Aava
Privacy Policy
The short version: what you tell Aava stays on your phone. Our servers hold your sign-in email and basic account status. We don’t sell data, and we don’t use ad trackers.
Who we are
Aava (“Aava,” “we,” “us”) makes the Aava app and the website youraava.com. For any privacy question, email [email protected].
What stays on your phone
Everything you tell Aava inside the app: your cycle, your daily check-ins, your birthday, and your answers about your body and lifestyle. This information is stored on your device. It is not stored on Aava’s servers.
If you use iPhone backup, your device’s backup includes a copy of the app’s data in your iCloud account. That copy belongs to you and is protected by Apple. We cannot see it.
What our servers hold
- Account: your sign-in email address and basic account status.
- Security logs: your account ID, the event, the time, and a one-way hash of your network address. Security logs never include your email.
We don’t hold health data on our servers.
AI-personalized guidance
To create your daily cards, Aava sends a limited set of general information to our AI provider: your cycle phase, day in cycle, the categorical answers you choose in Settings, and today’s check-in. If you turn on AI guidance (off by default), Aava also sends your period pain, cycle rhythm, and symptoms for sharper guidance, and you can ask Aava questions.
Aava never sends your name, birthday, exact dates, diagnosed conditions, medications, or anything you write in free text. Our AI provider does not store this information. You can turn AI guidance off at any time in settings.
Waitlist and email
If you join our waitlist on youraava.com, we store your email address and, if you choose to share it, what you most want help with. We use this only to send you beta invites and product updates. Our email service provider processes this on our behalf. Every email includes a way to unsubscribe.
Website
Our website does not use advertising trackers or sell visitor data. We use Cloudflare Web Analytics, which does not use cookies or track you across other sites.
What we never do
- Sell your personal information.
- Share your health information with advertisers or data brokers.
- Use your information for targeted advertising.
Service providers
We use a small number of trusted providers to run Aava, including for sign-in, email delivery, hosting, and AI guidance. They process information only to provide their service to us.
Your choices and rights
- Delete the app’s data by deleting the app from your phone.
- Ask us to delete your account and the email we hold by writing to [email protected].
- Unsubscribe from emails at any time.
Depending on where you live, you may have additional rights, such as the right to access, correct, or delete personal information. Contact us and we will respond within the time required by law.
Children
Aava is not intended for anyone under 16, and we do not knowingly collect information from children.
Security
Aava is built by a software engineer who designs for security first. We keep what we hold to a minimum and protect it with industry-standard safeguards. No system is perfectly secure, but holding less data means there is less to put at risk.
Changes
If we change this policy, we will update the date above. If a change is significant, we will tell you in the app or by email before it takes effect.