Privacy Policy

This Privacy Policy explains how Avidity — an application owned and operated by an individual based in Israel — collects, uses, shares, and protects your personal information when you use the Avidity mobile app, the website at avidity.md, and related features and services, including our AI companion feature, "The Coach".

We are the party responsible for your personal information (the "database owner" under Israel's Protection of Privacy Law, and the "controller" under the EU/UK GDPR where it applies).

Please read this Policy alongside our Terms of Use. By using the Service, you acknowledge this Policy. Where the law requires your consent — for example, to process certain sensitive information — we will ask for it separately and clearly.

This is a short overview, not a substitute for the full Policy below:

• We collect the information you give us (like your account details and what you log in the app), information created as you use the Service, and some technical/device information.
• Some of what Avidity handles is especially sensitive — in particular your financial information, and your mood and energy entries. We treat it with extra care and, where required, only with your consent.
• The Coach uses AI to generate responses from your inputs and activity. It is not a human and is not professional advice.
• We use your information to run the Service for you, keep it secure, and improve it. We do not sell your personal information.
• You have rights over your information, including to access it, correct it, and delete it — and you can delete your account and data.
• If you have any questions, contact us at support@avidity.md.

Database owner / controller: the individual owner and operator of Avidity. Contact: support@avidity.md.

We collect the following categories of personal information:

a. Information you give us

• Account and profile information: such as your name or nickname, email address, password (stored in hashed form), and any profile preferences.
• Content you enter in the app ("User Content"): tasks, habits and streaks, notes, reminders, savings goals, and other information you choose to record.
• Mood and energy entries: the wellbeing-related information you log. Depending on how detailed this is, it may be treated as especially sensitive — see Section 6.
• Financial information: the figures and details you record in the finance module — for example savings goals, budgets, balances, income, or spending. This is especially sensitive information.
• Communications: messages you send to The Coach, and anything you send us for support or feedback.

b. Information created when you use the Service

• Usage information: features you use, actions you take, settings, and engagement patterns (which help us run and improve the Service, including personalising The Coach).
• Device and technical information: device type and model, operating system, app version, language settings, identifiers, and diagnostic/crash data.
• Approximate location and network information: such as your IP address and general region. Under Amendment 13, identifiers such as IP addresses and location data are treated as personal information. We do not collect precise GPS location unless we ask you and you turn it on.

c. Information from third parties

• App stores and payment processors: confirmation of purchases and subscription status from Apple or Google (we do not receive your full payment-card details).

We ask you to only share what you're comfortable with. Some features won't work without certain information, and we'll tell you when that's the case, along with the consequences of not providing it.

We use your information for the purposes below. Where the GDPR applies, the relevant legal basis is shown; under Israel's Protection of Privacy Law we rely on your consent and on the necessity of the processing to provide the Service you asked for.

We will not use your information for a materially different purpose without telling you and, where required, getting your consent.

Some information you provide is treated as especially sensitive under Israel's Protection of Privacy Law (as amended) and as a special category under the GDPR — in particular your financial information, and, depending on their content, your mood and energy entries.

For this information we:

• Collect and use it only where you have chosen to provide it and, where the law requires, on the basis of your explicit consent, which you can withdraw at any time.
• Use it only to provide and personalise the features you use (including The Coach) and for the purposes in Section 5 — not for advertising, and we do not sell it.
• Apply additional safeguards to protect it (see Section 10).

You are never required to log sensitive information to use Avidity — those features are yours to use or skip.

The Coach is an automated feature that uses artificial intelligence to generate personalised responses, encouragement, reminders, and reflections. Here is what you should know:

• What it does: It analyses the information you provide and your in-app activity to produce conversational, accountability-style support and suggestions.
• What data it processes: The messages you send it and the relevant User Content you have chosen to record (which may include mood/energy and finance information, if you use those features).
• How it works behind the scenes: To generate responses, your inputs may be processed using AI infrastructure, which may include trusted third-party AI service providers acting on our behalf under contract.
• Human oversight and automated decisions: The Coach does not make decisions that produce legal or similarly significant effects about you. It provides supportive content only; you remain in control of any decision. You can contact us at support@avidity.md if you have questions about how it works or want a human to review a concern.
• Limits: AI outputs can be inaccurate or unsuitable, and The Coach is not a medical, mental-health, financial, legal, or other professional service. Please see the disclaimers in our Terms of Use.

We do not sell your personal information. We share it only as described here:

• Service providers (processors): companies that help us run the Service under contract and on our instructions — for example cloud hosting and storage, AI infrastructure providers (for The Coach), analytics providers (such as Google Analytics on our website), crash/diagnostics tools, and customer-support tools. They may only use your information to provide their services to us.
• App stores and payment processors: Apple and Google, to process purchases and manage subscriptions.
• Legal and safety reasons: where we reasonably believe disclosure is needed to comply with the law, respond to a lawful request, enforce our Terms, or protect the rights, safety, or property of you, other users, or us.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that deal, subject to this Policy.
• With your direction or consent: where you ask us to share information or otherwise agree to it.

We aim to share the minimum needed and to work only with providers that offer appropriate protection.

We are based in Israel, and your information is processed in Israel and may be processed in other countries where our service providers operate. Israel is recognised by the European Commission as providing an adequate level of data protection.

Where we transfer personal information out of Israel or (where relevant) out of the EEA/UK, we take steps required by law to protect it — for example transferring only to countries with adequate protection, or putting in place appropriate safeguards such as the applicable data-transfer agreements or Standard Contractual Clauses, and ensuring a comparable level of protection for your information. You can ask us for more detail using the contact in Section 3.

We use technical and organisational measures designed to protect your information against loss, misuse, and unauthorised access, use, alteration, or disclosure. Depending on the context these include: encryption of data in transit and at rest, access controls and authentication, hashing of passwords, network protections, logging and monitoring, and regular review of our security practices. We apply additional protections to especially sensitive information (Section 6).

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will act in line with our legal obligations, including notifying you and the relevant authority where required.

Our website (avidity.md) uses Google Analytics 4, a web-analytics service provided by Google, to understand how visitors use the site so we can improve it. It sets cookies and collects usage and approximate-location (IP-based) information as described in Google's own policies. We do not use it for advertising, and we do not sell this information. The mobile app does not use third-party advertising or analytics trackers beyond what is needed to operate and diagnose it.

Where the law requires consent for non-essential analytics or cookies, we will ask for it and let you manage your choices. You can also opt out through your browser settings or Google's opt-out tools.

We keep your personal information for as long as your account is active and as needed to provide the Service. After that, we keep it only as long as necessary for the purposes it was collected — for example to meet legal, accounting, tax, or regulatory obligations, resolve disputes, and enforce our agreements — after which we delete it or irreversibly anonymise it.

When you delete your account (Section 13), we delete or anonymise your associated personal information, except for limited data we are permitted or required to retain (for example, records needed for legal compliance or fraud prevention), which we keep only for as long as necessary and then delete.

We take reasonable steps to prevent breaches by our service providers, but as noted in Section 10 no system can be guaranteed completely secure.

Subject to applicable law, you have the following rights over your personal information:

• Access — get confirmation of what we hold and a copy of it.
• Correction — ask us to fix information that is inaccurate or incomplete.
• Deletion — ask us to delete your information (see account deletion below).
• Portability — where applicable, receive certain information in a portable format.
• Objection and restriction — object to, or ask us to restrict, certain processing (for example processing based on legitimate interests).
• Withdraw consent — where we rely on your consent (including for sensitive information or marketing), withdraw it at any time, without affecting processing already carried out.
• Opt out of marketing — unsubscribe from marketing messages at any time using the link in the message or your settings.

Deleting your account and data. You can delete your account and its associated data at any time by emailing us at support@avidity.md. This removes your personal information as described in Section 12.

How to exercise your rights. Contact us at support@avidity.md. We may need to verify your identity, and we will respond within the timeframe the law requires. Using these rights is free unless the law allows a reasonable fee (for example for excessive or repetitive requests).

Complaints. If you have a concern, please contact us first so we can help. You also have the right to complain to a supervisory authority — in Israel, the Privacy Protection Authority (PPA).

The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, contact us at support@avidity.md and we will take appropriate steps to delete it.

We may update this Policy from time to time. If we make material changes, we will notify you by an in-app notice, by email, or by updating the "Last updated" date above, and — where the law requires — we will ask for your consent. Please review this Policy periodically. Continuing to use the Service after changes take effect means you acknowledge the updated Policy.

If you have any questions, requests, or concerns about this Policy or your information:

Avidity — support@avidity.md