Privacy Policy

Your information.
Your choices.

Updated for Kriva 3.0 · 8 October 2026

Short version

Kriva saves your records on this device and may sync them through your private iCloud. Connected features also use outside services, described below. Some features require a subscription.

What we collect — and what we don't

On your device

Saved records include cycle and period logs, mood, symptoms, treatments, profile details, notes and photos you choose to keep. iCloud sync, connected AI features and exports can move information beyond this device.

If you sign in

Sign in with Apple is optional. Apple provides an account identifier and, if shared, an email or private relay address. Kriva does not see your Apple password.

App-usage analytics: removed in 3.0

The upcoming Kriva 3.0 release removes PostHog and app-usage analytics. It does not collect product-usage events or generate a tracking installation identifier. Updating clears retired local tracking identifiers and queued events without deleting health records. Ordinary on-device diagnostic logs remain; Kriva has no analytics upload service in 3.0.

Earlier installed versions: versions that include PostHog may still send usage events when Analytics is enabled. Turn it off in You → Privacy & data → Analytics until you update. Removing analytics does not erase events previously received by the provider. Contact Support about earlier data. External AI requests, iCloud sync and subscriptions are separate functional services described below.

What we don't collect

Kriva does not ask for access to your contacts. Camera and photo access are optional for records you choose. Optional local weather uses approximate location; Apple and Open-Meteo receive the approximate area. Manage permissions in iPhone Settings.

How we use information

To save and display your records, provide requested features, manage access and subscriptions, improve app reliability and respond to support. Check the sync status in You rather than assuming a backup is complete.

Records may sync through your private iCloud account when available. Removing the app from one device does not by itself guarantee that iCloud copies are deleted. Use the in-app data controls and Apple’s iCloud controls to manage stored records.

Apple Health access is optional. If you choose Share with Apple Health when recording period flow, Kriva can save that flow entry to Health. On Apple Watch, Save to Health can save a completed breathing pause as a Mind & Body workout; stopped pauses are not saved. These choices are separate from permission to read Health data.

Sensitive health data

Cycle, mood, symptoms, treatment and other health details are sensitive. With your explicit permission, connected AI features can send selected details to Anthropic or OpenAI. External AI is off until you allow it. Change this in You → Privacy & data → How AI works. This choice is separate from Apple’s on-device models. Share only what you need for the feature you use.

Profile details, including surgery history, help adapt relevant screens and can be included in AI context. A hysterectomy entry does not establish that cervical screening can stop.

Not medical advice — no liability

Kriva is a personal wellness journal. It is not a medical device, is not intended to diagnose, treat, cure, or prevent any disease, and does not replace advice from a qualified clinician. Reads, patterns, Ask Kriva answers, preventive-care prompts, and any other output are informational only. Always consult a licensed healthcare professional for medical decisions.

To the maximum extent permitted by law, Kriva and its makers are not liable for any decision you take on the basis of anything the app shows you. You use Kriva at your own discretion. Emergency symptoms — chest pain, severe bleeding, sudden neurological changes, thoughts of self-harm — need emergency services, not an app.

AI providers — daily reads and Ask Kriva

Some features can use Apple’s on-device Foundation Models when available. Those requests run on your device. Connected AI features use Anthropic (Claude) or OpenAI (GPT) only with external AI permission. Apple’s on-device model availability and external AI consent are separate. Curated support and local records remain available without external AI.

What we send to the AI provider

Depending on the feature: your question, relevant cycle and HealthKit summaries, symptoms, treatment and profile details (including selected family-history labels), recent journal excerpts, lab values and plan outcomes. Report extraction can send recognized report text. Photo analysis sends the selected image. Cloud text requests use HTTPS directly to the configured provider.

Text and image privacy

Kriva attempts to remove common identifiers from text before AI processing. This is not guaranteed anonymization and does not redact photos. A provider also receives network metadata, including the connecting IP address. Review free text and images before using connected features.

Retention by the provider

Provider policies and account settings govern how requests are retained and used. Kriva does not promise zero retention or immediate deletion by outside providers. Deleting your local records does not recall requests already processed.

Why two providers

The configured provider can vary by feature and availability. Provider policies and retention settings can differ. The app’s sharing disclosure explains what the selected feature sends.

AI generation is disclosed in the app

Every Ask Kriva response carries an inline 'AI-generated' label and a link to the Sources view that lists the authoritative bodies Kriva treats as canonical for each topic. The same label appears on Today's read detail.

AI answers are not clinical advice

AI-generated content can be wrong, incomplete, or out of date. Use any linked sources to check important claims; a source link does not make an answer correct. You should never act on an AI answer for a serious symptom without also consulting a qualified clinician.

Apple Health and Apple Watch

Apple Health access is optional. Kriva reads the categories you permit. Separately, you can choose to share a recorded period-flow entry with Health or save a completed Apple Watch breathing pause as a Mind & Body workout. Health permissions and external AI sharing are separate choices.

Your rights

Use You → Privacy & data to export or delete Kriva records, choose automatic cleanup and review your sharing choices. Deletion can sync to other devices through iCloud. Apple Health permissions are managed in iPhone Settings. For questions about data already handled by outside services, contact Support.

Children

Kriva is intended for users 13 and over. We do not knowingly collect data from children under 13.

International users

Kriva is available worldwide; our team is based in India. Same privacy protections apply everywhere.

Changes

If we materially change this policy, we will notify you inside the app before the changes take effect.

Contact

Contact @kriva_ai on X through Support. Avoid including medical details in a public post or message.

See How AI works for the difference between on-device and connected features, or Support for help with a data request.