California Privacy Rights Act (CPRA)
Privacy Policy for California Residents
Last Updated: July 3, 2026
For California Residents
This page outlines your privacy rights under the California Privacy Rights Act (CPRA), which amended the California Consumer Privacy Act (CCPA) effective January 1, 2023.
Not in California? See regional privacy rights for EU (GDPR), India (DPDP), or other locations.
Does CPRA Apply to Me?
CPRA protections apply to you if:
- You are a California resident (regardless of where you're currently located)
- Your personal information is collected or processed by LevoroFit
What is CPRA?
The California Privacy Rights Act (CPRA) is one of the strongest consumer privacy laws in the United States. It gives California residents significant control over their personal information, similar to the EU's GDPR.
✓ We Do NOT Sell Your Personal Information
LevoroFit does not sell, rent, or share your personal information with third parties for monetary or other valuable consideration.
You do not need to opt-out of data sales because we don't engage in this practice.
Categories of Personal Information We Collect
Under CPRA, we are required to disclose the categories of personal information we collect:
1. Identifiers
What we collect: Name, email address, phone number, username
Purpose: Account creation, authentication, communication
Shared with: Service providers (Firebase, SendGrid)
2. Sensitive Personal Information (Requires Explicit Consent)
Health Data - Opt-In Required
We only collect health data after you explicitly opt-in and provide consent.
What we collect (with consent): Weight, height, body measurements, sleep patterns, dietary preferences, exercise habits, water intake, age, gender
Purpose: Nutrition coaching, meal planning, fitness tracking, wellness recommendations
Shared with: Your chosen wellness professional (nutritionist, coach, trainer)
3. Commercial Information
What we collect: Subscription plan, payment history, transaction records
Purpose: Billing, service delivery, customer support
Shared with: Payment processors (Stripe, Razorpay)
4. Internet/Network Activity
What we collect: IP address, browser type, device information, login timestamps, usage patterns
Purpose: Security monitoring, fraud prevention, service improvement
Shared with: Cloud infrastructure providers (Google Cloud)
Your California Privacy Rights
Under CPRA, you have the following rights:
1. Right to Know
You have the right to know what personal information we collect, use, disclose, and sell (if applicable).
How to exercise: Email privacy@levorofit.com or use "Export My Data" in account settings.
2. Right to Access
You can request a copy of all personal information we've collected about you in the last 12 months.
How to exercise: Use "Export My Data" feature or email privacy@levorofit.com. We'll respond within 45 days.
3. Right to Delete
You can request deletion of your personal information (subject to certain exceptions required by law).
How to exercise: Use "Delete My Account" in settings or email privacy@levorofit.com. Data is purged within 180 days.
4. Right to Correct
You can request correction of inaccurate personal information we maintain about you.
How to exercise: Update information directly in account settings or email privacy@levorofit.com.
5. Right to Data Portability
You can obtain a copy of your personal information in a portable, machine-readable format (JSON).
How to exercise: Use "Export My Data" feature in account settings.
6. Right to Opt-Out of Sale or Sharing
You can opt-out of the "sale" or "sharing" of your personal information.
Status: ✓ Not applicable - We do NOT sell or share your data for advertising purposes.
7. Right to Limit Use of Sensitive Personal Information
You can limit our use of your sensitive personal information (health data) to only what's necessary to provide services.
How to exercise: Withdraw health data consent in Settings → Privacy or email privacy@levorofit.com.
8. Right to Non-Discrimination
We will not discriminate against you for exercising your CPRA rights (no denial of service, different pricing, or lower quality).
Note: Some features require health data to function (e.g., meal plans require weight data). Withdrawing consent may limit feature availability.
How to Exercise Your Rights
Submit a Request
You can exercise your California privacy rights by:
- • Email: privacy@levorofit.com
- • Phone: +91 94748 32695
- • In-App: Settings → Privacy → Manage My Data
Response Time: We will respond to verifiable requests within 45 days (may extend to 90 days for complex requests).
Verification: We may ask you to verify your identity to protect your privacy.
Authorized Agents
You may designate an authorized agent to submit requests on your behalf. The authorized agent must:
- • Provide written permission signed by you
- • Verify their own identity
- • Provide proof of authorization
Service Providers & Third Parties
We share personal information with the following categories of third parties:
| Category | Third Party | Purpose |
|---|---|---|
| Cloud Infrastructure | Google Cloud Platform | Data storage, hosting |
| Authentication | Firebase (Google) | User authentication |
| Email Delivery | SendGrid (Twilio) | Transactional emails |
| Payment Processing | Stripe, Razorpay | Subscription payments |
All service providers are contractually bound to protect your data and use it only for the specified purposes.
Data Retention
- Active accounts: Data retained while your account is active
- Deleted accounts: Personal data purged within 180 days
- Billing records: Retained for 7 years (California tax law requirement)
- Security logs: Retained for 1 year (security purposes)
California "Shine the Light" Law
Under California Civil Code Section 1798.83, California residents can request information about how we've shared personal information with third parties for their direct marketing purposes.
Our Status: We do NOT share personal information with third parties for their direct marketing purposes.
Contact Us
For questions about this CPRA policy or to exercise your rights:
Privacy & Data Protection Team
We will respond to all requests within 45 days (CPRA requirement).
File a Complaint
If you believe we've violated your CPRA rights, you can file a complaint with the California Attorney General:
California Attorney General's Office
Privacy Enforcement and Protection Unit
Website: oag.ca.gov/privacy
Not in California?
See your regional privacy rights: