Privacy Policy

1. Who operates AIVA

AIVA is developed and operated by Yassin Ahmed, an independent developer ("we," "us," "our"). This policy covers the AIVA mobile app (iOS and Android) and the pages on aivamoney.com that support it.

2. Information we collect

AIVA is built around data you choose to enter yourself. Here's exactly what that includes:

Account information

• Email address and password — used to create and sign in to your account. Passwords are never stored in readable form; authentication is handled by our backend provider, Supabase, using industry-standard hashing.
• Display name / full name — optional, shown back to you inside the app.
• Profile photo — optional. If you add one, it's uploaded to our file storage and served from a public URL (accessible to anyone who has that exact link, though it is never listed or searchable anywhere).

Financial data you enter

• Transactions, categories, budgets, savings goals, and bills you add manually inside the app.
• AIVA does not connect to your bank or card accounts. There is no account-linking feature — every number in the app is one you typed in yourself.

Receipt scanning

When you scan a receipt, the photo is captured and read entirely on your device using your phone's built-in text-recognition engine. The photo itself is never uploaded to our servers — only the transaction details you review and confirm (merchant, amount, date, category) are saved to your account.

Voice input

When you log a transaction by voice, your phone's built-in speech-recognition service converts what you say into text. That conversion happens through your device's operating system (Apple or Google), not through AIVA's own servers, and we do not store any audio recording.

Face ID / app lock

If you turn on app lock, unlocking is verified entirely by your device's own Face ID / biometric system. AIVA only ever receives a yes-or-no "unlocked" result from your operating system — we never receive, see, or store any biometric data ourselves.

Notifications

If you enable push notifications (for example, budget or bill reminders), your device registers a notification token with us so we can deliver the reminders you've set up. We don't use this to send anything beyond what you've configured inside the app.

What we don't collect

AIVA does not currently use any third-party analytics or advertising SDK, does not run ads, and does not sell or rent your personal information to anyone, for any purpose.

3. How we use your information

• To create, secure, and sync your account and its data across your devices.
• To send account-related emails — confirming your email address, password reset links, and similar transactional messages.
• To deliver the in-app notifications you've turned on.
• To maintain and improve AIVA's reliability and features.

4. Who we share it with

We don't sell your data. A small number of service providers process data on our behalf, strictly to run the app:

We may also disclose information if required by law, or to protect the rights, safety, or property of AIVA, our users, or others.

5. Data retention & deletion

Your data is kept for as long as your account exists. You can permanently delete your account at any time from Settings → Delete Account inside the app. This immediately and permanently removes your account and every piece of data associated with it — transactions, budgets, goals, bills, and your profile — with no recovery period and no manual request needed.

6. Security

• All data in transit between the app and our servers is encrypted (HTTPS/TLS).
• Your financial data is scoped to your account at the database level (row-level security), so it's not readable by other users or by AIVA staff through the normal app.
• Locally on your device, sensitive values (like your session) are stored using your operating system's secure storage (iOS Keychain / Android Keystore), not plain files.

No method of transmission or storage is 100% secure, but we take reasonable, standard steps to protect your information.

7. Your rights and choices

Depending on where you live, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data — most of this you can edit directly in the app.
• Delete your account and data, at any time, from Settings.
• Object to or restrict certain processing.

To exercise any right not already available directly in the app, contact us at the email below and we'll respond as promptly as we can.

8. Children's privacy

AIVA is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll remove it.

9. International data transfers

Our service providers may process and store data in countries other than your own. Where this happens, we rely on those providers' own safeguards for cross-border data transfer.

10. Changes to this policy

We may update this policy as AIVA changes. If we make a material change, we'll update the "Last updated" date above, and where appropriate, notify you inside the app.

11. Contact us