Privacy Policy

Introduction

Welcome to Arvia AI ("we," "our," or "us"). The service is operated by ARVIA LLC, a limited liability company organized under the laws of the State of Illinois, USA, with its registered address at 2501 Chatham Rd Suite N, Springfield, IL 62704 (Sangamon County), USA.

We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and services. Arvia AI is offered to users worldwide. By using Arvia AI, you agree to the collection and use of information in accordance with this policy. Our Terms of Service govern use of the App.

Information We Collect

We may collect the following types of information:

Account information (such as name and email address) when you register or sign in
Onboarding responses only—your answers to the in-app onboarding questions (the App does not accept arbitrary free-text prompts or file uploads for AI processing)
A profile photo, if you choose to upload one
Usage data and interactions with the app (for example, feature usage and in-app activity)
Session recordings—a recording of how the app's screens are used (layout and navigation between screens), with text and anything you type masked and your profile photo hidden. See Product Analytics and Session Recordings below.
Device information (device type, operating system, unique device identifiers)
Log and technical data (IP address, app activity, crash reports, diagnostics)
Information you provide directly through the app (such as support requests or feedback). When you send feedback from the app, we store your message and, if you choose one, its topic, together with your app version, platform, language and the program you are on, so we can understand and reply to it.

Health and fitness data. For the AI personalization features, the App collects health and fitness information you provide during onboarding, which may include: age, sex, height, weight, body measurements, fitness level, workout history, health conditions or injuries you choose to disclose, fitness goals, and dietary preferences or restrictions. This information is health-related and is treated with additional care as described in the AI Processing and Legal Basis sections below. You are not required to disclose specific medical conditions — answers to health-related questions can be provided at whatever level of detail you are comfortable with.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services—including operating AI-powered features
Authenticate your account and sync your data across devices via our backend infrastructure
Personalize your experience with Arvia AI
Send you important updates and notifications
Send you occasional emails about ARVIA, such as new features; every such email has a link to unsubscribe
Respond to your comments and support requests
Monitor and analyze usage patterns to improve functionality, reliability, and security
Detect and prevent fraudulent or unauthorized activity

AI Processing and OpenAI

To personalize the App, we transmit your answers to onboarding questions and limited session or technical context needed to process them to OpenAI (or its affiliates), which processes that information to generate outputs. We do not send a separate free-form chat or arbitrary user prompts—only the onboarding flow implemented in the App.

OpenAI acts as a service provider processing data on our behalf in accordance with our instructions and our agreement with them. How OpenAI handles information—including retention, security, and subprocessors—is governed by OpenAI’s policies and the terms applicable to our use of their services. See: OpenAI Privacy Policy.

The onboarding questions in the App include health and fitness information (such as your fitness goals, current activity level, health conditions or injuries you choose to disclose, and body measurements). This information is used to generate your personalized program and may be transmitted to our AI provider (OpenAI) as described above. We treat this information as health-related data and handle it with additional care. By providing this information during onboarding, you explicitly consent to its use for this purpose. You are not required to disclose specific medical conditions — answers to health-related questions can be provided at whatever level of detail you are comfortable with. Please avoid including financial account details or government identifiers (such as passport numbers or tax IDs) in your onboarding answers, as these are not needed for the service and we have no way to prevent them from being processed by OpenAI.

Backend Infrastructure (Supabase)

We use Supabase for core backend services, which may include authentication, database storage, and related infrastructure that supports account data, app configuration, and operational logs. Data processed through Supabase is subject to Supabase’s terms and privacy practices. See: Supabase Privacy.

Where your data is physically stored depends on our Supabase project configuration and Supabase’s infrastructure; it may be located in regions outside your country of residence (see International Data Transfers below).

Product Analytics and Session Recordings (PostHog)

We use PostHog to understand how the App is used and where people get stuck, for example during onboarding or at the subscription screen. PostHog receives events about what you do in the App (such as screens viewed, a workout started or finished, a subscription started), basic device and app information, and your approximate location (city and country), which PostHog works out from your IP address. Your IP address itself is not stored. Once you sign in, these are linked to your account through an internal user ID.

PostHog also records sessions: a replay of how the App's screens looked and were used, together with technical logs and the timing of network requests, which help us find and fix problems. In these recordings, all text and anything you type is masked, and your profile photo is hidden. Recordings are linked to your account like other analytics data.

We use analytics data only to improve the App. We do not use it for advertising and do not sell it. PostHog processes this data on our behalf, in the United States. See: PostHog Privacy Policy.

Steps from Apple Health and Health Connect

If you choose to connect it from the Progress tab, the App reads your daily step count from Apple Health (on iPhone) or Health Connect (on Android) and shows today's steps and the last seven days. The App asks to read steps only: it does not write to Apple Health or Health Connect and reads no other health data.

Your step counts are read and shown on your device. They are not sent to our servers, to our AI provider or to any other third party. Our analytics (PostHog) receives only whether you connected and a broad range for the day's steps (for example "5,000–10,000"), never the count itself.

Data from Apple Health (HealthKit) and Health Connect is never used for advertising or marketing, never sold, and never used to decide eligibility for credit, insurance or employment. You can turn access off at any time in Settings → Health → Data Access & Devices on iPhone, or in the Health Connect app on Android.

The App's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

International Data Transfers

We operate globally. Your information may be processed and stored in countries other than where you live, including countries that may not be deemed to provide the same level of data protection as your home jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international transfers (such as standard contractual clauses or other lawful mechanisms). You may contact us using the email below for more information about these safeguards where applicable.

In-App Purchases & Platform Providers

Payments in the App are processed by Apple (App Store) or Google (Google Play), not by us directly. We may share information with the applicable platform—for example, purchase status, subscription state, or usage tied to paid features—as needed to validate entitlements, prevent fraud, handle billing or refund disputes, and comply with that platform’s policies.

On iOS, where Apple requires it for refund-related requests, you acknowledge that we may share data regarding your usage and consumption of purchased content with Apple so it can assess refund requests, in line with Apple’s policies. On Android, Google Play’s terms and privacy policy govern how Google processes purchase-related data.

Web purchases with QPay (Mongolia). Premium bought on arvia.club is paid through QPay and your bank, which process the payment under their own terms and privacy policies. We receive the payment's confirmation, amount and time, and the ARVIA account it was for; we never receive your card or bank account details. We keep each order with your account, to grant and check your Premium and to answer support requests, and it is deleted with your account. QPay and your bank keep their own transaction records as the law requires them to.

Data Retention

We retain account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes (typically up to 7 years for financial and transaction records). Health and fitness data you provide during onboarding is retained as part of your account and is deleted with your account unless retained for legal purposes.

Data processed by OpenAI may be retained according to their API data usage policies as described in the OpenAI Privacy Policy. Data processed by Supabase is retained in our project until deleted at account closure. RevenueCat may retain subscription and transaction data per their policies and applicable financial record-keeping requirements. Analytics data and session recordings are kept in PostHog for the retention period of our PostHog plan and then deleted; to have yours deleted sooner, contact us at support@arvia.club.

You may request deletion of your account and associated data by contacting us at support@arvia.club. We will respond in line with applicable law; some information may be retained where required for legal, security, or legitimate business purposes.

Account & Data Deletion

You can permanently delete your Arvia AI account and all associated data directly from the app:

Open the app and go to the Profile tab
Tap Account, then Delete account (in versions before 2.5.1, tap the pencil beside your name, then Delete account)
Confirm the deletion in the dialog that appears

Deleting your account permanently removes your profile, onboarding data, workout history, step data, leaderboard records, and any other personal data we hold, within 30 days. Subscription and transaction records may be retained for up to 7 years where required by law. Deletion cannot be undone.

If you are unable to access the app, you may also request account deletion by emailing support@arvia.club with the subject line "Delete My Account" and we will process your request within 30 days.

Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Arvia AI is not directed to children under the age of 13 (or under the applicable age of digital consent in your country — for example, 16 in Germany and the Netherlands, 15 in France, 14 in Spain and Austria). We do not knowingly collect personal information from children below this threshold. If you believe a child below the applicable age has provided us with personal data without appropriate parental consent, please contact us at support@arvia.club and we will delete it promptly.

If you are between 13 and 18 (or the higher applicable threshold in your country), certain features of the App — including weight-loss goals and strength training with weights — are intended for use with parental or guardian supervision and, where appropriate, medical guidance.

Your Rights

Depending on where you live, you may have rights under local privacy laws (for example, in the European Economic Area, the United Kingdom, Switzerland, California, or other jurisdictions). These may include the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your personal data
Object to or restrict certain processing, or opt out of certain activities where applicable
Data portability
Lodge a complaint with a supervisory authority in your country or region, where applicable

California residents (CCPA/CPRA): In addition to the rights above, you have the right to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information for money, and we do not share it with advertising services. Our analytics provider (PostHog) processes data on our behalf as a service provider. To make a request, contact us at support@arvia.club with "California Privacy Request" in the subject line. You also have the right to limit use of sensitive personal information, which includes health and fitness data we collect.

To exercise any of these rights, contact us at the email below. We may need to verify your request before responding. If you are in the EEA, UK, or Switzerland and believe we have not resolved your concern, you may have the right to contact your local data protection authority.

Not a Covered Healthcare Service

Arvia AI is a consumer wellness and fitness application. It is not a healthcare provider, health plan, or healthcare clearinghouse as defined under HIPAA (the US Health Insurance Portability and Accountability Act). The App does not create or maintain protected health records (PHRs), and HIPAA does not apply to data collected through Arvia AI. Your data is governed by this Privacy Policy and applicable privacy laws — not HIPAA.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, through in-app notifications. We encourage you to review this policy periodically.

Questions about your privacy?

support@arvia.club