Privacy Policy

eva is designed for teenage girls and young women learning about their bodies, cycles, and emotional wellbeing. If you are under the age of majority in your country, we recommend using eva with the awareness and, where required by law, the consent of a parent or guardian. If you believe a child has provided us with personal information without appropriate consent, please contact us and we will take steps to delete it.

We collect the following categories of information:

• Account information. When you create an account (including through third-party authentication providers), we receive an identifier for your account and basic profile details you choose to provide.
• Cycle and health data. Period start/end dates, flow, symptoms, and related notes you log in the app.
• Mood data. Daily mood entries and any notes you attach to them.
• AI conversation data. Messages you send to eva Buddy and eva Expert, our in-app AI companion and health-information features, and the responses you receive.
• Photos and generated images. If you use features that generate a stylized image from a photo, we process the photo you provide to create that image.
• Usage and device information. App usage analytics, device type, and similar technical information, collected in an aggregated or pseudonymous form through our analytics provider.
• Communications. If you contact us (including via our contact form), we receive your name, email address, and the content of your message.

• To provide and personalize the core app experience — cycle predictions, mood insights, and journaling.
• To power eva Buddy and eva Expert, including using your recent cycle and mood entries as background context so responses are more relevant to you (see Section 4).
• To operate safety features that screen conversations for signs of self-harm, abuse, or other urgent risk, and to surface appropriate support resources (see Section 5).
• To maintain, secure, and improve the app, including diagnosing technical issues.
• To respond to your support requests and communications.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your health or conversation data to serve you third-party advertising.

eva Buddy and eva Expert are AI-powered conversational features. When you send a message, it — along with limited relevant context from your conversation history and, where available, a short summary derived from your recent cycle/mood logs — is sent to our AI infrastructure to generate a response. We use a locally-hosted embedding model to help retrieve relevant context from your own conversation history, and a third-party AI provider (OpenAI) to generate conversational responses and to run automated safety screening on messages. Your raw cycle and mood logs are not sent to the AI model in full — only a short, derived summary (for example, an approximate cycle day or a general recent-mood trend) is used, and only when it is likely to make a response more helpful.

AI-generated responses are not a substitute for professional medical, psychological, or emergency care. See our Terms & Conditions for details.

Because eva is used by teenagers navigating sensitive topics, messages sent to eva Buddy and eva Expert are automatically screened for indicators of self-harm, suicidal ideation, abuse, or other urgent safety concerns. When such a message is detected, the app responds with a calmer, more direct message and, separately from the AI response, displays crisis-support resources maintained by us (rather than generated by the AI). This screening is automated and is intended as a safety measure — it is not a substitute for professional intervention, and we cannot guarantee it will catch every instance of risk. If you or someone you know is in immediate danger, please contact local emergency services right away.

We share information with service providers who help us operate eva, under confidentiality and data-processing obligations appropriate to the sensitivity of the data. These include:

• Cloud hosting and infrastructure providers (e.g. Vercel) and our database provider (Neon), who store app data on our behalf.
• OpenAI, which processes conversation content to generate AI responses and to run automated safety screening.
• Image-generation and file-storage providers used for photo-based features.
• Email-delivery providers, used to send messages you initiate (such as through our contact form) and, where applicable, account or service communications.
• Authentication providers, used to manage sign-in to the app.
• Analytics providers, used to understand aggregate app usage and performance.

We may also disclose information if required by law, to protect the rights, property, or safety of eva, our users, or others, or in connection with a merger, acquisition, or sale of assets (in which case we will take reasonable steps to ensure the receiving party honors commitments made in this policy).

We retain your account, cycle, mood, and conversation data for as long as your account is active, so the app can continue to provide personalized cycle predictions and conversation history. You may request deletion of your account and associated data at any time (see Section 9). We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

We use industry-standard technical and organizational measures to protect your information, including encryption of data in transit and restricted access to production systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

• You can access and update most of your information directly within the app.
• You can request a copy of your data, or request that we delete your account and associated data, by contacting us at the details below.
• Depending on where you live, you may have additional rights under applicable law (such as the right to correct, restrict, or object to certain processing, or to lodge a complaint with a data protection authority).

eva is developed with a global user base in mind. Your information may be processed and stored in countries other than the one in which you live, including the United States, by our service providers. We take steps intended to ensure information transferred internationally receives an appropriate level of protection.

eva is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age without appropriate consent. If you believe a child has used eva and provided personal information without the required consent, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as an in-app notice. The “Last updated” date at the top of this page reflects the most recent version.

If you have questions about this Privacy Policy or how we handle your information, please reach out through our contact page, or email us at support@parentology.app.