Privacy Policy

Last updated: July 26, 2026

Caivo is an evidence-based habit and performance coaching app. It is operated by Mason Koponyas, an individual based in Calgary, Alberta, Canada. This policy explains what Caivo collects, why, who it is shared with, and the choices you have. Questions go to support@caivo.ca.

The short version. Caivo is local-first: your data lives on your device and is only sent to our backend when you create an account. We do not run ads, we use no analytics or tracking tools, and we never sell your data.

What we collect

Account details: your email address, a password (stored only as a secure hash), a display name, and the handle you choose.
What you tell the coach: your onboarding answers (wake and sleep times, caffeine and alcohol habits, the outcomes you pick, and any obstacles or notes you type), the habits you build, your daily completion record, and anything you type to the coach in chat. Some of this describes health behavior, so we treat it as health-related data even though it never comes from Apple Health or Google Fit, which Caivo does not read.
Purchase status: whether you hold an active subscription or lifetime purchase, and the transaction identifiers your app store and RevenueCat provide. We never see your full card number.
Friends data: if you add friends, they can see your handle, display name, current streak, blueprint percentage, and reps this week. They never see your habits, your inputs, or your records.
Basic technical data: our backend receives standard request information such as an IP address, used to operate and secure the service.

How we use it

To run the app and sync your record across your devices.
To generate your personalized coaching, protocol, and insights.
To process your subscription and restore purchases.
To send you account and confirmation emails.

AI coaching

Caivo's coaching is generated by a large language model. When you use coaching features, the relevant text you provided (such as your goals, obstacles, and completion statistics) is sent to our AI provider to produce a response. It is used to generate your reply, not to train their models. The scientific evidence in the app is the source of truth; the AI reasons over it and never invents health claims.

Who we share it with

We use a small set of service providers who process data only to run Caivo on our behalf:

Supabase — database, authentication, and backend hosting.
Anthropic — the AI model that powers coaching.
RevenueCat — subscription management.
Apple and Google — payment processing through their app stores.
Resend — sending account and confirmation emails.

We do not sell your data, share it with advertisers, or use it for any advertising.

What we do not do

No advertising and no ad networks.
No analytics, tracking, or profiling SDKs.
No selling or renting of personal data.

Reporting and moderation

If you add friends, they see the handle and display name you chose. Those names are checked against a block list when you set them. On the friends board you can remove, block, or report anyone, and you can report anything the coach says from the chat itself. Reports reach us directly and we act on them; you can also write to support@caivo.ca.

Storage, security, and retention

Data is encrypted in transit. Your data is kept while your account is active.

Deleting your account. Open Settings, find Account, and choose "delete account". That permanently removes your login, your synced record, your handle, your friendships, and your referral history from our backend. It happens immediately and cannot be undone. A subscription is held by Apple or Google, so cancel it in your App Store or Play Store settings; deleting your Caivo account does not cancel it. You can also write to support@caivo.ca and we will do it for you.

Your rights

You can request access to, correction of, or deletion of your personal data by emailing support@caivo.ca. Depending on where you live, you may have rights under laws such as GDPR (Europe), PIPEDA (Canada), or the CCPA (California). We honor these requests for all users.

Children

Caivo is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

Changes

If this policy changes, we will update the date above and, for material changes, notify you in the app.