Privacy Policy

1. Controller And Scope

The data controller is Igor Velykokhatko, operating as Vivamus AI in Poland (“Vivamus,” “we,” “us”). This policy applies to the Vivamus AI website, iOS app, and related support and service operations.

For privacy questions or requests, contact founders@vivamus.ai.

2. Data We Handle

Account, settings, and uploads. We handle your Sign in with Apple identifier, any name or email Apple makes available, account and consent status, app settings, a profile photo you choose to upload and store as your account avatar, other files you deliberately upload to an available feature, and support communications.

Conversations, profile, and memory. We store the text you submit, AI responses, voice transcripts, relevant conversation history, and profile information you confirm. To keep conversations coherent and personalized, Vivamus may automatically derive structured memories and observations from conversations, such as preferences, patterns, insights, emotions, values, and goals. It may also propose profile items for you to confirm.

Voice. For speech-to-text and real-time voice, we process the audio you choose to send and create transcripts. For text-to-speech, we process the text to create audio output. Vivamus does not keep raw voice audio as an account recording after the processing request ends, but transcripts and AI replies are stored with conversation history.

Approximate region. We may use the approximate region from your device settings to provide relevant safety resources. Vivamus does not request precise GPS location for this purpose.

Subscriptions. We receive transaction and entitlement information from Apple, such as product, subscription status, transaction identifiers, dates, price, and currency. Apple handles payment-card and App Store billing details; Vivamus does not receive your full card details.

Analytics and operations. If you consent on the website, we process limited website usage data. For iOS product analytics, Vivamus may process limited pseudonymous product-usage events. We do not include conversation text, audio, transcripts, profile or memory content, safety content, or direct account identifiers in product analytics. We also process technical information needed to operate, secure, and troubleshoot the service.

Sources. We obtain data directly from you; from Apple when you sign in, subscribe, restore a purchase, or use device services you permit; automatically from your app, browser, and our service operations; and from the processors identified below when they return an AI, voice, hosting, storage, analytics, or diagnostic result. We do not buy personal data from data brokers.

3. Why We Use Data

We use data to create and manage your account; provide text and voice conversations; maintain continuity, memory, and your confirmed profile; verify entitlements; respond to support; prevent abuse; protect and troubleshoot the service; understand consented website usage; and comply with law.

We do not sell personal data or use private Vivamus conversations, voice transcripts, memories, profile content, or other sensitive content for advertising or to train a Vivamus foundation model. We may use the limited website and app activity data described in Section 5 to understand and improve our own marketing. Our current iOS attribution and content-free conversion measurement is described in Section 5.

4. OpenAI And Voice Processing

You are interacting with an AI system, and its responses, transcripts, summaries, memories, and other outputs are machine-generated. The current service uses OpenAI as its AI and voice-processing provider. If you enable OpenAI processing, we send OpenAI the text or audio you choose to submit and relevant confirmed context, memories, profile information, and conversation history needed to generate a reply, transcribe speech, or speak a response. OpenAI may also analyze a user message and the related AI reply to automatically extract structured memories and observations for continuity and personalization, as described in Section 2. Conversation content can reveal highly personal information. Do not submit sensitive information you do not want processed.

You can turn off OpenAI processing in app settings. This stops new AI processing and means AI conversation features will not work; it does not by itself delete information already stored in your Vivamus account. Use account deletion or a privacy request for deletion.

OpenAI’s published API data controls state that API inputs and outputs are not used to train its models unless the API customer explicitly opts in, and that provider retention varies by endpoint and account setting. See OpenAI API data controls.

5. Analytics, Attribution, And Website Storage

Website analytics is optional and starts only after you select “Accept all.” It helps us understand how the website is used and does not receive conversation, account, profile, or form content.

When iOS product analytics is enabled, the app sends limited pseudonymous product-usage data to Amplitude and Firebase Analytics so we can understand and improve the product. We do not use this analytics for cross-app advertising or include private conversation, profile, memory, or safety content.

On iOS, AppsFlyer measures installs and campaigns and receives limited, content-free events for completed registration, trial start, and subscription. Subscription measurement may include the monthly or annual plan and the amount and currency verified by StoreKit. Apple’s advertising identifier (IDFA) is available to AppsFlyer only if you authorize tracking through iOS App Tracking Transparency. We do not send AppsFlyer or advertising partners conversation text, audio or transcripts, profile or memory content, safety content, names, email addresses, Apple or Vivamus account identifiers, payment credentials, or receipt content. If an advertising partner is configured, such as Meta, it may receive this limited attribution data through AppsFlyer.

You can allow or deny tracking in the iOS prompt and change your choice later in iOS Settings; this controls access to the advertising identifier, while content-free conversion events may still be measured without it.

Firebase Crashlytics separately receives crash reports and reliability diagnostics. We do not intentionally attach an account identifier or private conversation, profile, memory, or safety content.

To change your website choice, clear this site’s browser data and reload it. A Global Privacy Control signal keeps optional analytics off. Withdrawing consent stops future optional website analytics; contact us to request deletion of previously collected events.

6. Legal Bases

Where the GDPR applies, we rely on: performance of our contract to provide your account, conversations, personalization, and entitlements; consent for OpenAI processing, optional website analytics, and special-category information where required; legitimate interests in limited, pseudonymous product analytics, security, fraud prevention, reliability, support, service diagnostics, and understanding our own marketing; and legal obligations such as accounting or responding to lawful requests. You may object to processing based on legitimate interests as described in Section 9.

If you voluntarily include information that reveals health, sexuality, religion, political views, or other special-category data, we process it only to provide the features you request and, where required, on the basis of your explicit consent. You may withdraw consent prospectively, but doing so may make the relevant feature unavailable.

7. Who Receives Data

We disclose only the data needed to providers that help us deliver and improve the service: OpenAI for AI and voice processing; Google Cloud and Neon for hosting and storage; Apple for authentication, device services, app distribution, and subscriptions; Amplitude and Google/Firebase for the limited analytics described in Section 5 when enabled; Firebase Crashlytics for crash and reliability diagnostics; and AppsFlyer for the limited iOS attribution and conversion data described in Section 5. If we configure an advertising partner for a campaign, such as Meta, AppsFlyer may make that limited data available to the partner.

We require processors to handle personal data only for instructed service purposes and under contractual and legal protections appropriate to the processing. No internet service can guarantee that every jurisdiction provides identical protection.

We may also disclose information to professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect people or the service, establish or defend legal claims, or complete a business reorganization subject to appropriate safeguards. We do not disclose conversation content to analytics providers.

8. Retention, Account Deletion, And Backups

Account, conversation, transcript, memory, and profile data is generally kept while your account is active so the service remains continuous. We keep support, security, website analytics, transaction, and diagnostic records only for as long as needed for their stated purpose, applicable legal duties, disputes, or fraud prevention. Apple and other providers keep their own records under their terms and legal duties.

You can delete your account in the iOS app. Deletion removes the account and associated personal data from Vivamus active systems, except information we must retain by law or need for a narrowly defined legal or security purpose. Content-free or de-identified usage and cost records may remain where they no longer identify your account. Deleting your Vivamus account does not cancel an Apple subscription.

If residual data remains in disaster-recovery backups, it is isolated from ordinary use and deleted or overwritten under the applicable backup lifecycle. Provider-side API logs and temporary processing records follow the provider’s documented controls. Where no fixed period is stated, retention depends on the processing purpose, account status, data sensitivity, legal duties, security needs, and provider backup cycle.

9. Your Choices And Rights

You can edit confirmed profile information and control OpenAI processing in the app. Depending on applicable law, you may also ask us to access, correct, delete, restrict, or provide a portable copy of personal data; object to processing based on legitimate interests; or withdraw consent without affecting earlier lawful processing.

Email founders@vivamus.ai to exercise a right or appeal a refusal. You may use an authorized agent where applicable. We may verify your identity or the agent’s authority and may retain limited evidence that a request was completed. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

You may complain to the President of the Personal Data Protection Office in Poland (UODO), the supervisory authority where you live or work, or another competent regulator. Residents of California and other U.S. states may request the applicable access, correction, deletion, portability, opt-out, limitation, appeal, or authorized-agent rights. We do not currently sell personal data. Before beginning any activity that legally constitutes sharing for cross-context behavioral advertising, we will provide the required notice and opt-out method.

10. Sensitive And Consumer Health Data

Vivamus is a general-wellness conversation service, not a health-care provider, and is not intended to provide HIPAA-covered health care. Information you submit may therefore not be protected by HIPAA. Your conversations and derived memories may nevertheless contain or infer information about mental or physical health, emotions, relationships, sexuality, beliefs, or other sensitive matters. We use such information only to provide and personalize the service you request, protect the service, comply with law, and fulfill a request you make; we do not sell it, use it for advertising, or use geofencing around health-care facilities.

Our separate U.S. Consumer Health Data Privacy Notice provides the additional disclosures and rights required in Washington and similar U.S. jurisdictions.

11. Automated Processing

Vivamus uses automated AI processing to generate conversations, transcripts, summaries, safety messages, and memory or profile suggestions. These features do not make decisions that produce legal or similarly significant effects about you. Do not use Vivamus to make high-impact decisions. You can correct profile information, delete your account, turn off new OpenAI processing, or contact us about an automated result.

12. International Processing

Some providers may process data outside Poland or the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses, or another lawful transfer safeguard and assess supplementary safeguards as appropriate. Contact us to request information about the safeguard relevant to your data. Provider location and retention can vary by service configuration.

13. Security And Incidents

We use technical and organizational measures intended to protect personal data, including access controls, data minimization, and encryption in transit. No service can guarantee absolute security. Contact us promptly if you believe your account or data has been compromised. We will notify affected people and regulators of a qualifying personal-data breach when applicable law requires it.

14. Adults Only

Vivamus is for people aged 18 or older. Do not use the service or submit personal data if you are under 18. If we learn that an under-18 user has provided personal data, we will take appropriate steps to delete it.

15. Changes

We may update this policy when the service or law changes. We will change the “Last Updated” date and provide additional notice when required. Material changes apply prospectively unless law requires otherwise.

16. Contact

Controller: Igor Velykokhatko, operating as Vivamus AI, Poland. Email: founders@vivamus.ai.