose your personal data to third parties for their own purposes unless you explicitly opt in via a Data Contract.
If we introduce optional collaborations (e.g., universities, research institutions), we will do so only through a Data Contract that clearly explains the partner, what data is involved, the purpose, what you receive, and how you can withdraw.
C) Legal and safety disclosures
We may disclose personal data if required by law or if reasonably necessary to protect rights, safety, and security.
Our business model is based on subscriptions/services, not on selling personal information.
9) Data storage, location, and transfers
Our primary database is hosted in Frankfurt, Germany (AWS eu-central-1) via Supabase.
Data sovereignty and transfers: We design the service to keep storage and primary processing within Switzerland and the EU/EEA where feasible.
Website analytics/marketing providers (e.g., Google/Meta) may process data outside Switzerland/EU/EEA, including the USA, where enabled and consented.
Safeguards: Where required, we use Standard Contractual Clauses (SCCs) or equivalent lawful mechanisms.
10) Retention and Delete Account
We retain personal data only as long as needed for the purposes described above, unless longer retention is required by law.
Community Kitchen: meals you have shared that have not been adopted by any other user within a defined period are automatically removed from the community list. The meal remains in your personal My Kitchen list regardless.
Operational retention (examples):
- Security and abuse prevention logs: retained for a limited period to protect the service and investigate misuse.
- Support communications: retained as needed to resolve issues and maintain an audit trail where appropriate.
Payment and transaction records: Where required for accounting, tax, and compliance purposes, we retain payment-related records for the period required by applicable law. Purchases are processed by Apple/Google, and we do not store full payment card details.
Request logs: We retain records of privacy requests and our responses (e.g., request type and timestamps) for a limited period to demonstrate compliance, prevent abuse, and maintain auditability.
Limited period: Where we refer to a “limited period,” this generally means months, not years, unless we must retain data longer to meet legal obligations or to establish, exercise, or defend legal claims.
TLT offers an in-app Delete Account flow with two scenarios:
Option A — Delete my account and keep only anonymous statistics
- We delete personal identifiers and remove all means of linking records back to you.
- We retain only truly anonymous consumption statistics to improve analytics.
- Once anonymised, the retained statistics cannot be linked back to you.
- We remove your shared meals from the Community Kitchen list. Meals already adopted by other users remain in their personal lists as independent copies carrying only a community provenance marker with no link to your account or identity.
Option B — Delete my account and delete all my personal data
- We delete personal data associated with your account, including consumption logs and derived indicators.
- We remove your shared meals from the Community Kitchen list. Meals already adopted by other users remain in their personal lists as independent copies carrying only a community provenance marker with no link to your account or identity. These copies cannot be reshared to the Community Kitchen.
Data is removed from active systems. It may persist in encrypted backups for up to 7 days before being overwritten.
11) Cookies & tracking (website only)
Essential cookies are required for the website to function securely. With your consent, we may enable:
- Analytics cookies/tags via Google Tag Manager (GTM), including Google Analytics 4 (GA4)
- Marketing/advertising cookies/tags, including Google Ads conversion tracking and the Meta Pixel
- Marketing cookies may also be used to show you ads on other platforms where you have opted in
You can withdraw consent at any time via the website cookie preference controls and/or your browser settings.
Where these tools process data outside Switzerland/EU/EEA, we apply appropriate safeguards required by applicable law.
12) Security
We use reasonable technical and organisational measures to protect personal data (e.g., encryption in transit and at rest, access controls, and monitoring).
Future plan: employ distributed ledger technology (DLT) to support technically enforced fine-grained access rights and stronger decentralization of control.
13) Your rights and choices
You can:
- access and correct much of your data in the app (e.g., Settings)
- manage optional Data Contracts in the app (Settings → Data Transparency)
- delete your account in-app (Option A or B, Settings → Account)
- submit privacy requests (EU/UK): https://app.prighter.com/portal/thelivelythree-privacy
- contact us (all regions): privacy@thelivelythree.earth
Identity verification: We may need to verify your identity before fulfilling certain requests to protect your data.
EU/EEA and UK users may have additional rights (including portability, restriction, and objection) and may log a complaint with their supervisory authority. Canadian users may raise concerns with the Office of the Privacy Commissioner of Canada.
14) Changes to this policy
We will post updates here with a new "Last Updated" date. Important changes may be notified to registered users.
15) Contact
Email: privacy@thelivelythree.earth
Address: Beeqster GmbH, Bühlstrasse 18, 8172 Niederglatt, Switzerland
Representative Certificates
EU (Article 27 GDPR) Certificate:
UK (UK GDPR) Certificate:
