Privacy Policy

1. Who we are

Ceven Labs is a business registered in Denmark (CVR: 46571975), based in Aarhus, Denmark, and is the data controller for the products covered by this policy. We develop and publish the LayOvr iOS application and the tools on cevenlabs.com.

For privacy inquiries, contact us at: [email protected]

2. What data LayOvr accesses

2.1 Health data (HealthKit)

LayOvr requests read-only access to the following data types from Apple HealthKit, with your explicit permission:

• Sleep analysis: to derive your habitual sleep schedule and chronotype (your natural morning/evening preference)
• Heart Rate Variability (HRV): to calibrate the circadian model to your physiology over time

This data is only read on-device and never leaves your iPhone. We do not upload health data to any server. LayOvr does not write to HealthKit.

You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health → LayOvr. Revoking access means the app will use manually-entered sleep times instead of your actual history.

2.2 Location data

LayOvr does not request or use your GPS location. You manually enter airport, hotel, and office names. The app uses Apple's CoreLocation geocoding (on-device) to convert these names into coordinates for commute estimates; this geocoding is processed locally and is not logged by us.

2.3 Flight data (Premium tier only)

When you search for a flight by number (a Premium feature), LayOvr sends the following data to the FlightAware AeroAPI:

• The flight number you entered (e.g. "SK521")
• The requested date

No personal information (name, account, device ID) is sent in these requests. The API query is routed through a Cloudflare Worker proxy operated by Ceven Labs. Flight data is not stored by us beyond your session.

FlightAware's own privacy policy applies to their service: flightaware.com/about/privacy

2.4 Routing data (when configured)

If you configure a Google Maps API key in the app settings for commute estimates, LayOvr will send origin/destination coordinates to Google Directions API. This is an optional feature; the app works without it using a built-in estimation formula. Google's privacy policy applies when this feature is used.

2.5 In-app purchases and subscriptions

All purchases and subscriptions are processed entirely by Apple through the App Store. Ceven Labs does not receive or store your payment details, Apple ID, or billing information. Apple's Privacy Policy governs these transactions.

3. Bike Fit web tool

The Bike Fit tool runs entirely in your browser. The body measurements you enter are processed locally on your device, are never transmitted to us or anyone else, and disappear when you close the page.

4. This website (cevenlabs.com)

cevenlabs.com uses no cookies, no analytics, and no tracking. Two technical points for transparency:

• Hosting: the site is served by GitHub Pages (GitHub, Inc.). Like any web host, GitHub may log IP addresses of visitors for security purposes; see GitHub's privacy statement. We do not receive or store these logs.
• Fonts: pages load fonts from Google Fonts, which means your browser sends a standard font request (including your IP address) to Google when a page loads. See Google's privacy policy.

5. What data we do NOT collect

• We have no account system: no email, no password, no profile
• We do not collect analytics, crash reports, or usage telemetry
• We do not use advertising SDKs or tracking identifiers
• We do not collect device identifiers, IP addresses, or location
• We do not sell, rent, or share your data with third parties for commercial purposes

6. Data storage and retention

All your data in our apps (trips, plans, settings, preferences) is stored locally on your device using iOS's standard on-device persistence. Uninstalling an app permanently deletes all data it stored. We hold no copy and cannot recover it for you.

7. Children's privacy

Our products are designed for adults. We do not knowingly collect data from children under 13 — and since we collect no data at all, no such data reaches us. If you have concerns, please contact us.

8. International transfers

Ceven Labs is based in Denmark (EU). The FlightAware API used by LayOvr Premium is operated from the United States. When Premium flight lookup is used, flight number queries are transmitted to US-based servers. No personal data is included in these queries.

9. Medical and health disclaimer

Ceven Labs products provide general wellness information based on published research. They are not medical devices and do not provide medical advice or diagnosis.

LayOvr's suggestions on sleep, light exposure, and caffeine timing are informational only. Consult your doctor before following circadian adjustment plans if you have sleep disorders, are pregnant, are taking medication that affects alertness or sleep, or work rotating shifts. Information about melatonin timing is informational; verify its legal status and appropriate dosage with a healthcare professional. See our Terms of Use for the full health disclaimer.

10. Your rights (GDPR)

As a business registered in Denmark (EU), we comply with the General Data Protection Regulation (GDPR). Because we do not collect or store personal data on our servers, most GDPR rights apply directly to your own device. You have the right to:

• Access: all your data is visible within the apps
• Delete: uninstall the app to delete all data
• Revoke health permissions: via iOS Settings at any time
• Complain: to the Danish Data Protection Agency (Datatilsynet) if you believe we have processed your data unlawfully
• Contact us: for any privacy questions at [email protected]

11. Changes to this policy

We may update this Privacy Policy as our products evolve. Material changes will be noted in App Store release notes and the "last updated" date above will be changed. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

Ceven Labs
Aarhus, Denmark
CVR: 46571975
Email: [email protected]