Aava
Consumer Health Data Privacy Policy
The short version: the health information you give Aava is kept on your phone, not on our servers. It goes to AI only if you turn AI on, only to write your guide and answer your questions, and the AI keeps none of it. We never sell it. This page is written for Washington’s My Health My Data Act and similar laws in Nevada and Connecticut, and it applies to everyone who uses Aava. Our Privacy Policy covers everything else.
The consumer health data Aava collects
Inside the app, you choose to tell Aava:
- Your cycle: period days, cycle length, and the cycle day and phase worked out from them.
- Daily check-ins: how you feel, your energy, symptoms, pain, sleep and how packed your day was.
- Your answers in Settings: goals, routine, movement, diet, mind, sleep, training days, period pain, symptoms, and the Health section (menopause, conditions, hormone medications).
- What you write in Ask your Aava, and the short notes about your life it keeps (never about your health).
- Anything Aava works out from these, such as predicted periods, fertile-day estimates and your daily guide.
Where it comes from
Only from you, typed or tapped into the app. We do not buy health data or get it from anyone else.
Why we collect it
To give you the service you ask for: your calendar and predictions, your daily guide, season habits, and replies in Ask your Aava. We never use it for advertising, and we never sell it.
Where it is kept
On your phone. Aava’s servers have no place to store it, and do not store it. If you use iPhone backup, your backup holds a copy that belongs to you and is protected by Apple; we cannot see it.
Who it is shared with
Only if you turn AI on, in the app, on its own screen, separately from our terms. With AI on, the health data described in our Privacy Policy (“How AI is used”) passes through our server to an AI service provider to write your guide and answer your questions. Neither our server nor the AI provider stores it, and the AI provider does not use it to train. Your name, email, birthday and exact dates are never sent. With AI off, nothing goes to AI.
- Categories of third parties: AI service providers that process requests on our behalf, under terms that bar them from keeping the data or using it for their own purposes.
- Affiliates: Aava has none.
- We do not sell consumer health data, and we do not share it with advertisers, data brokers, insurers or employers.
Your rights
- Withdraw consent: turn AI off in Settings at any time. Nothing more goes to AI from then on.
- Delete: delete the app, or delete your account in Settings. That erases Aava’s data on that phone and the account details on our servers.
- Know and access: ask whether we collect, share or sell your consumer health data, and for a list of the third parties it was shared with and how to contact them. You can see everything Aava holds about you in the app, and download the account data our servers hold from Settings.
To make a request, email [email protected] from the email you sign in with, so we can confirm it is you. We answer within 45 days, free of charge. If we need longer, we tell you why within those 45 days; we may take up to 45 more days when the law allows.
Appeals
If we turn down your request, you can appeal by replying to our answer with “Appeal” in the subject. We decide within 45 days and explain why. If you disagree with the outcome, you can contact your state’s attorney general; in Washington, at atg.wa.gov/file-complaint.
Changes
If we change what health data we collect, why, or who it goes to, we update this page and ask for your consent again in the app before the change applies to you.