Ulivo Privacy Policy

Effective date: October 21, 2026 · Last updated: October 21, 2026 · Version: privacy-2026-11

Ulivo plans weekly family dinners. You set up your household on getulivo.com and plan your dinners by chatting with an AI assistant you connect, such as Muse. This policy explains what personal information we collect, why, who receives it, how long we keep it, and the rights and choices you have.

The short version

• We use your household's information to plan your dinners and shopping lists and to run your account, and for nothing unrelated.
• We don't sell personal information, don't share it for targeted advertising, and don't use it to train AI models. (An AI assistant you connect is run by another company under its own policy; see Section 7.)
• Allergies, calorie targets and weight goals are health information. We store them only with explicit consent, and you can withdraw consent and delete them at any time.
• Accounts are for adults (18+). Parents and guardians add children as profiles and are responsible for the information they enter.
• You can see, edit, export and delete your data yourself, in Settings.

1. Who we are

Ulivo is provided by HumanIntelligence, Lda, a private limited company (sociedade por quotas) registered in Portugal (registered office: Rua do Convento, antigo Convento Subserra, s/n, 2600-635 Castanheira do Ribatejo, Portugal; NIPC/NIF: 514246952). We are the data controller of the personal information described in this policy (the "business" under US state privacy laws, and the "regulated entity" under US consumer-health-data laws).

Privacy contact: support@getulivo.com · Post: HumanIntelligence, Lda, Rua do Convento, antigo Convento Subserra, s/n, 2600-635 Castanheira do Ribatejo, Portugal.

Because we are established in the EU, the EU General Data Protection Regulation (GDPR) and Portuguese data protection law apply to our processing, wherever you live. US state privacy and health-data laws may also apply. We have not appointed a Data Protection Officer; contact us at the address above about anything in this policy.

2. What this policy covers

This policy covers getulivo.com, your Ulivo account and billing pages, the Ulivo connector that AI assistants use, and our emails. It does not cover services run by other companies, such as Muse (Meta) or other AI assistants, Instacart, or Stripe, even when you reach them through Ulivo. Their own privacy policies apply.

3. What we collect

3.1 Information you (or other adults in your household) give us

Please use only first names or nicknames for household members, and don't enter information Ulivo doesn't ask for.

3.2 Information collected automatically

• Sign-in and security: a session cookie, a form-protection (CSRF) token, a short hash of your browser's user agent, and your IP address (in rate-limit counters and server logs).
• Assistant activity: for each request an assistant makes, which tool was used, whether it worked, how long it took and the shape of the request (field names, not your words).
• No advertising tracking: no ad networks, tracking pixels or third-party analytics on our website, and no open or click tracking in our emails.

3.3 Information from others

• Other adults in your household may add or edit information about you (for example your food rules or allergies).
• AI assistants you connect send us the requests you make through them (for example "add peanuts to Mia's allergies").
• Stripe tells us whether payments succeed or fail and the status of your subscription.
• Nutrition data comes from public databases (USDA FoodData Central). It's about foods, not about you.

4. How we use your information, and our legal bases

Ulivo personalizes your plans automatically based on your household's rules and ratings. We don't make decisions about you that have legal or similarly significant effects, and we don't use your information for targeted advertising or to build profiles for anyone else. We don't sell personal information, and we don't use your information to train AI models.

If we want to use your information for a new purpose that isn't compatible with these, we'll tell you first and, where required, ask for your consent.

5. Health information and Consumer Health Data Privacy Policy

This section is our Consumer Health Data Privacy Policy (also published on its own page, Consumer health data) for the purposes of laws such as Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's consumer health data provisions, and explains how we handle special-category (health) data under the GDPR.

5.1 What we collect. Allergies that you enter for anyone in your household, optional dinner calorie targets for adults, and an optional weight goal for an adult (a target in pounds, such as "lose 5 lbs"). Ulivo only records a weight goal and shows it back to you, on getulivo.com and in your connected assistant. We don't use it to set or suggest calorie targets, portion sizes or dinners. Some diets you enter (such as "gluten-free" or "low sodium") may also indicate a health condition, and we treat them with the same care. We don't ask for diagnoses, medications, your current weight, or medical records; please don't enter them.

5.2 Sources. The account holder or another adult in the household, on getulivo.com or through a connected AI assistant. Children never give us information themselves.

5.3 Why we use it. Only to leave allergens out of planned dinners and shopping lists, warn you about conflicts, size adult portions, and show an adult's weight goal back to them. Calorie targets and weight goals are for adults only; we never set them for children or teens.

5.4 Consent. We store health information only after the account holder gives explicit consent by agreeing to our consent text on getulivo.com or through the assistant. We record when, which version and through which channel. Because your connected assistant receives this information when it plans with you, the consent text tells you so and asks you to agree to that sharing separately. For a child, the parent or guardian gives consent on the child's behalf. For another adult, the account holder confirms that adult has agreed, and the adult can withdraw consent or ask us to delete their information at any time.

5.5 Who receives it.

• Other adults in your household.
• The AI assistant you connect, when it asks Ulivo to plan, so it can help you. That company (for example Meta for Muse) handles it under its own privacy policy, not ours.
• Our service providers (processors), only to store and transmit it for us: hosting and database (Section 6).
• We do not send health information to Instacart. A shopping list you send to Instacart contains ingredient names and quantities only, though which items are on it (for example only gluten-free products) may itself suggest a dietary need.
• We never sell health information or use it for advertising.

5.6 Your rights over health information. You can see and edit it in Settings → Family; withdraw consent in Settings → Privacy (this deletes every allergy, calorie target and weight goal in the household; we warn you first that future plans will stop avoiding those allergens); or email us to confirm whether we hold your consumer health data, get a copy, get a list of every third party and affiliate we've shared it with (with contact details), withdraw consent, or have it deleted. We don't discriminate against you for using these rights. Withdrawing consent doesn't affect processing before you withdrew.

5.7 Retention. Until consent is withdrawn, the person is removed (then 30 days so you can undo, then deleted), or the household or account is deleted, or the household has been paused for the period in Section 10. Deleted data leaves our encrypted backups within 30 days.

6. Who receives your information

6.1 Our service providers (processors)

They may use your information only to provide their service to us, under written data processing terms.

Stripe also acts as an independent controller for some purposes (such as fraud prevention and meeting financial regulations) under its own privacy policy.

Each provider's data processing terms, and the basis for transfers to the United States (Section 8), as each publishes them:

• Render: Render's Data Processing Addendum (render.com/dpa); Render is certified under the EU–US Data Privacy Framework. Render's own sub-processors, listed at render.com/trust, are Amazon Web Services, Google Cloud Platform, Cloudflare and ClickHouse, all in the United States.
• Postmark: the Postmark Data Processing Addendum (postmarkapp.com/dpa), part of the Postmark Terms of Service; Postmark's operator, AC PM, LLC (an ActiveCampaign company), is certified under the EU–US Data Privacy Framework as a covered entity of ActiveCampaign, LLC, with Standard Contractual Clauses in the addendum as a fallback.
• Stripe: Stripe's Data Processing Agreement (stripe.com/legal/dpa), part of the Stripe Services Agreement; Stripe is certified under the EU–US Data Privacy Framework, with Standard Contractual Clauses as a fallback.
• Have I Been Pwned: receives no personal information (only a 5-character prefix of a password hash).

6.2 Other recipients

• The AI assistant you connect (such as Muse by Meta, or Claude or ChatGPT if you use them): what Ulivo's tools return when you ask, such as household names, food rules including allergies, plans and lists. It is an independent company that decides for itself how to use what it receives, under its own terms and privacy policy, which may include keeping your conversations. Check its privacy settings. You choose full or read-only access when connecting and can disconnect it any time in Settings → Connected apps.
• Other adults in your household, once you invite them, see the shared household information.
• Instacart, only when you choose to create a shopping-list link: ingredient names and quantities, with no names, email or health information. When you open the link, you are on Instacart, and Instacart's privacy policy applies. We may earn a commission on resulting orders.
• Legal and safety: where the law requires it, or where needed to protect anyone's safety, to prevent fraud, or to establish or defend legal claims.
• A buyer or successor: if our business is sold, merged or reorganized, your information may transfer to the new owner, who must keep honoring this policy; we'll tell you beforehand.

We don't sell personal information and don't "share" it for cross-context behavioral advertising, and have not done so in the past 12 months.

7. AI assistants

Ulivo is designed to be used through AI assistants, but Ulivo does not run the assistant. When you connect one:

• Ulivo returns information to it only when it calls Ulivo's tools on your behalf, and only within the permissions you approved.
• The assistant's company (for example Meta for Muse) decides how it stores, uses and retains your conversation and the information Ulivo returns, under its own policy. Our promises in this policy (for example, not using data to train AI) apply to Ulivo, not to that company.
• You can disconnect at any time; this stops new access, but doesn't delete what the assistant already received. Use the assistant's own settings to delete that.

8. International transfers

We are based in Portugal and our main service providers store data in the United States. When personal information is transferred outside the European Economic Area, we rely on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the European Commission's Standard Contractual Clauses, with additional safeguards where needed (such as encryption in transit and at rest). You can ask us for a copy of the relevant safeguards.

9. Children and teens

• Ulivo is not directed to children, and accounts are for adults (18+). Children and teens never get logins.
• A parent or guardian can add profiles for children and teens (first name or nickname, age band, food rules, schedule, and, with consent, allergies). That adult is responsible for the information they enter, consents to its use on the child's behalf, and can view, change or delete it at any time (Settings → Family, or by emailing us). We use children's information only to plan the household's dinners, never for advertising, and never set calorie targets for anyone under 18.
• We don't knowingly collect personal information directly from children under 13. If you believe a child has given us information directly, email us and we'll delete it.

10. How long we keep information

11. Your rights and choices

11.1 Do it yourself on getulivo.com

• See and edit your household and food rules (Settings → Family), your account (Settings → Account) and connected assistants (Settings → Connected apps).
• Withdraw health-data consent (Settings → Privacy).
• Delete your account, and your household if you're the owner (Settings → Account → Delete account). We email a confirmation link. After you confirm, access ends immediately, and your data is deleted from our live systems, usually within 24 hours, and from backups within 30 days, except records we must keep by law (Section 10). Deleting a household removes it for its other adults too; they keep their own accounts, and we email them.
• Leave a household you joined. Your account stays, but your profile (name, food rules, allergies) stays in that household for the owner unless you ask the owner or us to remove it.
• Unsubscribe from product news with the link in any such email.

11.2 Rights under the GDPR (everyone)

Because we are an EU company, you have the right to access, correct, delete and port your data, to object to processing based on legitimate interests, to restrict processing, and to withdraw consent at any time (this doesn't affect processing before you withdrew). We respond within one month (extendable by two months for complex requests; we'll tell you). You may also complain to a data protection authority. Our lead authority is Portugal's Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt; you can also contact the authority where you live or work.

11.3 Rights under US state laws

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Washington, Nevada and other states), you may have the right to:

• know what personal information we collect, use and disclose, and get a copy in a portable format;
• correct inaccurate information;
• delete your information;
• opt out of sale, sharing for targeted advertising, and profiling with significant effects (we don't do any of these; we also honor Global Privacy Control signals as an opt-out request);
• limit the use of sensitive personal information (we use it only to provide the Service you asked for, as permitted, so no further limit is needed); and
• not be discriminated against for using your rights.

We offer these rights to all our users, whether or not a law requires it.

California notice at collection (last 12 months). Categories we collect: identifiers (name, email, IP address, account IDs); customer records (billing status); characteristics of protected classifications (age band, and diets that may reveal religion); commercial information (subscription history, shopping lists); internet or other electronic activity (logs, tool usage); sensitive personal information (account login credentials, and health information: allergies, calorie targets and weight goals); and inferences limited to your household's food preferences. Sources, purposes and recipients are described in Sections 3, 4 and 6. We disclose these categories to service providers for business purposes only; we have not sold or shared personal information, including of consumers under 16. Retention: Section 10.

11.4 How to make a request

Email support@getulivo.com from your account email address, or use the self-service tools above. We'll verify your identity, usually by confirming through your account email. An authorized agent may make a request with your signed permission; we may ask you to confirm your identity directly. We respond within the time the law requires (one month under the GDPR; 45 days under most US state laws, extendable where allowed). If we decline your request, you can appeal by replying to our answer with "Appeal" in the subject; we'll answer within the time the law requires (usually 45–60 days), and if you're unhappy with the result you can contact your state Attorney General.

12. Security

We protect your information with measures including: passwords hashed with Argon2; sign-in and access tokens stored only as keyed hashes, with private-link and token secrets encrypted; HTTPS for all traffic; encryption at rest on our hosting provider (Render encrypts its managed Postgres databases, their replicas and backups with AES-256); households separated from each other in the database; assistant access through OAuth with permissions you approve and can revoke; and access to production data limited to people who need it. No system is completely secure, and we can't guarantee the security of information you send us. Keep your password private and use a unique one.

If a breach affects you. If a personal data breach is likely to put your rights at risk, we will notify the CNPD within 72 hours where required, notify you without undue delay, and notify any US regulator (such as the US Federal Trade Commission or a state Attorney General) as the law requires. Report security issues to security@getulivo.com.

13. Cookies

We use only strictly necessary cookies: a session cookie to keep you signed in and a security (CSRF) token to protect forms. We don't use advertising, analytics or tracking cookies, so we don't ask for cookie consent. If this changes, we'll update this policy and ask for consent where required.

14. Emails we send

Service emails (verification, password reset, invites, trial-ending and renewal reminders, payment receipts and failures, deletion notices, and important changes to our Terms or this policy) are part of the Service and you can't opt out of them while you have an account. Product news is sent only if you opted in; unsubscribe with the link in any such email or in Settings → Account. If you join the waiting list before Ulivo opens, we send one email confirming you joined and one when Ulivo opens, through our email provider (Postmark).

15. Changes to this policy

If we make a material change, we'll update the date above and tell you by email or in the app before the change takes effect. We'll ask for your consent again before using health information in a new way, or where the law otherwise requires it. Earlier versions are available on request.

16. Contact

HumanIntelligence, Lda · Rua do Convento, antigo Convento Subserra, s/n, 2600-635 Castanheira do Ribatejo, Portugal · NIPC/NIF 514246952 Privacy and support: support@getulivo.com · Security: security@getulivo.com Supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt