Rivva Privacy Policy

Rivva Technologies, Inc. ("Rivva," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information, including data obtained from Google integrations. It also sets out your rights under applicable data protection laws, including the UK and EU General Data Protection Regulation ("GDPR").

By accessing our Site or using our Service, you accept this Privacy Policy and our Terms of Use, and you consent to our collection, storage, and processing of your information as described.

I. DEFINITIONS

  • "Site" refers to our website https://www.rivva.app and our mobile and web applications.
  • "Service" refers to Rivva's productivity and well-being platform, which helps users optimise their schedules using AI, task management, energy tracking, and focus coaching.
  • "You" refers to any user of our Site or Service.

II. INFORMATION WE COLLECT

We collect both Personal Information and Non-Personal Information.

1. Information Collected via Technology

To activate the Service, you only need to provide an email address. After that, Rivva may collect additional information such as:

  • Full name
  • Health and activity data (e.g. sleep patterns, energy levels, mood check-ins)
  • Task inputs and preferences
  • Work hours and focus patterns

We may also collect non-identifiable information such as:

  • Device type and operating system
  • Browser and referral URLs
  • Time and date of visits
  • Interaction events within the app

This data is collected using cookies and similar technologies to improve functionality and personalise your experience. Persistent cookies help remember your settings and preferences between sessions.

2. Information You Provide by Registering

When creating an account, you provide your email address and may optionally share your name, work habits, and productivity goals. You may also connect data from third-party services such as Apple Health, Google Fit, or Samsung Health. By enabling these integrations, you authorise Rivva to access, store, and use this data as described in this Privacy Policy.

3. Google User Data

If you connect your Google account (for example, to sync your Google Calendar or Gmail), Rivva will access only the data necessary to provide the requested functionality. This may include:

  • Calendar event metadata (titles, times, attendees, and meeting links)
  • Email metadata (subject lines, senders, timestamps)
  • Email message content only when explicitly authorised for summarisation or task creation

Rivva's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

III. HOW WE USE AND SHARE INFORMATION

Personal Information

We use your data to:

  • Deliver personalised energy forecasts and productivity suggestions
  • Communicate product updates, insights, and support messages
  • Improve the Service through anonymised behavioural analysis

We do not sell, rent, or trade your Personal Information to third parties.

We may share data only with trusted service providers that perform functions such as hosting, analytics, and communication. These providers are bound by confidentiality and data protection agreements.

We may disclose information if required by law or to enforce our Terms of Use, address fraud or security concerns, or protect user safety.

Non-Personal Information

We use Non-Personal Information to analyse usage trends, enhance feature performance, and guide product design. Aggregated or anonymised data may be shared with partners or investors.

In the event of a merger, acquisition, or similar transaction, user information may form part of the transferred assets, and you will be notified accordingly.

V. RETENTION AND DELETION OF GOOGLE USER DATA

Rivva retains Google user data only for as long as necessary to provide connected features.

  • Temporary Data: Data retrieved from your Google account (e.g. event details or email summaries) is stored only long enough to complete the requested task, after which it is deleted from our servers.
  • Persistent Data: Metadata such as event titles or linked tasks may be retained to maintain your Rivva experience.
  • Deletion Requests: You can disconnect your Google account or delete your Rivva account at any time from your settings. Upon deletion, all associated Google data will be permanently erased within 30 days from our active systems and backups.

We will not use or retain Google data for any other purpose.

VI. DATA RETENTION (GENERAL)

We retain your Personal Information for as long as your account remains active or as required to fulfil the purposes described. Once no longer needed, we securely delete or anonymise it. Backups are automatically purged within 90 days of deletion.

VII. INTERNATIONAL DATA TRANSFERS

As Rivva Technologies, Inc. is headquartered in the United States with operations in the United Kingdom, your data may be transferred and processed across these jurisdictions. When transferring data from the UK or EU to the US, we use Standard Contractual Clauses (SCCs) or other approved safeguards to ensure adequate protection consistent with GDPR requirements.

VIII. HOW WE PROTECT INFORMATION

We implement technical and organisational measures to protect your data, including:

  • Password protection
  • SSL encryption
  • Secure servers and firewalls

No system is entirely secure; by using the Service, you acknowledge this risk and agree to use the platform responsibly.

IX. YOUR RIGHTS UNDER GDPR

If you are located in the UK or EU, you have the following rights:

  • Access: Request a copy of your Personal Information.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data ("right to be forgotten").
  • Restriction: Limit processing in certain circumstances.
  • Portability: Obtain a copy of your data in a machine-readable format.
  • Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, email admin@rivva.app. We will respond within 30 days.

X. YOUR CHOICES

  • You may opt out of promotional emails using the unsubscribe link.
  • You may delete your account or disconnect third-party integrations at any time.
  • We may still send administrative or policy-related messages when necessary.

XII. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. If we make significant changes, we will notify you by email or in-app message at least 30 days before they take effect. Minor updates may be posted without notice.

XIII. CONTACT US

Rivva Technologies, Inc.
Headquarters: Delaware, United States
UK Operations: London, United Kingdom
Email: admin@rivva.app

Last Updated: 24 October 2025