Privacy Policy

Last updated: April 9, 2026

1. Introduction

Welcome to Niva: AI Gratitude Journal. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

We collect information in the following ways:

Information You Provide to Us

• Account Information: Email address, display name, and authentication credentials (processed by Firebase Authentication, a Google service)
• Journal Content: Text you enter in the gratitude chat, structured journal entries, gratitude items, tags, and related app-generated metadata stored in our database
• Mood and wellness data: Mood selections, intensity, and related history you save in the app
• Profile and preferences: Optional profile details, notification preferences, daily goals, and similar settings
• Support communications: Messages you send to our support team

Information Collected Automatically

• Usage and diagnostics: App feature usage, session activity, and in-app events we use to improve the product (e.g., analytics and crash reporting, which may include device and OS information)
• Device information: Device type, operating system version, and identifiers needed for notifications, security, and analytics
• Subscription status: Managed through our payment/subscription partner to verify your plan (we do not receive your full payment card number in the app)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Niva: AI Gratitude Journal service and your account
• Store, sync, and display your journal, gratitude items, streaks, and mood history
• If you opt in to AI-powered features: generate responses, prompts, reflections, and summaries using the third-party AI provider described in Section 5 (we do not use these features until you grant permission in the app)
• Send notifications and reminders you enable (e.g., morning inspiration, streak reminders)
• Operate analytics and crash reporting to fix bugs and improve stability
• Process subscriptions and entitlements through our subscription partner
• Communicate with you about support requests, important updates, or legal notices
• Protect security, prevent abuse, and comply with legal obligations

4. Data Security

We implement technical and organizational measures designed to protect your information, including encryption in transit (such as HTTPS/TLS), access controls, and secure hosting on Google Cloud / Firebase. No method of storage or transmission is 100% secure; we work to follow industry practices appropriate to the sensitivity of journal content.

Important: When you enable AI features, portions of your content are processed on our servers and by OpenAI as described in Section 5. If you do not enable AI features, we do not send your journal text to OpenAI for those AI responses.

5. Third-party services & processors

We rely on service providers to run the app. We require them to protect personal data appropriately and use it only to provide services to us. Their own privacy notices describe their practices in detail.

• Google Firebase / Google Cloud (Google LLC): Authentication, Firestore database, Cloud Functions (our backend that connects the app to AI and other features), hosting, and related infrastructure. Data may be processed in the United States and other regions where Google operates.
• RevenueCat: In-app subscription status and restoration (payments are handled by Apple or Google; we do not store your full card number in Niva)
• Expo / EAS: App build and delivery tooling; push notification infrastructure where applicable
• Analytics and crash reporting: As implemented in the app (e.g., to measure stability and usage)

6. Third-party artificial intelligence (OpenAI, LLC)

Provider: We use OpenAI, LLC (United States) as a subprocessor to power optional AI features (for example, conversational replies, journaling prompts, and analysis or summaries you request).

Your choice (in-app consent): The app shows a clear disclosure and asks for your permission before any of your personal journal content is sent for these AI features. You can accept or decline. You can change your choice at any time in the app (for example, under Settings → Privacy & Data → AI-powered features). When AI is off, we do not send your words to OpenAI for those features.

What may be sent when AI is enabled: Depending on the feature, this can include:

• Text you type in the gratitude conversation or related journal flows
• Mood selections and related context stored in the app
• Limited contextual information our app derives to personalize responses (for example, short summaries of recent gratitude topics or profile hints you have generated in the app)
• For summary features: excerpts or structured content from entries you choose to include in a summary
• Technical identifiers needed to route the request securely (e.g., your app user ID on our backend—not your password)

How data reaches OpenAI: Content is sent from the app to our Firebase Cloud Functions backend, which calls OpenAI’s API. Your Niva password is not sent to OpenAI as part of these requests.

OpenAI’s terms and safeguards: OpenAI processes data in accordance with its terms and privacy policy. We configure services to prioritize user privacy; you should review OpenAI’s documentation for retention, security, and regional processing. If you have questions about model training, refer to OpenAI’s current policies—we aim to use settings that limit use of your data beyond providing the service, consistent with our agreement with OpenAI.

No sale of your journal: We do not sell your journal as a product. We use third parties only to operate the features you use.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce our agreements

You can request deletion of your account and all associated data at any time through our account deletion page.

8. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Objection: Object to processing of your information
• Portability: Request transfer of your data to another service
• Opt-Out: Opt out of marketing communications and notifications

9. Children's Privacy

Niva: AI Gratitude Journal is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using Niva: AI Gratitude Journal, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

13. Consent

By using Niva: AI Gratitude Journal, you acknowledge this Privacy Policy. Separate in-app permission is required before we send personal journal content to OpenAI for AI features, as described in Section 6. General use of the app without enabling those features does not send your journal text to OpenAI for that purpose.