Privacy Policy

Effective Date: April 2, 2026

Last Updated: November 3, 2026

At Orvi AI, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Orvi AI mobile application, the website at orvi.ai, and all related services (collectively, the "Service").

1. Information We Collect

Information you provide

• Account information: Email address, phone number, display name, and profile photo when you create an account.
• Onboarding data: Gender, age range, fitness level, wellness goals, dietary preferences, and schedule preferences you share during setup.
• Daily interactions: Check-in responses (energy level, sleep quality), evening wrap ratings, card feedback, and chat messages with the AI Director.
• User content: Profile images and food photos you choose to upload.
• Purchase information: Subscription status and transaction identifiers supplied by Apple, Google Play, RevenueCat, or a separately enabled Stripe flow. Orvi does not store full payment-card details.

Health data (with your permission)

• If you grant access, supported Apple devices may provide HealthKit data and supported Android devices may provide Health Connect data, such as sleep duration, step count, heart rate, or workout context. This data is used solely to personalize your wellness experience.
• We do not sell device health data, use it for advertising, or put health values in analytics records. We process it only as needed to provide the Service (see Section 3).

Information collected automatically

• Device information: Operating system and app version information when it is supplied for compatibility, security, or support.
• Service diagnostics: IP address, request timing, response status, and security events may appear in short-lived infrastructure logs.
• Usage analytics: First-party event and aggregate count records, such as a feature event or completion count. We do not put page names, session duration, or health values in these analytics records, and we do not use a third-party behavioral analytics service.
• Push notification tokens: If you enable notifications on iOS, we store the device token and deliver notifications directly through Apple Push Notification service (APNs). Android remote push is deferred, so no Android remote-push delivery flow is active in the current lean stack.

2. How We Use Your Information

We use your information to:

• Provide, personalize, and improve the Service, including generating your daily wellness content using AI.
• Process your subscription and manage your account.
• Send you push notifications about your daily script, reminders, and service updates (with your consent).
• Review first-party product events and aggregate counts to improve features and fix issues.
• Respond to your support requests.
• Comply with legal obligations and protect against fraud or abuse.

3. Third-Party Services

We use the following infrastructure processors and product integrations to operate Orvi AI. Each processes only the data necessary for its function:

Infrastructure processors

• Supabase — Database hosting, user authentication, and storage.
• Railway — Application hosting and runtime infrastructure.

Product integrations and service providers

• Apple — HealthKit, optional Sign in with Apple, direct APNs delivery, and App Store billing on supported Apple devices.
• Google — Optional Google account sign-in, Health Connect, and Google Play billing on supported Android devices.
• RevenueCat — Subscription entitlement management for supported Apple App Store and Google Play purchases.
• Stripe — Payment services only where separately enabled.
• OpenAI — AI-powered content generation and personalization.
• Anthropic — AI-powered content generation and personalization.
• Voyage AI — Embeddings used to match content to preferences and context.
• Mux — Video hosting and streaming for movement content.

We do not sell your personal information to any third party. We share data with these providers only as necessary to deliver the Service. AI providers may process the profile context, wellness signals, or user content needed to generate a requested response; Orvi does not send them data for advertising or cross-company tracking.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it (for example, billing records).

5. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication tokens, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data and account.
• Analytics choices: Contact us to object to or request deletion of eligible first-party product-event records. We do not use third-party behavioral analytics.
• Withdraw consent: You can revoke HealthKit or Health Connect access at any time through your device settings. You can disable notifications at any time; Android remote push is currently deferred.

To exercise any of these rights, contact us at support@orvi.ai. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, email us at support@orvi.ai.

8. European Economic Area Residents (GDPR)

If you are in the EEA, our legal bases for processing your data include: your consent (for HealthKit or Health Connect data and notifications), contractual necessity (to provide the Service you subscribe to), and legitimate interests (to improve the Service and ensure security). You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at support@orvi.ai to exercise these rights.

9. Children's Privacy

Orvi AI is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has submitted data to us, please contact us at support@orvi.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email and update the "Last Updated" date above. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

ORVI AI LLC
Los Angeles, California
support@orvi.ai