Privacy Policy

Last updated: February 2025 · Effective when you first use the Lavya AI mobile application ("App").

Lavya AI ("we," "our," or "us") is committed to transparency about how we collect, use, and protect your information. This policy describes our practices for the Lavya AI mobile app on iOS and Android.

1. Who we are

Lavya AI is a goal-achievement app that helps you make progress through daily micro-actions, affirmations (including self-recorded audio), and structured goals. We operate the App and related backend services.

2. Information we collect and how we use it

2.1 Account and profile information

• What we collect: When you sign up, we receive from the sign-in provider (Google or Apple) an identifier and, depending on your choices, your name and email address. You may also provide a display name, age range, gender, and tone preference inside the App.
• How we use it: To create and manage your account, personalize your experience (e.g., tone of content), sync your data across devices, and communicate with you about your account or the App when necessary.
• Where it's stored: Account and profile data are stored in our secure cloud database (Supabase) and, for performance and offline use, cached on your device.

2.2 Goals, actions, affirmations (text), and activity

• What we collect: The goals you set, actions and affirmations (text) you create or select, anti-visions, daily check-ins, action completion, and similar activity data.
• How we use it: To provide the core App experience, sync your progress across devices, support features like weekly review and streaks, and (for Premium) to generate personalized AI suggestions.
• Where it's stored: This data is stored in our cloud database and synced to your device so the App works offline.

2.3 Audio recordings (microphone)

• What we collect: The App requests permission to use your device's microphone so you can record affirmations in your own voice. Those recordings are saved only on your device in the App's storage. We do not upload the audio content to our servers.
• How we use it: Recordings are used solely to play back your affirmations inside the App on the same device. We may store minimal metadata (e.g., that a recording exists and its duration) to support playback and sync of your affirmation list; the actual audio stays on your device.
• Where it's stored: Audio files remain in the App's local storage on your device. Deleting the App or clearing its data will remove these recordings.

2.4 Subscription and payment

• What we collect: If you subscribe to Premium, the App uses the platform's in-app purchase system (Apple App Store or Google Play). We do not see or store your payment card details. We receive from our subscription provider (RevenueCat) and our backend information needed to manage your subscription (e.g., subscription status, expiry).
• How we use it: To grant or remove Premium access, restore purchases, and support subscription and promo-code features.
• Where it's stored: Subscription-related data is stored in our backend and used in line with RevenueCat's and the store's policies.

2.5 AI and content moderation (Premium)

• What we collect: If you use Premium features such as custom goals or AI-generated suggestions, we send the content you provide (e.g., goal text) to our servers. Our servers may use third-party AI and moderation services to generate suggestions and to check that content meets our safety guidelines.
• How we use it: To provide personalized actions, affirmations, and anti-visions, and to block prohibited or unsafe content as described in our in-app guidelines.
• Where it's stored: Your goal and related text are stored in our database; AI providers process content according to their respective privacy and data-processing terms.

2.6 Notifications and schedule

• What we collect: If you enable notifications, we store your chosen reminder times (e.g., morning, midday, evening, weekly review) so we can send you local notifications at those times.
• How we use it: To deliver reminders and support your routine. Notifications are scheduled on your device; we do not track whether you open them.
• Where it's stored: Schedule preferences are stored in our backend and on your device.

3. Third-party services

We use the following types of third-party services to run the App:

• Authentication: Sign-in is handled by Google and Apple. We receive only the account information they make available to us (e.g., identifier, name, email if you consent).
• Backend and database: We use Supabase to store account and app data securely and to run server-side logic (e.g., Edge Functions).
• Subscriptions: RevenueCat and the applicable app store (Apple or Google) process subscription purchases and help us manage Premium access.
• AI and moderation: For Premium AI features and safety checks, we use third-party AI and moderation APIs (e.g., OpenAI) on our servers. Content is processed according to those providers' terms and our instructions.
• Analytics and crashes (if enabled): We may use analytics or crash-reporting tools (e.g., PostHog, Sentry) to improve the App. If we do, we configure them to minimize personally identifiable data and we describe their use in this policy or in-app.

Each of these providers has its own privacy policy. We choose them with care and require that they protect your data in line with applicable law.

4. Data retention and deletion

• Account data: We retain your account and app data for as long as your account is active. If you delete your account (available in Settings) or ask us to delete your data, we will remove or anonymize it in line with our internal procedures and legal obligations.
• Local data: Data stored only on your device (including audio recordings) is removed when you uninstall the App or clear its data.
• Backups and logs: We may retain limited backup or log data for a short period for security and operations; such data is then deleted or anonymized.

5. Your rights and choices

• Access and correction: You can view and update your profile and preferences in the App's settings.
• Microphone: You can revoke microphone permission in your device settings. The App will then not be able to record affirmations until you grant permission again.
• Notifications: You can disable notifications in the App or in your device settings.
• Account: To request account or data deletion, or to exercise other privacy rights (e.g., in the EEA or California), contact us using the details in Section 8.

6. Security

We use industry-standard measures to protect your data in transit and at rest, including encryption and access controls. No system is completely secure; we will notify you and regulators as required if a breach affects your personal data.

7. Children

The App is not directed at children under 13 (or higher age where required). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes and contact

We may update this privacy policy from time to time. We will post the updated version with a new "Last updated" date and, where required by law, we will notify you or ask for your consent.

Contact: For privacy-related questions, requests, or complaints, contact us at: support@lavyaai.com

If you are in the EEA or UK, you may also have the right to lodge a complaint with your local data protection authority.