Privacy Policy

IRVO ("we", "us") makes a wellness app for iPhone and Android and this website. This policy explains what we collect, why, who processes it for us, and the choices you have. In short: your data is never sold, it is shared only with the service providers that run IRVO (listed below), IRVO reads your health data and never writes to it, and you can delete your account at any time.

1. What we collect

Your account. Your email address and a password (stored only as a one-way hash), or the identity Apple or Google shares when you use Sign in with Apple or Sign in with Google (your name and email address, which Apple may replace with a private relay address). For Sign in with Apple we also keep a token Apple issues so that we can revoke IRVO's access when you delete your account.

Health data, read only. With your permission, the app reads from Apple Health (iPhone) or Health Connect (Android): heart rate variability, resting heart rate, breathing rate, sleep, steps, active energy and workouts. It never writes to Apple Health or Health Connect. The app sends a daily summary of these readings to our servers, where IRVO compares them with your own recent days. You choose which types to share, and you can change that at any time in Apple Health or Health Connect.

Your calendar, if you connect it. For Google Calendar we ask for read-only access. For your phone's own calendar (Apple Calendar on iPhone) we ask your phone's permission. For each event the app sends its title, start and end time, length, date and calendar name to our servers, where it is classified by how demanding it is. IRVO never creates, changes or deletes an event. You can disconnect a calendar at any time in the app.

What you tell IRVO. Body notes, Add Context notes, journal entries, your baseline answers, your Arcs (goals, plans and which steps you did), your answers to check-ins, and your chats with IRVO, including the notes IRVO makes for you.

Calls with IRVO. While you are on a call, your microphone audio is streamed in real time to IRVO's call servers, turned into text, answered, and the answer turned back into speech. We do not keep recordings of calls. A text transcript of the call is saved in your chat, with anything IRVO noted during it.

Subscriptions. If you buy IRVO Pro, the App Store or Google Play takes the payment; we never see your card. We receive the status of your subscription (for example, active until a date) through RevenueCat.

Notifications. If you allow them, a push token for your device, so we can send at most one notification a day.

This website. If you join early access, your email address and whether you asked for product news. The website does not use advertising or analytics trackers; see the Cookie Policy.

2. How we use it

• To work out your daily Recovery and Load against your own normal, and to write Today's read.
• To find patterns in your own data, shown in Insights.
• To reply to your chats and calls, and to make the notes you ask for.
• To write your Arc plans and each day's steps.
• To run your account, your subscription, and the emails and notifications you asked for.
• To keep IRVO secure and working, including limiting abuse.

We do not sell your data, and we do not use it for advertising. We never use your health data, or what you tell IRVO, to market anything to you.

3. Who processes it for us

We share data only with the service providers that run IRVO, only for the purposes above:

• Anthropic (AI models): processes your chat messages and call conversations to write IRVO's replies, the text you write (journal, Add Context, body notes) to find what it mentions, your calendar events to classify them, and summaries of your data to write narration and Arc plans.
• ElevenLabs (speech): turns your speech into text and IRVO's replies into speech during calls.
• LiveKit: the open-source software that carries call audio. We run it on our own servers.
• RevenueCat: keeps track of subscriptions bought through the App Store and Google Play.
• Apple and Google: sign-in, the App Store and Google Play, Apple Health and Health Connect on your phone, and push notification delivery.
• Expo: relays push notifications to Apple and Google.
• Zoho: sends our emails: verification and password-reset codes, account-deletion confirmations, notices about a failed subscription payment, and early-access emails.
• Our hosting provider, where our servers and database run.

Some of these providers process data outside your country, including in the United States. We may also disclose data if the law requires it.

4. How long we keep it, and deleting it

We keep your data while you have an account. You can delete your account and all of its data at any time: in the app (Profile, then Delete Account) or on the web at irvo.app/delete-account. Deletion removes your account, everything you wrote, your chats and calls, your Arcs, your insights, and the health and calendar data behind them. If you signed in with Apple, we also revoke IRVO's access to your Apple ID.

An early-access email is kept until you ask us to remove it or the early-access list closes.

5. Your choices and rights

• Change which health data IRVO can read in Apple Health or Health Connect, or turn it off.
• Disconnect a calendar in the app, or turn off the microphone or notifications in your phone's settings.
• Undo any note IRVO made for you from its card in the chat.
• Ask us for a copy of your data, or to correct it, at hello@irvo.app.
• Delete your account and its data at any time (section 4).
• Complain to your data protection authority.

6. Health information

IRVO is a wellness app, not a medical device. Health data you share is used only to give you IRVO's readings and insights about you, compared with your own recent days. It is never used for advertising and never sold. See Health sources for what each reading looks at.

7. Children

IRVO is not meant for anyone under 16, and we do not knowingly collect data from children.

8. Security

Data travels between the app and our servers encrypted, passwords are stored only as one-way hashes, and access to our systems is limited to the people who run IRVO.

9. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before the change applies. The date at the top shows when it last changed.

10. Contact

Questions or requests about your privacy: hello@irvo.app.