Privacy policy

What we store

Account data: email address, name, date of birth, gender, height, units preference, timezone.

Training data: your Arcs, goals, planned and completed sessions, RPE ratings, and felt notes.

Nutrition data: meal logs you create (text or photo-extracted macros).

Billing data: your plan tier and subscription status. Card details never touch our servers — payments are processed by Dodo Payments as merchant of record.

Who processes it

Neon (Postgres hosting, EU region) — all application data.

Anthropic — AI processing of your goals, sessions, and meal text/photos to generate plans, briefings, and assistant replies. Not used for model training.

Dodo Payments — payment processing and tax handling (merchant of record).

PostHog (EU cloud) — product analytics, keyed to a pseudonymous user ID. No advertising trackers, no third-party ad networks.

Resend — transactional email (sign-in links, notifications).

Your rights

You can export or delete your data at any time — GDPR rights apply (access, rectification, erasure, portability).

Deleting your account removes your data from our production database. Backups expire within 30 days.

Contact: reply to any Orva email, or write to the address in the footer of every message we send.