Ave is a personal space, and we treat what you share in it that way. We only use your data to run Ave for you. We don’t sell it, and we don’t use it for advertising. Your journal entries and chat messages are sent to an AI provider so Ave can respond to you. Nothing else is done with them. You can delete your account and your data at any time.

This policy covers the Ave iOS app and the website tryave.app. It is written to meet the Swiss Federal Act on Data Protection (FADP / revDSG) and, for people in the EU and EEA, the General Data Protection Regulation (GDPR).

The controller responsible for your data is:

Ave, Gianin Siegrist (sole proprietorship)
Feldeggweg 10, 8810 Horgen, Switzerland
Email: support@tryave.app

For any privacy question or request, write to us at the address above. You don’t need to use any particular form.

EU representative (Art. 27 GDPR): [EU REPRESENTATIVE, or remove if not required]

In the app

• Account data: the details you sign up with, such as your name or email address, plus a technical account ID. [SIGN-IN METHOD, e.g. Sign in with Apple / email]
• Onboarding answers: what you tell us about yourself and your goals when you set up Ave.
• Journal entries: the text you write in your evening journal.
• Chat messages: your conversations with Ave, the AI persona, including Ave’s replies.
• Mental Frameworks: the if-then plans you create.
• Mood ratings: how you rate your mood or day.
• Usage data: which features you use and when, e.g. whether you completed a visualization, plus device type, OS version and app version.
• Subscription status: whether you have a trial or an active subscription, and when it renews or ends. We never see your payment details. Apple handles all payments.

Journal entries, chat messages and mood ratings can reveal things about your mental health and wellbeing. Swiss and EU law treat this as sensitive personal data, and we handle it with extra care: we only process it to provide the features you use, and only with your explicit consent. [CONFIRM: how and where the app asks for this consent]

On the website

• Survey answers: if you take our research survey, we store your answers, including any free-text answers. Answers are saved as you go, so we also keep partial responses.
• Email address: only if you choose to give it at the end of the survey, together with the discount code we generate for you.
• Visit data: a random ID created in your browser, which link brought you to the site (e.g. TikTok, Reddit or Pinterest), which version of the page you saw, and whether you viewed and started the survey.
• Server logs: our hosting provider records technical data such as IP address, browser type and time of access to deliver and secure the site.

The website does not use cookies or third-party tracking. It stores the random ID, your survey progress and the page version in your browser’s local storage, so you can continue where you left off. You can clear this in your browser settings at any time.

• To provide Ave: your account, the daily visualization, journal, chat and Mental Frameworks. Basis: performing our contract with you (Art. 6(1)(b) GDPR). For sensitive data: your explicit consent (Art. 9(2)(a) GDPR).
• To generate Ave’s responses: sending your journal and chat text to our AI provider. Basis: contract and, for sensitive data, your explicit consent.
• To manage your subscription: checking whether you have access and showing the right offer. Basis: contract.
• To improve Ave and keep it working: understanding which features are used, fixing bugs, testing different versions of screens and prices. Basis: our legitimate interest in a reliable, useful product (Art. 6(1)(f) GDPR).
• To run our research survey and send you the discount code or launch email you asked for. Basis: your consent (Art. 6(1)(a) GDPR) and our legitimate interest in understanding who Ave is for.
• To answer you when you contact us. Basis: contract or legitimate interest.
• To meet legal obligations, e.g. bookkeeping. Basis: legal obligation (Art. 6(1)(c) GDPR).

We do not sell your data, share it for advertising, or use it to build advertising profiles. We do not use your journal or chat text to train our own or anyone else’s AI models. We make no automated decisions about you that have legal or similarly significant effects.

We use a small number of service providers (processors) who handle data on our behalf, under contracts that only allow them to use it to provide their service to us:

• OpenAI (USA): generates Ave’s replies. Receives the journal and chat text needed for a response. Under OpenAI’s API terms, this content is not used to train their models. [CONFIRM: OpenAI retention setting, e.g. standard 30-day abuse monitoring or zero data retention]
• Apple (USA / Ireland): App Store distribution and in-app payments. Apple processes your purchase under its own privacy policy as an independent controller.
• Superwall (USA): shows the subscription screen and manages subscription offers and price tests. Receives an app user ID, device information and subscription status.
• App database and backend: [PROVIDER AND REGION, e.g. Supabase, EU region]
• App analytics: [PROVIDER, or remove if none]
• Crash reporting: [PROVIDER, or remove if none]
• Supabase (USA, database hosted in [SUPABASE REGION]): stores website survey answers, email addresses and visit data.
• Vercel (USA): hosts the website and processes server logs.

We may also disclose data where the law requires it, or to protect our rights in a legal dispute.

Some of these providers are based in the USA or may process data there. When we transfer data to a country without an adequate level of data protection, we rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the standard contractual clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC). You can ask us for a copy of the relevant safeguards.

• App data (account, onboarding answers, journal, chat, Mental Frameworks, mood ratings): for as long as you have an account. When you delete your account, we delete this data within [30] days. Copies in backups are overwritten within [BACKUP PERIOD].
• Usage data: up to [RETENTION PERIOD], then deleted or anonymised.
• Website survey answers and email: until we’ve finished the research and the launch it supports, at the latest [DATE OR PERIOD], or earlier if you ask us to delete them.
• Server logs: for the period set by our hosting provider, usually a few days to weeks.
• Records we must keep by law (e.g. business records): for the statutory period, up to 10 years under Swiss law.

You can, at any time and free of charge:

• ask what data we hold about you and get a copy (access)
• have inaccurate data corrected (correction)
• have your data deleted (deletion)
• receive the data you gave us in a common, machine-readable format, or have it sent to another provider (portability)
• object to processing based on our legitimate interests (objection)
• ask us to restrict processing while a question is being resolved
• withdraw any consent you’ve given. This doesn’t affect processing that happened before. Without consent to process journal and chat data, those features can’t work.

To use any of these rights, email us at support@tryave.app. We may ask you to confirm your identity, and we’ll answer within 30 days.

If you think we’re handling your data unlawfully, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you live in the EU or EEA, to the data protection authority in your country. We’d appreciate the chance to sort it out with you first.

You can delete your account directly in the app under [PATH, e.g. Settings → Account → Delete account]. This deletes your account and all your app data as described in section 6. You can also email us and we’ll do it for you.

Deleting your account does not cancel an active subscription. Apple manages subscriptions, so please cancel it in your Apple ID settings (Settings → your name → Subscriptions).

To have your website survey answers or email deleted, email us. Mentioning the email address or discount code you used helps us find them.

We protect your data with technical and organisational measures appropriate to its sensitivity, including encrypted connections (TLS), access controls and limiting access to people who need it. No system is perfectly secure, but we work to keep your data safe and will inform you and the authorities of a breach where the law requires it.

Ave is meant for people aged [CONFIRM AGE: 16] and over. We don’t knowingly collect data from younger children. If you believe a child has given us data, please contact us and we’ll delete it.

We’ll update this policy when Ave or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we’ll let you know in the app or by email before it takes effect.

See also our Terms of Use.