Legal
Privacy Policy
Last updated: 10 May 2026 · POPIA compliant
1. Information we collect
We collect information you provide when you create an account (name, email address, phone number), information you give Liv (dietary preferences, health goals, family profiles, grocery lists), and usage data (how you interact with the app, order history, budget information). We do not collect payment card details — all payments are processed by PayFast.
2. How we use your information
We use your information to power Liv's personalised responses, to compare grocery prices across the four major South African stores, to track your budget and savings, to send you price drop alerts and order notifications (only if you opt in), and to improve Eliva for all South African users.
3. Sharing your information
We do not sell your personal information. We share data with Supabase (our database and authentication provider), Anthropic (the AI that powers Liv — your conversation context is sent to their API), Resend (email delivery), Expo (push notifications), and PayFast (payment processing). All providers are contractually bound to protect your data.
4. Data storage and security
Your data is stored in Supabase's secure cloud infrastructure. All data in transit is encrypted using TLS 1.3. Database access is protected by Row Level Security — only you can access your data. We use secure tokens, not passwords stored in plain text.
5. Your rights under POPIA
As a data subject under the Protection of Personal Information Act (POPIA), you have the right to access your personal information, correct inaccurate information, object to processing, and request deletion of your data. To exercise any of these rights, email us at privacy@eliva.co.za. We will respond within 30 days.
6. Data retention
We retain your data for as long as your account is active. If you delete your account, we retain anonymised data for fraud prevention for 90 days, then permanently delete all personal information. Conversation data with Liv is retained for 12 months to provide context, then automatically deleted.
7. Children
Eliva is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.
8. Changes to this policy
We may update this policy as Eliva evolves. We will notify you of material changes via email and in-app notification at least 14 days before the change takes effect.
9. Contact
Questions about this privacy policy? Email privacy@eliva.co.za or write to us at: Eliva, South Africa. We are committed to resolving privacy concerns promptly.