Privacy Policy | Ariveria

Last updated: 9 June 2026

1. Introduction

This Privacy Policy explains how Ariveria Pte. Ltd. ("Ariveria", "we", "us" or "our") collects, uses, discloses, stores and protects personal information in connection with the Ariveria mobile application, website and related services (collectively, the "Services").

Ariveria is a guided reflection and journalling app. It helps users record thoughts, reflect through Ari, and generate personal insights, summaries, reports, mood information and related outputs.

By accessing or using the Services, you acknowledge that your personal information may be handled as described in this Privacy Policy.

2. Interpretation

In this Privacy Policy:

  • (a) "Personal Information" means information about an identifiable individual, including any information that is treated as personal data or personal information under applicable privacy laws;
  • (b) "Process" includes collecting, using, disclosing, storing, transmitting, analysing, generating, deleting or otherwise handling information;
  • (c) "User Content" means content that you submit, create, record, upload or make available through the Services, including journal entries, notes, reflections, voice inputs, transcripts, prompts, Ari conversations, mood inputs, goals, reports, summaries, insights and related content; and
  • (d) references to "including" mean "including without limitation".

3. What Ariveria is and is not

Ariveria is a self-reflection and journalling service. It is not a medical, healthcare, therapy, counselling, crisis support, emergency support, legal, financial or professional advisory service.

Ari is powered by artificial intelligence. Ari is not human. AI-generated responses may be incomplete, inaccurate or unsuitable for your circumstances. You should not rely on the Services as a substitute for professional advice or emergency assistance.

We do not ask you to provide medical, clinical, diagnostic, treatment or therapy information. Because the Services include free-form text, voice and reflection features, you control what you choose to include in your entries and conversations.

4. Local storage and private content

Ariveria is designed so that your private journal entries, notes, Ari conversations, transcripts, reports, insights and similar reflection content are primarily stored locally on your device.

We do not intend to maintain a persistent server-side journal or conversation database containing your private journal entries or Ari conversations. However, User Content may be transmitted, routed, processed, temporarily handled or cached where needed to provide the Services, including to generate Ari responses, transcribe voice recordings, produce reports, maintain security, troubleshoot issues or comply with law.

Because certain content may be stored only on your device, Ariveria staff are generally unable to access, retrieve, restore, read or manually review that content.

5. Information we collect

We collect three main types of information.

5.1 User-Provided Information

This is information that you provide to us or make available through the Services. It may include:

  • (a) account information, such as your name, email address, login details and account settings;
  • (b) onboarding and profile information, such as age range, gender, journalling experience, goals, preferences, discovery source and report preferences;
  • (c) User Content, including journal entries, notes, Ari conversations, voice recordings, transcripts, mood inputs, goals, progress entries, reports, summaries, insights and similar content;
  • (d) subscription, purchase and entitlement information made available to us through app stores or subscription providers; and
  • (e) information you provide when you contact us, request support, exercise your rights or communicate with us.

5.2 Automatically Collected Information

This is information collected automatically when you use the Services. It may include:

  • (a) device, app and technical information, such as device type, operating system, app version, language, time zone and similar information;
  • (b) usage information, such as screens viewed, features used, session activity, app events and interaction information;
  • (c) diagnostics and performance information, such as crash logs, error logs, latency, request status and troubleshooting information;
  • (d) analytics and service-operation information, such as event metadata, feature flag information, AI-system telemetry, token counts, model information and similar operational metadata; and
  • (e) purchase and subscription status information received from app stores, payment platforms or subscription-management providers.

5.3 Device-Permission and Biometric Authentication Information

Where you enable relevant features, we may access device permissions such as microphone access for voice features and notification permissions for reminders or service-related notices.

If biometric app-lock or biometric authentication is enabled, the biometric verification process is handled by your device or operating system. Ariveria does not receive or store your Face ID, Touch ID, fingerprint, facial geometry, biometric template or equivalent biometric data. We may receive only a confirmation that authentication succeeded or failed.

6. How we use information

We use information to:

  • (a) create, authenticate, operate and maintain your account;
  • (b) provide journalling, reflection, voice transcription and AI-assisted features;
  • (c) generate Ari responses, summaries, reports, insights, mood information and related outputs;
  • (d) personalise and improve your experience;
  • (e) manage subscriptions, purchases, entitlements, renewals and cancellations;
  • (f) provide support and respond to your requests;
  • (g) send service, login, security, legal and account-related communications;
  • (h) monitor, debug, secure, analyse and improve the Services;
  • (i) detect, prevent and respond to fraud, misuse, security incidents, unlawful activity or technical issues;
  • (j) comply with applicable law, legal process and regulatory requirements; and
  • (k) establish, exercise or defend legal rights.

Where applicable law requires a legal basis for processing, we rely on one or more of the following: performance of our contract with you, your consent, our legitimate interests, compliance with legal obligations, and any other lawful basis available under applicable law.

7. Third-party services

We use trusted third-party service providers to help operate, support and improve Ariveria. These providers may process information for us or in connection with the Services.

7.1 Anthropic

We use Anthropic to power Ari and other AI-assisted features. When you use these features, the content and context needed to generate Ari responses, summaries, reports and insights may be sent to Anthropic for processing.

7.2 Deepgram

We use Deepgram to transcribe voice recordings where you use voice features. Voice recordings and related audio metadata may be sent to Deepgram for transcription.

7.3 PostHog

We use PostHog for analytics, diagnostics, product improvement and service monitoring. We do not intentionally send your journal entries, Ari messages, voice recordings, transcripts or private AI-generated outputs to PostHog.

7.4 Resend

We use Resend to send transactional emails, including login codes and service-related emails.

7.5 RevenueCat

We use RevenueCat to manage subscriptions, purchases and entitlements.

7.6 Railway

We use Railway to host our backend infrastructure and related systems. Information that reaches our backend may be processed through Railway infrastructure. User Content may pass through this infrastructure where needed to provide the Services, but we do not intend to store your private journal entries or Ari conversations as a persistent server-side journal or conversation database.

7.7 Apple, Google and other platform providers

We may share limited information with Apple, Google and other platform providers where necessary for app store, subscription, purchase, entitlement, payment, device, platform or compliance purposes.

7.8 Other service providers

We may use other service providers for hosting, security, analytics, communications, support, payment, subscription, infrastructure, monitoring, compliance and similar operational purposes.

We may update, replace or add service providers from time to time as the Services develop.

Where our service providers process Personal Information for us, we require them to protect that information using privacy and security protections that are no less protective in substance than those described in this Privacy Policy and required by applicable law. These providers may also have their own privacy policies and terms that apply to their services.

8. Third-party AI processing and consent

Certain features require User Content to be sent to third-party AI or related technology providers to generate responses, summaries, reports, insights or other outputs.

Where required by applicable law or app platform rules, we will ask for your permission before sending relevant Personal Information to a third-party AI provider. If you do not provide or withdraw that permission, certain AI-assisted features may not be available or may not work properly.

9. What we do not share

We do not sell your Personal Information.

We do not sell your private journal entries, Ari conversations, voice recordings, transcripts or private AI-generated outputs.

We do not share your private journal entries, Ari conversations, voice recordings, transcripts or private AI-generated outputs with advertisers.

We do not intentionally send your private journal entries, Ari conversations, voice recordings, transcripts or private AI-generated outputs to analytics, subscription, email or advertising providers, unless required for security, troubleshooting, legal compliance or another purpose described in this Privacy Policy.

10. Security

We use reasonable technical, organisational and administrative safeguards designed to protect Personal Information against unauthorised access, collection, use, disclosure, copying, modification, loss or similar risks.

These safeguards may include access controls, authentication measures, encryption in transit, monitoring and operational security measures.

No system, transmission method or storage method is completely secure. We cannot guarantee that the Services or any associated systems will always be secure, error-free or available.

You are responsible for keeping your device, account, login methods, passwords and authentication methods secure.

11. Retention and deletion

We retain Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, or as required or permitted by applicable law.

Because Ariveria is designed around local storage, some User Content may be stored only on your device. We may not be able to access, export, restore or delete content that is stored only on your device.

You may request deletion of your account or Personal Information by contacting us at legal@ariveria.com. We may need to verify your identity before acting on your request.

If you request deletion, we will take reasonable steps to delete, anonymise or de-identify Personal Information in our possession or control that is no longer required. We may retain information where required or permitted by law, including for security, fraud prevention, legal compliance, accounting, audit, dispute resolution, backup or legitimate business purposes.

Deleting your account may not automatically delete information stored locally on your device, in your device backups or in synced device environments. You may need to delete content locally, clear app data or uninstall the app to remove locally stored information.

12. Your rights and choices

Depending on where you live and the laws that apply, you may have rights to request access to, correction of, deletion of, restriction of or portability of your Personal Information. You may also have the right to object to certain processing, withdraw consent where processing is based on consent, or complain to a privacy or data protection authority.

You may also be able to manage certain information and choices through the Services, your device settings or your app store account, including notification permissions, microphone permissions, biometric authentication settings and subscription settings.

To exercise a privacy right, contact us at legal@ariveria.com. We may decline or limit a request where permitted by law, including where we cannot verify your identity, the information is not in our possession or control, the information is stored only on your device, another person's rights may be affected, or retention is required or permitted by law.

13. International transfers

We and our service providers may process information in countries outside your country of residence. These countries may have privacy laws that differ from those in your country.

Where required by applicable law, we will take reasonable steps designed to protect transferred Personal Information to an appropriate standard.

14. Children

The Services are not intended for children below the age at which they may validly consent to use the Services under applicable law.

If you are below the applicable age of consent, you may use the Services only with the consent and involvement of a parent or legal guardian, where required.

If you believe that a child has provided Personal Information to us without the required consent, please contact us at legal@ariveria.com.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be made available through the Services, our website or another appropriate channel.

The updated version will take effect from the stated "Last updated" date unless otherwise specified.

16. Contact us

If you have any questions, concerns, complaints or requests relating to this Privacy Policy or our handling of Personal Information, please contact us at:

legal@ariveria.com

This Privacy Policy contains important information about how your data is handled. By using Ariveria, you acknowledge that you have read and understood this Privacy Policy.