Privacy Policy

Depending on the services you use, AvaLife may collect:

• Identity data — name, email address, country
• Calendar and schedule data — via optional integrations with Google Calendar or similar
• Email metadata — subject lines and sender information (not email body content unless explicitly enabled)
• Usage data — pages visited, features used, session duration, and app interactions
• Device data — browser type, operating system, IP address (anonymised after 30 days)
• What you create with Ava — your conversations (typed or spoken; spoken words are turned into text and the recording is not kept), what Ava remembers about you, your Knowledge Base and the files you upload, documents, reminders, and the images and videos you create in Studio
• People partners invite — if you are a partner, the names, email addresses, country and language of the people you invite, any notes you add, how far they have got through your invitation, and their conversations with the AvaLife Business Companion
• Trial reservations and requests— before launch, a partner can reserve a free trial for someone, and someone talking to the Business Companion can ask their partner for one. We keep that person’s name, email address and language, the wording they agreed to, whether they confirmed, and the launch reminders they chose (email, and WhatsApp with their WhatsApp number if they choose it)
• The waiting list— your name, email address and any note, and, if you joined from a partner’s invitation, which partner invited you
• Reports you send — if you report something Ava generated, a copy of it, the reason you chose and any note you add

AvaLife does not currently collect health or wearable data, such as steps, sleep or heart rate. If we add this in future, we will update this policy and ask for your explicit consent before collecting any.

• To personalise Ava’s responses and intelligence for your specific context
• To improve product performance, accuracy, and features
• To process partner compensation and track network performance
• To send transactional communications (account, billing)
• To run trial reservations and the waiting list: to tell a partner when someone asks them for a trial or joins the waiting list from their invitation, to make that partner their sponsor if they sign up with the same email address when AvaLife opens, and to send only the launch reminders that person chose
• To review content reported to us, and to keep Ava safe and accurate
• To comply with legal obligations in the jurisdictions we operate

AvaLife will never sell, share, or monetise user data — under any circumstances. Your data belongs to you.

• Account data: retained while your account is active
• Usage logs: anonymised after 90 days, deleted after 12 months
• Partner compensation records: retained for 7 years for legal and tax compliance
• Trial reservations, trial requests and waiting-list entries: kept until the trial is used or released, or the request is declined or expires (after 14 days), and then kept as a record while the partner’s account is active. You can ask us to delete yours at any time.
• Reports: kept while the account that sent them is active
• When an account is deleted: personal data is deleted straight away (see Your Rights). Payment, refund and compensation records are kept for the periods above, without the person’s name or contact details.

Under UK GDPR and applicable international law, you have the right to:

• Access — request a copy of all data we hold about you
• Rectification — correct inaccurate data
• Erasure— request deletion of your data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Restriction — limit how we process your data
• Object — object to processing based on legitimate interests

Deleting your account.You can delete your account yourself in Account Settings > Security > Delete my account. We email you a code to confirm it’s you. Deleting it cancels any paid plan, revokes AvaLife’s access to Google, and deletes your conversations, memories, Knowledge Base, files, reminders, documents, the people you invited and the rest of your personal data. Payment, refund and compensation records are kept for as long as the law requires, without your name or contact details. If you are a partner, the people you sponsored move to your own sponsor.

To exercise any right, email privacy@avalife.io. We will respond within 30 days.

AvaLife products integrate with third-party providers to deliver core functionality. Current integrations include:

• Supabase — database and authentication
• Anthropic — AI inference powering Ava
• Vercel — hosting and CDN infrastructure
• ElevenLabs— turns Ava’s replies into speech when you listen to them
• Google — Calendar, Gmail and Drive (only if you connect them), and Maps for travel times, places and air quality
• OpenAI— turns your Knowledge Base and questions into a searchable form, so Ava can find the right entry (it does not write Ava’s replies)
• Perplexity — web research when you use Deep Research (your research question is sent)
• Segmind and fal — create the images and videos you ask for in Studio, from your prompt and any picture you add
• Resend— sends AvaLife’s emails, such as sign-in codes, invitations and reminders
• Notion and Todoist — only if you connect them
• Meta (WhatsApp) — sends a launch reminder by WhatsApp, only to people who chose one
• Open-Meteo — weather forecasts (only the place you ask about is sent)
• Stripe — payments; your card details go to Stripe and never reach AvaLife
• Sentry — error reports, so we can fix problems (stored in the EU; technical details only, with names, email addresses and message contents removed before they are sent)

Each provider is bound by data processing agreements. No provider is authorised to use your data outside of the service they provide to us.

Google API Services — Limited Use

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Connecting Google is optional. If you connect it, AvaLife uses each permission only for the feature you ask for:

• Google Calendar(calendar list and events) — to tell you what’s coming up, check when you’re free, and create, move or delete an event only after you confirm it.
• Gmail, sending — to send an email Ava has written for you, only after you approve it on screen. Ava never sends email on her own.
• Google Drive, files you choose— to make documents such as invoices from Google Docs or Sheets templates you pick, in an “AvaLife documents” folder. AvaLife can only see files you pick or that it created, never the rest of your Drive.
• Gmail, reading and drafts (beta, only if you switch on email reading) — to find and read the emails you ask about, include unread messages in your briefing, and save drafts you choose to keep.

To answer you, the relevant Google data is sent to our AI provider (Anthropic) and, if you listen to a reply, to our voice provider (ElevenLabs), solely to produce that answer. Google user data is never used to train or improve AI models, never used for advertising, never sold, and never read by people, except with your permission, for security, or where the law requires it. You can disconnect Google at any time in Account Settings > Connected Apps, which also removes AvaLife’s access in your Google Account; you can also remove it yourself in your Google Account under Security > Third-party access. To have data from Google that AvaLife has stored deleted (such as briefings), email privacy@avalife.io, or delete your account in Account Settings > Security.

How we protect Google data

• AvaLife does not keep a copy of your calendar, inbox or Drive. It reads from Google only when you ask for something, or for your briefing if you have switched that on.
• The access Google gives AvaLife is held on our servers only. It is never shown in the app or sent to your browser, and it is used only to carry out the features above.
• Everything is stored in our database with our hosting provider (Supabase), which encrypts data in transit and at rest. Every table has row-level security switched on, and the database can only be reached by our own servers.
• Only the AvaLife team members who need it to run and support the service can reach our systems, and they do not read your Google data except as described above.

What we keep from Google, and for how long

• Your connection to Google(the access Google gives AvaLife) is kept until you disconnect. Disconnecting in Account Settings > Connected Apps revokes it at Google and deletes it from our database straight away.
• Details that appear in a reply or briefing (for example an event you asked about, or an email Ava drafted) are kept in your conversation history and briefings while your account is active. You can delete any conversation yourself in the app.
• Records of documents AvaLife creates for you (such as an invoice) are kept while your account is active. The documents themselves are in your own Google Drive, and you control them there.
• Deleting it all.Delete your whole account yourself in Account Settings > Security > Delete my account, or email privacy@avalife.io to have your Google-derived data or your account deleted. We will respond within 30 days.

We use cookies for essential site functionality and, with your consent, for analytics. See our Cookie Policy for full details.

For privacy queries, contact us at privacy@avalife.io. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.