Privacy Policy

Last updated: September 29, 2026

This policy explains what information Arovenna (“we”, operated by Arovenna) collects when you use the Arovenna website, app and text-message service, how we use it, and the choices you have.

Information we collect

Account information: your email address and password. Passwords are handled by our authentication provider and stored only in hashed form.
Information you give the app: your name, timezone, typical schedule and recurring commitments, accountability preference, goals, tasks, progress, daily plans, check-ins, weekly reviews, and notes you ask the assistant to remember.
Conversations: messages you exchange with the assistant in the app and by text message.
Phone and SMS information (optional): your mobile number, whether it has been verified, your SMS consent (the time and the exact wording you agreed to), opt-outs, and the text messages we send and receive.
AI usage records: for each AI request, the feature used, the model, token counts, an estimated cost and timing. These records do not contain the content of your messages.
Technical logs: limited server logs used to operate and secure the service. We remove email addresses, phone numbers and credentials from logs.
Cookies: only the essential cookies needed to keep you signed in. We do not use advertising or third-party analytics cookies.

How we use your information

To provide the service: personalized planning, reminders, check-ins, weekly reviews and assistant replies.
To send the text messages you have opted into, and to process your replies.
To keep the service secure, prevent abuse, and understand and control our operating costs.
To respond to your requests and communicate with you about your account.

We do not sell your personal information, and we do not use it for advertising.

AI processing

To generate replies, plans and summaries, we send the relevant information from your account (for example your goals, schedule, today's tasks and recent messages) to OpenAI, which processes it on our behalf. We send these requests with storage turned off, so conversation history is kept in our database rather than by OpenAI. OpenAI may retain API data for a limited time for abuse monitoring under its own policies. The assistant can make mistakes; see our Terms of Service.

Service providers

We share information only with providers that help us run the service, and only as needed for that purpose:

Supabase: database hosting and authentication.
OpenAI: AI responses.
Twilio: sending and receiving text messages (if you opt in).
Vercel: website hosting and server logs.

We may also disclose information if required by law or to protect the rights and safety of our users or others.

Text messages (SMS)

We only text you if you add your number and check the consent box. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help; you can also turn texts off in Settings. We do not share or sell your mobile number or SMS opt-in information with third parties or affiliates for their marketing or promotional purposes.

Interactive demo

The demo at /demo creates a temporary, anonymous account with sample data. It doesn't ask for your email or phone number. Demo accounts may be deleted at any time.

Retention and deletion

We keep your information for as long as your account exists. You can permanently delete your account at any time in Settings → Privacy & data. Deleting your account immediately removes from our database:

Your profile, schedule and preferences
Goals, progress history, tasks and daily plans
Check-ins, weekly reviews and assistant notes
All conversations with your assistant, including text messages
Phone number, SMS consent and message history
AI usage records
Connected calendars and fitness sources, their synced events and activity data (Google access is revoked)

Copies may remain in encrypted backups for a limited period before they are overwritten. Our service providers (for example Twilio's message logs) retain data according to their own policies.

Security

Data is encrypted in transit. Each account's data is isolated at the database level so users can only access their own records, and our secret keys are only used on our servers. No method of transmission or storage is completely secure, but we work to protect your information.

Your choices and rights

View and edit most of your information directly in the app.
Opt out of text messages by replying STOP or in Settings.
Delete your account and data in Settings.
Request a copy of your data, or ask any privacy question, by emailing privacy@example.com. Depending on where you live, you may have additional rights under local law.

Children

Arovenna is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Changes

We may update this policy. If we make significant changes, we will let you know in the app or by email before they take effect.

Contact

Arovenna — privacy@example.com