Privacy Policy

Effective Date: April 2, 2026

Last Updated: April 2, 2026

At Orvi AI, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Orvi AI mobile application, the website at orvi.ai, and all related services (collectively, the "Service").

1. Information We Collect

Information you provide

• Account information: Email address, phone number, display name, and profile photo when you create an account.
• Onboarding data: Gender, age range, fitness level, wellness goals, dietary preferences, and schedule preferences you share during setup.
• Daily interactions: Check-in responses (energy level, sleep quality), evening wrap ratings, card feedback, and chat messages with the AI Director.

Health data (with your permission)

• If you grant access, we read data from Apple HealthKit including sleep duration, step count, and heart rate. This data is used solely to personalize your daily wellness content.
• We do not sell HealthKit data. We do not use HealthKit data for advertising. We do not share HealthKit data with third parties except as needed to provide the Service (see Section 3).

Information collected automatically

• Device information: Device model, operating system version, app version, and unique device identifiers.
• Usage analytics: Pages visited, features used, session duration, and interaction patterns. We use this to understand how the Service is used and to improve it.
• Push notification tokens: If you enable notifications, we store your device token to deliver push notifications.

2. How We Use Your Information

We use your information to:

• Provide, personalize, and improve the Service, including generating your daily wellness content using AI.
• Process your subscription and manage your account.
• Send you push notifications about your daily script, reminders, and service updates (with your consent).
• Analyze usage patterns to improve features and fix issues.
• Respond to your support requests.
• Comply with legal obligations and protect against fraud or abuse.

3. Third-Party Services

We use the following third-party services to operate Orvi AI. Each processes only the data necessary for its function:

• Supabase — Database hosting and user authentication.
• RevenueCat — Subscription management and billing through Apple In-App Purchase.
• PostHog — Product analytics to understand usage patterns (anonymized where possible).
• Firebase (Google) — Push notification delivery.
• OpenAI — AI-powered content generation and personalization.
• Anthropic — AI-powered content generation and personalization.
• Mux — Video hosting and streaming for movement content.
• Cloudflare (R2) — Secure file and media storage.

We do not sell your personal information to any third party. We share data with these providers only as necessary to deliver the Service.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it (for example, billing records).

5. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication tokens, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data and account.
• Opt-out of analytics: Contact us to opt out of non-essential analytics tracking.
• Withdraw consent: You can revoke HealthKit access at any time through your device Settings. You can disable push notifications at any time.

To exercise any of these rights, contact us at support@orvi.ai. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, email us at support@orvi.ai.

8. European Economic Area Residents (GDPR)

If you are in the EEA, our legal bases for processing your data include: your consent (for HealthKit data and notifications), contractual necessity (to provide the Service you subscribe to), and legitimate interests (to improve the Service and ensure security). You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at support@orvi.ai to exercise these rights.

9. Children's Privacy

Orvi AI is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has submitted data to us, please contact us at support@orvi.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email and update the "Last Updated" date above. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

ORVI AI LLC
Los Angeles, California
support@orvi.ai