rivva Privacy Policy

rivva Technologies, Inc. ("rivva," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information, including data obtained from Google integrations. It also sets out your rights under applicable data protection laws, including the UK and EU General Data Protection Regulation ("GDPR").

By accessing our Site or using our Service, you accept this Privacy Policy and our Terms of Use, and you consent to our collection, storage, and processing of your information as described.

I. DEFINITIONS

  • "Site" refers to our website https://www.rivva.app and our mobile and web applications.
  • "Service" refers to rivva's productivity and well-being platform, which helps users optimise their schedules using AI, task management, energy tracking, and focus coaching.
  • "You" refers to any user of our Site or Service.

II. INFORMATION WE COLLECT

We collect both Personal Information and Non-Personal Information.

1. Information Collected via Technology

To activate the Service, you only need to provide an email address. After that, rivva may collect additional information such as:

  • Full name
  • Health and activity data (e.g. sleep patterns, energy levels, mood check-ins)
  • Task inputs and preferences
  • Work hours and focus patterns

We may also collect non-identifiable information such as:

  • Device type and operating system
  • Browser and referral URLs
  • Time and date of visits
  • Interaction events within the app

This data is collected using cookies and similar technologies to improve functionality and personalise your experience. Persistent cookies help remember your settings and preferences between sessions.

2. Information You Provide by Registering

When creating an account, you provide your email address and may optionally share your name, work habits, and productivity goals. You may also connect data from third-party services such as Apple Health, Google Fit, or Samsung Health. By enabling these integrations, you authorise rivva to access, store, and use this data as described in this Privacy Policy.

3. Google User Data

If you connect your Google account (for example, to sync your Google Calendar or Gmail), rivva will access only the data necessary to provide the requested functionality. This may include:

  • Calendar event metadata (titles, times, attendees, and meeting links)
  • Email metadata (subject lines, senders, timestamps)
  • Email message content only when explicitly authorised for summarisation or task creation

rivva's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Outlook User Data

If you connect your Outlook account (for example, to sync your Outlook Calendar), rivva will access only the data necessary to provide the requested functionality. This may include:

  • Calendar event metadata (titles, times, attendees, and meeting links)
  • Email metadata (subject lines, senders, timestamps)
  • Email message content only when explicitly authorised for summarisation or task creation

rivva's use of data received from Outlook APIs adheres to the Outlook API Services User Data Policy, including the Limited Use requirements.

III. HOW WE USE AND SHARE INFORMATION

Personal Information

We use your data to:

  • Deliver personalised energy forecasts and productivity suggestions
  • Communicate product updates, insights, and support messages
  • Improve the Service through anonymised behavioural analysis

We do not sell, rent, or trade your Personal Information to third parties.

We may share data only with trusted service providers that perform functions such as hosting, analytics, and communication. These providers are bound by confidentiality and data protection agreements.

We may disclose information if required by law or to enforce our Terms of Use, address fraud or security concerns, or protect user safety.

Non-Personal Information

We use Non-Personal Information to analyse usage trends, enhance feature performance, and guide product design. Aggregated or anonymised data may be shared with partners or investors.

In the event of a merger, acquisition, or similar transaction, user information may form part of the transferred assets, and you will be notified accordingly.

IV. AI FEATURES AND THIRD-PARTY AI PROCESSING

rivva provides AI-powered features within the Service, including our AI assistant “Nia.” This is how information is processed when you use these features and when information may be shared with third-party AI providers.

1. Third-Party AI Providers

To generate AI responses and recommendations, rivva uses the following third-party AI providers:

  • OpenAI
  • Anthropic (Claude)

Depending on the feature or task, rivva may use different models from one or both of these providers. These providers process information only to generate the AI response requested by you.

2. Information Sent to AI Providers

When you use AI features, rivva may send limited information to these providers so the AI can generate a response. We aim to send only the minimum information required for the feature to function.

This may include:

Information You Provide to the AI

  • Text you type to the AI assistant (Nia)
  • Transcribed text from voice input (if voice features are used)
  • Any files or content you intentionally include in an AI request

Personalisation and Preference Data

To personalise AI responses, rivva may send limited user context such as:

  • First name
  • Work-hour preferences
  • Productivity preferences or settings

Schedule and Task Context

When relevant to your request, the AI system may access information about:

  • Task titles
  • Task notes
  • Due dates
  • Task priorities
  • Calendar event titles
  • Calendar event dates and times

This information is retrieved dynamically during an AI session when required to answer your request.

rivva does not intentionally send full calendar records, attendee lists, or invitee email addresses to AI providers unless you explicitly include that information in your message.

Health and Energy Summary Data

To support energy-based productivity recommendations, rivva may send a summarised version of selected health or activity metrics, such as:

  • Hours slept
  • Sleep start and end times
  • High-level energy indicators

rivva does not send detailed health records or full health datasets to AI providers.

Technical Information

Limited technical metadata may also be included, such as:

  • Request timestamps
  • App version
  • Basic connection information
  • A rivva internal user identifier used to return responses to the correct account

This identifier is not your email address, password, or device ID.

3. How This Information Is Used

The information above is used to:

  • Generate AI responses and recommendations requested by you
  • Personalise productivity and scheduling guidance
  • Improve the reliability, safety, and performance of the AI features
  • Diagnose technical issues or investigate errors when you contact support
  • Prevent misuse or abuse of the AI system

rivva does not sell AI request data and does not permit AI providers to use this data for unrelated purposes where contractual restrictions apply.

4. User Control and Permission

You remain in control of how AI features use your information.

  • Permission before sharing: rivva will request permission before sending personal data to third-party AI providers for AI features.
  • Optional context: In certain features, you may choose whether additional context (such as tasks or calendar items) is included in AI requests.

If AI sharing is disabled, rivva will not send information to third-party AI providers and AI features may become unavailable.

5. AI Data Retention

rivva may store AI inputs (prompts) and AI-generated responses for a limited period to:

  • Provide AI conversation history (if enabled)
  • Maintain feature functionality
  • Troubleshoot errors and improve system reliability

Stored AI interaction data is retained for no longer than 90 days, unless you delete it earlier or request account deletion.

If you delete your AI history or your rivva account, stored AI interaction data will be deleted or de-identified in accordance with the Data Retention and Account Deletion sections of this Privacy Policy, subject to legal obligations.

6. Third-Party Processing Safeguards

rivva requires third-party AI providers to apply appropriate technical and organisational safeguards to protect the information they process. These providers process data only as service providers acting on rivva's instructions and are not permitted to use the information for unrelated purposes where contractual agreements restrict such use.

7. Important Notice About AI Responses

  • AI-generated responses may be inaccurate, incomplete, or outdated.
  • You remain responsible for how you interpret and use AI outputs, particularly for decisions that may involve legal, financial, medical, or safety implications.

VI. RETENTION AND DELETION OF GOOGLE AND OUTLOOK USER DATA

rivva retains Google and Outlook user data only for as long as necessary to provide connected features.

  • Temporary Data: Data retrieved from your Google and Outlook account (e.g. event details or email summaries) is stored only long enough to complete the requested task, after which it is deleted from our servers.
  • Persistent Data: Metadata such as event titles or linked tasks may be retained to maintain your rivva experience.
  • Deletion Requests: You can disconnect your Google or Outlook account or delete your rivva account at any time from your settings. Upon deletion, all associated Google and Outlook data will be permanently erased within 30 days from our active systems and backups.

We will not use or retain Google and Outlook data for any other purpose.

VII. DATA RETENTION (GENERAL)

We retain your Personal Information for as long as your account remains active or as required to fulfil the purposes described. Once no longer needed, we securely delete or anonymise it. Backups are automatically purged within 90 days of deletion.

VIII. INTERNATIONAL DATA TRANSFERS

As rivva Technologies, Inc. is headquartered in the United States with operations in the United Kingdom, your data may be transferred and processed across these jurisdictions. When transferring data from the UK or EU to the US, we use Standard Contractual Clauses (SCCs) or other approved safeguards to ensure adequate protection consistent with GDPR requirements.

IX. HOW WE PROTECT INFORMATION

We implement technical and organisational measures to protect your data, including:

  • Password protection
  • SSL encryption
  • Secure servers and firewalls

No system is entirely secure; by using the Service, you acknowledge this risk and agree to use the platform responsibly.

X. YOUR RIGHTS UNDER GDPR

If you are located in the UK or EU, you have the following rights:

  • Access: Request a copy of your Personal Information.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Limit processing in certain circumstances.
  • Portability: Obtain a copy of your data in a machine-readable format.
  • Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, email support@rivva.app. We will respond within 30 days.

XI. YOUR CHOICES

  • You may opt out of promotional emails using the unsubscribe link.
  • You may delete your account or disconnect third-party integrations at any time.
  • We may still send administrative or policy-related messages when necessary.

XIII. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. If we make significant changes, we will notify you by email or in-app message at least 30 days before they take effect. Minor updates may be posted without notice.

XIV. CONTACT US

rivva Technologies, Inc.
Headquarters: Delaware, United States
UK Operations: London, United Kingdom
Email: admin@rivva.app

Last Updated: 5 March 2026