Privacy Policy
Ziva builds you a meal and workout plan from a few questions, and lets you change it by chatting with Ziva. This policy explains what data that involves, where it goes, and how to delete it. "Ziva", "we" and "us" mean Manan Sharma, the founder and publisher of Ziva, based in Udaipur, Rajasthan, India, who decides how your data is used (the "data controller" or "data fiduciary").
The short version
- Your plan, chat and reminders live on your device. We don't keep copies on our servers.
- Ziva asks before anything goes to OpenAI. To build and change your plan, your answers, your plan and your messages pass through our server to OpenAI. Our server discards them once it has replied; OpenAI may keep them for up to 30 days to check for abuse.
- Our server stores almost nothing about you: a random account ID, your subscription status and how much you've used Ziva. Never your answers, your plan or what you write.
- Sign in with Apple gives us no name or email. Your first name stays on your device.
- No ads, no tracking across apps, no selling data. Ziva uses PostHog to learn which screens and features people use, never your answers, your plan or what you write.
- Delete your account in the app (Profile → Delete account). It removes your data from our servers and from your device.
1. What stays on your device
These are stored only on your device, in the app's own storage:
- Your answers to the onboarding questions (for example age, sex, height, weight, goal, activity level, diet, allergies, foods you like or avoid, equipment, training days, injuries, meal times and shopping day), and your first name if you enter one.
- Your meal plan, workouts, grocery list, reminders and chat history.
- Your sign-in session, kept in your device's Keychain.
Ziva does not sync this to iCloud or to any server of ours. If you delete the app, sign out or delete your account, it is gone. Reminders are local notifications scheduled on your device.
2. What passes through our servers, and isn't kept
We ask first. After the last onboarding question, and before you sign in, the app shows a screen explaining that your answers, your plan and your messages are sent to OpenAI to write your plan and answer your chats. Nothing is sent until you tap Agree and continue. If you don't agree, Ziva can't write a plan. You can withdraw your agreement at any time by signing out or deleting your account (Profile); the app then asks again before sending anything.
When Ziva writes your plan, or when you send a chat message or tap a suggestion, the app sends our server what's needed to answer: your onboarding answers (not your name), your current plan, and your recent chat messages. Our server uses them to produce a reply or a proposed change, passes the necessary parts to OpenAI (section 4), and discards them when the request ends. They are not written to our database, our cache or our logs.
Each chat message is also checked by OpenAI's moderation service. If a message is flagged, we may record the category of the flag (for example "self-harm") with your account ID and the time, never the message itself, so we can respond to repeated safety concerns.
Reporting a reply. If you report one of Ziva's replies (press and hold it, then Report this reply), your email app opens a message to us with the reply, its ID and your Support ID. We only receive it if you send it. We use reports, like any email you send us, to look into the problem and improve Ziva, and delete them once they've been dealt with.
3. What our servers store
| Data | Why | How long |
|---|---|---|
| A random Ziva account ID (also your Support ID in the app) | To identify your account | Until you delete your account |
| The private identifier Sign in with Apple gives us | To recognise you when you sign in again | Until you delete your account |
| An encrypted Apple sign-in token | Only to revoke your Apple sign-in when you delete your account, as Apple requires | Until you delete your account |
| Sign-in sessions (stored as one-way hashes) | To keep you signed in | Up to 60 days, or until you sign out or delete your account |
| Subscription status: product, active or not, expiry date | To know whether your subscription is active | Until you delete your account |
| How many AI "tokens" your requests used, per day | To apply fair-use limits and understand costs | Until you delete your account (the rolling 7-day counter expires on its own) |
| Moderation flag categories (section 2) | Safety | Until you delete your account |
| Technical logs: your account ID, request timings, token counts, error codes | To run the service and fix problems. Logs never contain your answers, your plan or what you write | 30 days |
4. Who else processes your data
We use these service providers. They process data on our behalf to run Ziva, and are not allowed to use it for their own advertising.
- OpenAI writes your plan, answers chat messages and moderates them. It receives your onboarding answers (not your name), your plan and recent chat messages for each request. With chat messages it also receives your random Ziva account ID, so that your requests reuse the same cache, which makes replies faster; the ID doesn't tell OpenAI who you are. OpenAI states that data sent through its API is not used to train its models by default and may be kept for up to 30 days to monitor abuse (OpenAI's business data policy).
- Apple provides Sign in with Apple and handles all payments. We never see your card details.
- RevenueCat manages subscriptions. It receives your Ziva account ID, your purchase and subscription history, basic device and app information, and, if you answered it, where you heard about Ziva (RevenueCat's privacy policy).
- PostHog shows us how the app is used, so we can improve it. It receives which screens you reach and which features you open (for example "meal opened" or "chat message sent"), recordings of your sessions with on-screen text and photos hidden, basic device and app information, an approximate location worked out from your IP address, and, once you sign in, your Ziva account ID. It never receives your answers, your plan or what you write. PostHog stores this in the United States (PostHog's privacy policy).
- Google Cloud hosts our server and its logs, in the United States.
- Gmail (Google) holds the emails you send us, including reported replies.
- Neon hosts our database (section 3), in the United States.
- Upstash hosts the short-lived counters behind fair-use limits.
Our servers and these providers are mainly in the United States. If you use Ziva from elsewhere, your data is transferred there under the safeguards each provider offers.
We don't sell or rent your personal information, share it for cross-context advertising, or use it to track you across apps and websites.
5. Health information
Your onboarding answers can include health-related information such as weight, goal and injuries. We use it only to build and adjust your plan, as described above, and never for advertising. Ziva gives general wellness guidance, not medical advice. Check with a doctor before making big changes to your diet or exercise.
6. Deleting your data
- Delete your account: in the app, go to Profile → Delete account. We revoke your Apple sign-in, then delete your account, every sign-in session, your subscription record, moderation flags and usage history from our database. The app then erases your plan, chat, reminders and answers from your device. Technical logs that contain only your account ID expire within 30 days.
- Usage data in PostHog (section 4) is linked only to your account ID. Email us your Support ID and we'll delete it.
- Deleting your account does not cancel your subscription. Apple bills subscriptions. Cancel on your iPhone or iPad in Settings → your name → Subscriptions.
- Sign out: Profile → Sign out also erases everything stored on your device, because your plan exists only there.
- Revoke Sign in with Apple: you can also stop using Sign in with Apple for Ziva in Settings, under your Apple Account's Sign in with Apple list.
7. Your rights
Depending on where you live (for example in India under the Digital Personal Data Protection Act, 2023, or in the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or restrict how we use it, or withdraw your consent. Because most of your data stays on your device, you can see and change it directly in the app. For anything held on our servers, contact us with your Support ID (Profile → Support ID) so we can find your account; we don't otherwise know who you are. You can also complain to your local data protection authority.
Where EU or UK law applies, we rely on performance of a contract to provide the service you sign up for, on your explicit consent for the health-related answers you choose to give and for sending them to OpenAI, and on our legitimate interests for security, fair-use limits, fixing problems and understanding how the app is used.
8. Ziva is for adults (18 and over)
Ziva is only for people aged 18 and over, in every country. The app asks your age before it builds a plan and won't build one for anyone younger. We don't knowingly collect data from anyone under 18. If you believe someone under 18 has given us data, contact us and we will delete it.
9. Security
Data travels between the app and our servers over encrypted connections (HTTPS and secure WebSockets). Sign-in tokens are stored in your device's Keychain, sessions are stored on our side only as one-way hashes, and the Apple sign-in token is encrypted. No system is perfectly secure, but we keep what we store to the minimum shown above.
10. Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use your data in a meaningful way, we'll tell you in the app before it takes effect.
11. Contact and Grievance Officer
Questions, requests or complaints about your data: whynothustle.manan@gmail.com. Please include your Support ID from Profile in the app so we can find your account. Answers to common questions are on our Support page.
Grievance Officer: Manan Sharma, whynothustle.manan@gmail.com, Udaipur, Rajasthan, India. We aim to resolve grievances within one month of receiving them.