Privacy Policy

Version 3 · Last updated 14 October 2026

Livo keeps your photos, stories and recordings on your phone and in storage you choose. Livo Enterprises does not collect them, does not see them, and has no servers that could.

This policy applies to Livo, sold on the App Store as LivoCapsule.

What Livo keeps, and where

Everything Livo makes is stored on your iPhone or iPad: the names, places and stories you add to your photos, the Memories you assemble, your narration recordings, the Time Capsules you seal, the text Livo reads from scanned prints, what Livo Search has learned from you (the meanings you confirmed and your recent searches), and your settings. A count of the free Memories you have created is also kept in your iOS keychain, so that reinstalling the app does not reset it. Your photos and videos themselves stay in your Camera Roll or your OneDrive; Livo keeps a small copy of each photo so that it can still show you one that is no longer in Photos.

Time Capsules and backups are ordinary files. Capsules are kept in the Files app, under On My iPhone › Livo › TimeCapsules, so you can copy them wherever you like. None of this is sent to Livo Enterprises.

Permissions the app asks for

Each permission is asked for the first time a feature needs it, and each can be withdrawn at any time in iOS Settings. Livo keeps working without it, minus that feature.

• Photos. To show your photo library, bring photos into Livo, and save new photos (edited copies, Memory videos, scanned prints, photos received from family) to it. If you allow only some photos, Livo works with those. Livo never deletes or changes an original.
• Camera. Only for Scan Prints, which photographs printed pictures one at a time with Apple’s document scanner. The scans are saved to your Camera Roll.
• Microphone. Only when you tap record, to capture a narration. The recording is saved on your device with the Memory it belongs to.
• Location. Livo reads the location already inside your photos to suggest place names. It never tracks where your device is.
• Notifications. Livo may tell you, quietly, when a family member has shared something or when a Time Capsule’s stored copy needs attention. Notifications are made on your phone; nothing is sent through a server. You can turn them off in iOS Settings.
• Background App Refresh. When allowed, Livo occasionally checks your family’s shared folders and your Time Capsules’ stored copies while it is closed. It downloads nothing in the background.

Reading the text in a scanned print, and finding faces so you can name them, happen on your device with Apple’s own frameworks. Livo never guesses who a person is; every name is one you typed or tapped.

Microsoft OneDrive (optional)

If you choose to sign in to a Microsoft account, Livo uses Microsoft’s own sign-in. Your Microsoft password is never seen by the app; a sign-in token is kept in the device’s secure keychain, and signing out removes it. Requests go from your device to Microsoft and nowhere else. Microsoft’s handling of your account is governed by Microsoft’s privacy statement.

With OneDrive, Livo can:

• read photos and videos from the folders you pick;
• keep a copy of your Livo backups in a folder named Livo Backup, which only you can see;
• keep a copy of each Time Capsule in a folder named Livo Vault, and a write-once copy in Livo Keepsakes, and check them now and then so you are told while a damaged copy can still be repaired;
• keep a capsule you send as a link in a folder named Livo Sent, and share that link with the person you choose;
• share Memory videos, photos and capsules with your family through a folder named Livo Family Share, which Livo shares with the family members you choose, as view-only, and read what your family has shared in theirs.

Livo writes only inside those folders in your own OneDrive, deletes there only what you ask it to delete, and never writes in another person’s drive.

Other places you choose

You can ask Livo to keep copies of your Time Capsules in other folders you pick in the Files app, such as iCloud Drive or another cloud service. Livo writes only its own capsule files there and never deletes anything in those folders.

What we don’t do

• No accounts. There is nothing to sign up for.
• No analytics, usage tracking or advertising identifiers.
• No crash reporting beyond what Apple collects under your own iOS settings.
• No third-party code that sends data anywhere, other than Microsoft’s sign-in library used for OneDrive.
• No sale or sharing of personal information, because we have none.

Capsules and files you share

A Time Capsule is a file you make and send. It holds the photos, videos, story and narration of a Memory, and the names of the people and places you tagged. A photo exported from Livo carries the names, place and story you gave it in fields other apps can read. Once you share a file, it is in the hands of whoever you sent it to, like any file.

Send Feedback

In Settings, the Send Feedback button at the bottom (in the About section) opens your mail app with a message addressed to [email protected]. It fills in Livo’s build and version, the iOS version and your phone’s model. Nothing is sent unless you send it, and we use what you send only to answer you and to fix what you report.

Purchases

Livo is sold through the App Store. Apple processes the payment and tells the app only that a purchase was made. We do not receive your name, payment details or Apple ID. Livo Full is a one-time purchase and there is no subscription.

Children

Livo is a general-audience app and does not knowingly collect information from anyone, including children, because it does not collect information.

Changes

When this policy changes, its version and date at the top change with it and the new version is published here. A change will never reduce the protections above without a new version of the app that asks for your consent.

Contact

Livo Enterprises LLC — [email protected]