Avoria is a personal cycle, sleep, and wellness coach operated by Eureka-Tech ("we", "us"), the data controller for the personal data described below. This notice explains what we collect, why, how long we keep it, and the choices you have.
Data we collect
You enter or connect the following:
- Cycle & symptom inputs — period dates, mood, energy, sleep notes.
- Body metrics — weight entries, optional goal and milestone weights.
- Meals & exercises — items you log in the daily brief.
- Wearable data — if you connect a device (e.g. Apple Health), we receive sleep, heart-rate variability, steps, and similar biometrics.
- Preferences — units, reminder time, theme.
We do not collect your name, contacts, location, advertising ID, or browsing history.
Where your data is stored
- On your device — most logs (weight, meals, exercises, settings, milestones) are saved in your phone's local storage. They never leave the device unless you explicitly export them.
- Secure backend — when a feature requires it (e.g. generating an AI brief or syncing wearable data), the relevant inputs are sent over HTTPS to our backend, processed, and the response is returned. We do not sell or share this data.
How we use it
- To generate your daily brief and trends.
- To show charts, weekly averages, and milestone progress.
- To deliver reminders you schedule yourself.
We do not use your data for advertising, profiling, or training third-party AI models.
Third-party services (recipients)
- Backend hosting — Lovable Cloud for AI brief generation and any cloud sync.
- AI models — prompts may be processed by Google Gemini or OpenAI through our managed gateway, under their respective data-processing terms. We do not include identifying information in prompts.
- Wearables — only if you connect them; data flows directly from the wearable provider into Avoria.
- Payments — Paddle.com Market Limited acts as our Merchant of Record and processes your payment, billing, taxes, and invoicing for Avoria Pro. Paddle is an independent data controller for that processing.
- Professional advisers and authorities — legal, accounting, or regulatory recipients where required by law.
Legal basis for processing
- Performance of a contract — to deliver the Service you signed up for.
- Legitimate interests — to keep the Service secure and improve product quality.
- Consent — for optional features such as wearable connections and push notifications.
- Legal obligation — to comply with tax, accounting, and other applicable laws.
Data retention
- On-device logs — kept until you clear app storage or uninstall.
- Account & cloud-synced data — kept while your account is active and deleted within 90 days of account closure.
- AI prompts and responses — not retained beyond what is needed to return the response, plus short-lived operational logs (typically up to 30 days).
- Backups — rolling backups overwritten on a normal cycle (typically 30 days).
Your rights (GDPR / UK GDPR)
You can ask us to: access a copy of your data; correct inaccurate data; delete your data; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time. We aim to respond within one month. You also have the right to complain to your local data-protection authority.
Security
We use appropriate technical and organisational measures — including HTTPS in transit, encryption at rest where supported by our backend, and access controls — to protect your data.
Children
Avoria is not intended for users under 16. We do not knowingly collect data from children.
Contact
Questions or data requests: info@iavoria.eu — or reach the studio at office@eureka-tech.eu.
This policy is provided for transparency and is not legal advice.