Privacy Policy
Contents
- 1. Who is responsible for your data
- 2. What data we collect
- 3. Where your data is
- 4. For what purposes and on what legal basis
- 5. Yarva AI and artificial intelligence
- 6. Who we share data with
- 7. Transfers outside the EU
- 8. How long we keep data
- 9. Your rights
- 10. Security
- 11. Cookies and storage on your device
- 12. Minors
- 13. Changes to this policy
- 14. Contact
In short
- We compute the measurements from your watch (sleep, heart rate, HRV, steps) on your phone. In the free version they do not reach our servers.
- What you enter in the app is stored in your account, on servers in the EU.
- Yarva AI (Pro) reads your health data only with your additional consent. It keeps raw measurements for 90 days.
- We do not sell data, we do not show ads and we do not train AI models on your data.
- You can delete your account and all your data at any time in the app.
1. Who is responsible for your data
The controller of your personal data is Prodigy Global sp. z o.o. with its registered office in Warsaw (ul. Nowy Świat 54/56, 00-369 Warsaw, Poland), entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001136570, tax identification number (NIP) 5253023258 (“we” or “us”). Yarva is our brand.
For any matter concerning personal data, write to us at . We have not appointed a data protection officer, so write to us directly about any matter concerning your data.
2. What data we collect
Account data
Your email address or your Sign in with Apple or Google identifier, your first name (if you give it), language and time zone. You create an account the first time you open the app, in the free version too, so that your entries are not lost when you change phones.
Health data from Apple Health and Health Connect
Only the types of data you allow in your phone’s settings, for example sleep, heart rate, heart rate variability (HRV), resting heart rate, respiration, steps, active calories and workouts. The app only reads them and never writes anything to Apple Health or Health Connect.
We do not collect GPS locations of routes, ECG recordings or medical records. We do not send your date of birth or sex from Apple Health to our servers.
Data you enter
Workouts and sets, meals, water, supplements, how you feel (e.g. energy, stress, focus), habits, goals, your chosen meal delivery service, diet and delivery days, as well as reports and feedback you send us.
Conversations with Yarva AI
In the Pro version: your messages to Yarva AI and its replies, the plan it prepares for you and the changes it makes to it.
Technical data
Device model, operating system and app version, and information about errors that you report to us. We do not use analytics or advertising tools, and we do not record the content of your health data, meals or conversations in logs.
Waitlist
If you sign up on yarva.app to hear about the launch: your email address and the phone you chose (iPhone or Android).
Payments
You buy the Pro subscription through the App Store or Google Play. We do not see your card details. From the store we receive only information on whether, and until when, the subscription is active.
3. Where your data is
We separate data according to where it is created and what it is needed for:
| Where | What is there | Who sees it |
|---|---|---|
| On your phone | Measurements from Apple Health and Health Connect and everything we compute from them: readiness, sleep, load, stress. In the free version the measurements do not leave your phone. | Only you |
| In your account, on servers in the EU | What you enter in the app: workouts, meals, how you feel, habits, goals. Each user has a separate database. | You, on each of your devices |
| With Yarva AI (Pro only) | Daily results from your phone, raw measurements from the last 90 days and your conversations with Yarva AI. | Yarva AI, only with your additional consent |
4. For what purposes and on what legal basis
| Purpose | Legal basis |
|---|---|
| Your account, syncing your entries, running the app | The contract for the provision of the service (Art. 6(1)(b) GDPR) |
| Processing health data | Your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR). We ask for it in the app before we start. |
| Yarva AI in the Pro version | Your separate, explicit consent to storing health data on a server in the EU and to its processing by an AI model |
| Notifications | Your consent, given in your phone’s settings |
| Waitlist: one email when the app is available | Your consent (Art. 6(1)(a) GDPR), given when you sign up |
| Security, fixing errors, protection against abuse | Our legitimate interest (Art. 6(1)(f) GDPR) |
| Billing, complaints, obligations to public authorities | Legal obligation (Art. 6(1)(c) GDPR) |
You can withdraw any consent at any time in the app (Profile › Data and privacy). Withdrawal does not affect what we did earlier on the basis of that consent.
5. Yarva AI and artificial intelligence
Yarva AI is the assistant in the Pro version. To prepare your plan and answer questions, it uses an AI model from an external provider with which we have a data processing agreement. The provider may process the data only on our instructions, to generate the answer.
- The model receives only what Yarva AI needs to answer, without your name, email address or account number.
- Your data is not used to train AI models, neither ours nor the provider’s. We only choose providers that commit to this.
- Yarva AI may make small changes to your plan on its own, which you can undo. It does not make decisions that produce legal effects concerning you (Art. 22 GDPR).
- Yarva AI’s advice concerns lifestyle. It is not medical advice and may contain errors.
6. Who we share data with
We do not sell your data and we do not show ads. We share data only with companies that help us provide the service and act on our instructions:
- a hosting provider, on whose servers in the EU we keep accounts and entries,
- the provider of the AI model used by Yarva AI (Pro only),
- an email provider, through which we send sign-in codes, service messages and the email to people on the waitlist.
We have a data processing agreement with each of them. We will tell you the names of our current providers if you ask at the address in section 1.
Apple and Google make the App available in the App Store and Google Play and handle Pro payments and Sign in with Apple or Google. They do so as separate controllers, under their own privacy policies. We may also disclose data to public authorities, but only when the law requires it.
7. Transfers outside the EU
We store your account, your entries and the data for Yarva AI on servers in the European Union. If one of our providers (e.g. of the AI model or email) processes data outside the European Economic Area, we transfer it only on the basis of a European Commission decision finding an adequate level of protection (e.g. the EU-US Data Privacy Framework) or of standard contractual clauses approved by the Commission. You can get a copy of these safeguards by writing to us.
8. How long we keep data
- Measurements on your phone: for as long as you have the app. You delete them by deleting the app or revoking access in your phone’s settings.
- Account and entries: until you delete your account.
- Raw measurements for Yarva AI (Pro): 90 days, after which we delete them automatically.
- Daily results and conversations with Yarva AI (Pro): until you delete your account or withdraw your consent.
- Waitlist: until we send the launch email or you unsubscribe, for no longer than 12 months.
- Data needed for billing and complaints: for as long as the law requires.
When you delete your account, we delete your data from our database right away, and from backups within 30 days.
9. Your rights
You have the right to:
- access your data and receive a copy of it,
- rectification of your data,
- erasure of your data,
- restriction of processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw any consent at any time.
You can exercise most of them yourself in the app: Profile › Data and privacy (consents, data export, deleting your account and all your data). For anything else, write to . We will reply within one month.
You may also lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl).
10. Security
We transfer data between the app and the server only over an encrypted connection. Each user has a separate database, and only authorized persons have access to the servers.
11. Cookies and storage on your device
The yarva.app website does not use cookies, analytics or advertising tools. The app stores on your phone only what it needs to work: your sign-in data (in the system’s secure storage), your settings and the results computed from your measurements. This does not require separate consent. If we ever add tools that do, we will ask for your consent first and update this policy.
12. Minors
Yarva is intended for people aged 16 or older. We do not knowingly collect data from younger people. If we learn that such data has reached us, we will delete it.
13. Changes to this policy
We may update this policy, e.g. when we change the App or when the law changes. We will inform you of material changes in the App. If a change requires your consent, we will ask for it again before we start relying on it. You can see the date of the current version at the top of the page.
14. Contact
Prodigy Global sp. z o.o., ul. Nowy Świat 54/56, 00-369 Warsaw, Poland. Email: .