1. About this Privacy Policy

This Privacy Policy explains how Aravae B.V. ("Aravae," "we," "us," or "our") collects, uses, and protects personal data when you use the Aravae mobile application, website, and related services (together, the "Services").

Aravae is an energy-aware productivity and planning companion designed for adults. It is not a medical or healthcare service.

For privacy questions or requests, contact us at support@aravae.io.

2. Personal Data We Collect

Depending on how you use the Services, we may process:

• Account information, such as your email address and information required to create and manage your account.
• Planning information, including tasks, priorities, notes, calendar entries created within Aravae, reminders, and task-completion data.
• Energy and wellbeing inputs that you choose to enter manually, such as your perceived energy level, sleep quality, stress level, mood, and physical activity.
• Assistant messages, including prompts you submit and the responses generated for you. Aravae does not maintain a permanent chat history. Messages are processed to generate a response and may be handled temporarily by a third-party AI service provider.
• Subscription information, such as subscription status, product purchased, renewal status, and transaction identifiers. Payments are processed by Apple. Aravae does not receive your full payment-card details.
• Notification information, including notification preferences and the technical identifier needed to deliver push notifications when you enable them.
• Technical and usage information, such as device type, operating system, app version, IP address, diagnostic information, and basic interactions with the Services, where necessary for security, functionality, and reliability.
• Communications, including information you provide when contacting us for support or making a privacy request.

Aravae does not access Apple Health, your device calendar, contacts, photos, or other device data unless a future feature clearly requests your permission. Calendar information displayed in Aravae is created within the app and is not imported from Apple Calendar.

Aravae does not provide cycle tracking.

3. How We Use Personal Data

We use personal data to:

• create and manage your account;
• provide the planning, task, calendar, progress, reminder, and notification features;
• personalize your experience based on the information you choose to provide;
• generate energy-aware planning suggestions and Assistant responses;
• provide and manage free and paid features;
• process and verify subscription status;
• respond to support and privacy requests;
• protect the Services, prevent misuse, and maintain technical reliability;
• comply with legal obligations and enforce our Terms of Use.

Aravae does not sell your personal data. We do not use your personal data for third-party advertising.

4. Legal Bases for Processing

Where the General Data Protection Regulation ("GDPR") applies, we process personal data on the following legal bases:

• Performance of a contract: to provide the Services you request, manage your account, and administer your subscription.
• Consent: where you choose to provide optional wellbeing inputs or enable push notifications. You may withdraw consent at any time.
• Legitimate interests: to secure, maintain, troubleshoot, and improve the reliability of the Services, provided those interests do not override your rights.
• Legal obligations: where processing is required to comply with applicable law, tax, accounting, fraud-prevention, or regulatory requirements.

Information about sleep, stress, mood, activity, or energy may reveal information concerning your wellbeing. You choose whether to provide these inputs. Where such information qualifies as special-category personal data under applicable law, we process it with your explicit consent to provide the personalized features you request. You may stop providing it or request its deletion at any time.

5. AI Assistant

The Aravae Assistant uses artificial intelligence to generate planning-oriented responses. When you send a message, the content is transmitted to a third-party AI service provider solely to generate a response and operate the feature.

Before you use the Assistant for the first time, Aravae will clearly explain this data sharing and ask for your permission. You may choose not to use the Assistant and continue using the app's other features. You may withdraw your permission through the app settings; doing so will disable the Assistant unless you provide permission again.

Aravae does not maintain a permanent history of your Assistant conversations. However, the AI service provider may process message content and limited technical data for a short period in accordance with its service terms, security requirements, and applicable law.

Do not enter payment-card details, passwords, government identification numbers, medical records, or other information that is not necessary for receiving a planning response.

AI responses may be inaccurate, incomplete, or unsuitable for your circumstances. They are not medical, psychological, legal, financial, or other professional advice.

6. Service Providers and Data Sharing

We share personal data only where reasonably necessary to operate the Services, including with:

• cloud hosting and infrastructure providers;
• authentication and account-service providers;
• AI service providers that generate Assistant responses;
• Apple and subscription-management providers used to process and verify in-app subscriptions;
• push-notification and technical-support providers;
• professional advisers or authorities where required by law.

These providers may process data only for the relevant service and subject to applicable contractual and legal protections. We require service providers that receive personal data to provide the same or an equivalent level of protection described in this Privacy Policy and required by applicable law.

We may also disclose information if reasonably necessary to comply with law, protect rights or safety, investigate misuse, or complete a merger, financing, acquisition, or sale of all or part of our business. If ownership changes, personal data will remain subject to appropriate protection.

7. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where required, we use legally recognized safeguards, such as adequacy decisions or the European Commission's Standard Contractual Clauses, together with appropriate supplementary measures.

8. Data Retention

We retain account and app data only for as long as necessary to provide the Services, maintain security, resolve disputes, and meet legal obligations.

Assistant messages are not retained by Aravae as a permanent chat history after the response is generated. Relevant service providers may retain limited data temporarily for security and service operation.

When you delete your account or request deletion, we delete or anonymize associated personal data unless retention is required by law or necessary for legitimate legal claims. Limited backup copies may remain for a short period until securely overwritten.

9. Your Choices and Rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict or object to certain processing;
• withdraw consent at any time;
• receive certain data in a portable format;
• lodge a complaint with your local data-protection authority.

You may manage information within the app or contact support@aravae.io. We may need to verify your identity before completing a request.

If you are in the Netherlands, you may lodge a complaint with the Autoriteit Persoonsgegevens.

10. Account Deletion

You may initiate deletion of your account and associated personal data inside Aravae through Settings > Account > Delete Account. We may ask you to confirm the request or verify your identity. If deletion requires additional processing time, we will tell you and confirm when it is complete.

You may also contact support@aravae.io for assistance, but contacting support is not required to initiate account deletion.

Deleting the app or your Aravae account does not automatically cancel an active Apple subscription. Subscription cancellation must be completed through your Apple account settings.

11. Push Notifications

With your permission, Aravae may send reminders, planning prompts, energy check-ins, and service notifications. You can change notification permissions at any time in your device settings. Disabling notifications does not prevent you from using the app's core features.

12. Security

We use reasonable technical and organizational measures designed to protect personal data. No electronic service is completely secure, and we cannot guarantee absolute security.

13. Adults Only

The Services are intended only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If we learn that an underage person has provided personal data, we will take reasonable steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, law, or our practices. We will publish the updated version with a new "Last updated" date and provide additional notice where required.

15. Contact

For questions, requests, or complaints concerning privacy, contact:

Aravae B.V.
Email: support@aravae.io