Privacy Policy

Kiiva, Inc. ("Kiiva", "we", "our", or "us") operates the Kiiva mobile application and website at kiiva.co (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

Information you provide directly:

• Account information such as your name and email address.
• Health and wellness data you choose to log, including menstrual cycle data, symptoms, supplement intake, sleep, mood, and other personal health metrics.
• Wearable and device data you choose to connect, such as data from Apple Health or other supported integrations.
• Communications you send us, including support requests and feedback.

Information collected automatically:

• Device information such as device type, operating system, and app version.
• Usage data such as features accessed and session duration, used to improve the Service.
• Crash reports and diagnostic data to maintain app stability.

We use the information we collect to:

• Provide, operate, and improve the Kiiva Service.
• Surface connections and patterns across your health data to deliver personalised insights.
• Respond to your support requests and communications.
• Send you service-related notifications, such as account and security updates.
• Comply with legal obligations.

We do not use your health data to train general-purpose AI models shared with third parties, and we do not sell your personal information to advertisers or data brokers.

We do not sell your personal information. We may share your information in the following limited circumstances:

• With service providers who process data on our behalf (such as cloud infrastructure and analytics providers) under strict data processing agreements.
• If required by law, court order, or government authority.
• To protect the rights, property, or safety of Kiiva, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you and require the successor to honour this Privacy Policy.

Any third-party service providers we use are contractually prohibited from using your personal data for their own purposes.

Kiiva is built around health data. We treat this information with the highest level of care. Health data you enter into Kiiva is stored encrypted and is not shared with third parties except as described above.

If you connect a wearable or health platform (such as Apple Health), data is pulled only with your explicit permission and is governed by that platform's own privacy controls. You can disconnect any integration at any time from within the app.

Depending on your location, you may have rights regarding your personal data, including:

• The right to access the personal information we hold about you.
• The right to correct inaccurate information.
• The right to delete your account and associated data.
• The right to export your data in a portable format.
• The right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@kiiva.com. We will respond within the timeframe required by applicable law.

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. This includes encryption of data in transit and at rest.

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at support@kiiva.com.

Your information may be processed and stored in countries other than your country of residence. Where we transfer personal data across borders, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify you via email or an in-app notice before they take effect. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us: