Privacy Policy

1. Who we are

Ceven Labs is a registered Danish company (CVR: 46571975), based in Aarhus, Denmark. We are the developer and publisher of the LayOvr iOS application.

For privacy inquiries, contact us at: hello@cevenlabs.com

2. What data LayOvr accesses

2.1 Health data (HealthKit)

LayOvr requests read-only access to the following data types from Apple HealthKit, with your explicit permission:

• Sleep analysis: to derive your habitual sleep schedule and chronotype (your natural morning/evening preference)
• Heart Rate Variability (HRV): to calibrate the circadian model to your physiology over time

This data is only read on-device and never leaves your iPhone. We do not upload health data to any server. LayOvr does not write to HealthKit.

You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health → LayOvr. Revoking access means the app will use manually-entered sleep times instead of your actual history.

2.2 Location data

LayOvr does not request or use your GPS location. You manually enter airport, hotel, and office names. The app uses Apple's CoreLocation geocoding (on-device) to convert these names into coordinates for commute estimates; this geocoding is processed locally and is not logged by us.

2.3 Flight data (Premium tier only)

When you search for a flight by number (a Premium feature), LayOvr sends the following data to the FlightAware AeroAPI:

• The flight number you entered (e.g. "SK521")
• The requested date

No personal information (name, account, device ID) is sent in these requests. The API query is routed through a Cloudflare Worker proxy operated by Ceven Labs. Flight data is not stored by us beyond your session.

FlightAware's own privacy policy applies to their service: flightaware.com/about/privacy

2.4 Routing data (when configured)

If you configure a Google Maps API key in the app settings for commute estimates, LayOvr will send origin/destination coordinates to Google Directions API. This is an optional feature; the app works without it using a built-in estimation formula. Google's privacy policy applies when this feature is used.

2.5 In-app purchases and subscriptions

All purchases and subscriptions are processed entirely by Apple through the App Store. Ceven Labs does not receive or store your payment details, Apple ID, or billing information. Apple's Privacy Policy governs these transactions.

3. What data we do NOT collect

• We have no account system: no email, no password, no profile
• We do not collect analytics, crash reports, or usage telemetry
• We do not use advertising SDKs or tracking identifiers
• We do not collect device identifiers, IP addresses, or location
• We do not sell, rent, or share your data with third parties for commercial purposes

4. Data storage and retention

All your data (trips, plans, settings, preferences) is stored locally on your device using iOS's standard UserDefaults and on-device persistence. Uninstalling the app permanently deletes all stored data. You can also delete all app data from iOS Settings → LayOvr → Reset App Data (PLACEHOLDER — confirm this UI exists at launch).

5. Children's privacy

LayOvr is designed for adult business travelers. We do not knowingly collect data from children under 13. If you believe a child has used the app and shared data, please contact us.

6. International transfers

Ceven Labs is based in Denmark (EU). The FlightAware API is operated from the United States. When Premium flight lookup is used, flight number queries are transmitted to US-based servers. No personal data is included in these queries.

7. Medical and health disclaimer

LayOvr provides general wellness information based on published circadian science. It is not a medical device and does not provide medical advice or diagnosis. The app's suggestions on sleep, light exposure, and caffeine timing are informational only.

Consult your doctor before following circadian adjustment plans if you have sleep disorders, are pregnant, are taking medication that affects alertness or sleep, or work rotating shifts.

Information about melatonin timing in the app is informational. Melatonin is a regulated substance in some countries and you should verify its legal status and appropriate dosage with a healthcare professional.

8. Your rights (GDPR)

As a company registered in Denmark (EU), we comply with the General Data Protection Regulation (GDPR). Because we do not collect or store personal data on our servers, most GDPR rights apply directly to your own device. You have the right to:

• Access: all your data is visible within the app
• Delete: uninstall the app or use the in-app reset to delete all data
• Revoke health permissions: via iOS Settings at any time
• Contact us: for any privacy questions at hello@cevenlabs.com

9. Changes to this policy

We may update this Privacy Policy as the app evolves. Material changes will be noted in the App Store release notes and the "last updated" date above will be changed. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Ceven Labs
Aarhus, Denmark
CVR: 46571975
Email: hello@cevenlabs.com