Who we are.
What Kriva is, and isn't.

1. Trader information (EU Digital Services Act)

Under Article 30 of the EU Digital Services Act, the following trader details apply to Kriva as distributed on the Apple App Store within the European Union:

• Trader name: Kriva (operated by Amita Dhand)
• Trading capacity: Sole proprietorship; identified to Apple as a trader for purposes of EU app distribution.
• Contact for compliance and consumer matters: @kriva_ai on X (DMs open, watched daily).
• EU representative: Not applicable, Kriva is below the threshold for designation under Article 11 DSA and the application is distributed via Apple, which acts as the in-scope platform.

2. What Kriva is

Kriva is a software application for iOS (with optional companion Apple Watch and home/lock screen widgets). It helps people understand their own hormone and cycle data through:

• Reading permitted sleep, cycle, heart-rate and nutrition signals from Apple Health;
• Letting the user log symptoms, mood, sleep, food, journal entries, and visits;
• Offering manageable actions, optional feedback and a way to return to what helped;
• Offering practices (breathwork, stretches), an Ask Kriva question surface, and a doctor-ready visit-prep PDF.

3. What Kriva is not

• Not a medical device. Kriva does not diagnose, treat, cure, mitigate, or prevent any disease or medical condition. It does not perform measurement, monitoring, or analysis intended to inform clinical decisions. It is not classified as a medical device under EU Regulation 2017/745 (MDR), the US Food, Drug, and Cosmetic Act, or any equivalent national regime.
• Not a substitute for professional medical advice. Users are advised throughout the app and in our Terms of Use that Kriva is a companion, not a clinician.
• Not a physical product. Kriva ships no hardware, no shipped goods, and no components that would require CE marking, UKCA marking, FCC declaration, or analogous physical-product compliance labels.
• Not a financial product. Kriva does not provide financial advice and does not transmit, store, or process payment data. The Kriva+ paid subscription is processed entirely through Apple's In-App Purchase system.

4. Product safety and compliance labels

Because Kriva is a software-only application, the following physical-product compliance regimes do not apply: CE marking (EU), UKCA marking (UK), FCC certification (US), KC certification (South Korea), BIS certification (India), or analogous marks. No physical labels exist or are required.

The compliance regimes that do apply to Kriva are software, data-protection, and consumer-protection regimes, covered in the sections below.

5. Data protection (GDPR, UK GDPR, equivalent regimes)

Kriva is designed local-first. The full handling of personal data is set out in our Privacy Policy; the short version for EU users:

• Health data is stored on the device and may sync through the user’s private iCloud. With separate external AI consent, selected health details, text or images can be sent to Anthropic or OpenAI. Exports can be shared using the system share sheet.
• AI features may use Apple’s on-device models where available. Connected features require external AI permission. Text redaction is not guaranteed anonymization, does not redact photos, and does not imply zero provider retention. See How AI works.
• App-usage analytics: the upcoming 3.0 release removes PostHog, usage-event collection and tracking identifiers. Earlier installed versions may still send events when Analytics is enabled; turn it off in You → Privacy & data → Analytics until you update. Previously received events are not erased by this change. See the Privacy Policy.
• Separate choices: Apple Health permissions, external AI consent and iCloud settings control different data flows. Permission for one is not permission for the others.
• Data subject rights (access, rectification, erasure, portability, restriction, objection): exercise via the in-app You → Privacy & data controls (export, delete) or by writing to the contact below. For data Kriva never holds, the right is exercised at source, your device or your iCloud account.
• Data Protection Officer: Not designated; Kriva's processing is small-scale and does not meet the Article 37 GDPR threshold for mandatory DPO appointment.
• Supervisory authority complaints: EU users may lodge complaints with their national data protection authority. A list is maintained at edpb.europa.eu.

6. Age rating and content

Kriva is rated 13+ on the App Store and our Terms of Use set 13 as the minimum age of use. The rating reflects:

• References to medical and physiological content (cycles, symptoms, hormones);
• Mental-health content, including locale-aware suicide prevention helplines that may surface as a Crisis Care card when the user's logged signals suggest sustained difficulty;
• Alignment with the COPPA threshold (US) and with the App Store's content-suitability age tier. Users in EU jurisdictions where the digital-consent age is higher (GDPR Article 8, default 16, lowered to 13–15 by individual member states) must comply with their local threshold; Kriva's contractual minimum is 13.

Kriva contains no advertising, no user-generated content shared with other users, no in-app browser, no chat with strangers, no gambling, and no targeted profiling.

7. Accessibility

Kriva is built with Apple's native UI frameworks (SwiftUI) and inherits system-level accessibility features by default, Dynamic Type, VoiceOver labels on interactive elements, reduce-motion respect, dark-mode support, and high-contrast colour pairs. Known gaps and ongoing accessibility work are tracked publicly; if you encounter an accessibility barrier, please write to the contact below and we will address it as a priority.

8. Distribution

Kriva is distributed exclusively through the Apple App Store. We do not operate alternative download channels, side-loading, or independent payment surfaces. App Store review processes (including Apple's content, privacy, and safety review under the App Store Review Guidelines) apply to every release.

9. Contact for compliance, safety, and consumer matters

Anyone, user, regulator, journalist, advocacy group, or fellow developer, is welcome to reach us directly. DMs on X are open and watched daily.

• @kriva_ai on X
• @kriva.ai.24 on Instagram
• Kriva on LinkedIn

We aim to respond within five working days. Urgent safety or compliance reports are escalated immediately.

10. Updates to this page

If our trader status, distribution model, or any compliance position changes materially, we will update this page and note the change in the "Last updated" date above. The current version is always available at krivaweb.web.app/compliance.