Privacy Policy — Eve
Last updated: 8 June 2026 Effective date: 8 June 2026
1. Who we are
Eve ("Eve", "we", "us", "our") is a mobile and web application that supports expectant mothers through an emotionally balanced pregnancy. It is operated by:
- SSA Technologies LLC, a company registered in Wyoming, United States
- 30 N Gould St Ste R, Sheridan, WY 82801
- Privacy contact: [privacy@yourdomain.com]
- [EU/UK representative under GDPR Art. 27 / UK GDPR — if appointed; see Section 11]
2. The short version
- We collect only what we need to run Eve: your account details, the pregnancy details you choose to share, and the content you create.
- Some of this — your pregnancy and your emotional check-ins — is sensitive health data. We only collect it with your consent and treat it with extra care. We say more in our separate Consumer Health Data Privacy Policy.
- We do not sell your personal data and we do not use it for advertising.
- You can download all your data or delete your account anytime at More → Settings → My Account.
3. What data we collect
Data you give us
| Category | Examples | Why |
|---|---|---|
| Account details | Email, password (stored only as a salted hash) | Create and secure your account |
| Profile | Name, due date, baby's name, profile photo | Personalise the app |
| Pregnancy & wellbeing data (sensitive health data) | Due date, week of pregnancy, emotional check-ins (mood, energy, body, mind, notes) | Tailor content and support |
| Content you create | Ava conversations, birth manifestations, hospital-bag checklist, support messages, feedback | Provide the relevant feature |
| Partner sharing | Invitation codes, the link to an invited partner | Enable the optional Shared Support Circle |
| Purchases | Token balance and purchase records | Provide and account for in-app purchases |
Data collected automatically
| Category | Examples | Why |
|---|---|---|
| Technical & usage data | IP address, approximate country, device/browser type, access times, security logs | Operate the service, security, region-appropriate content |
| Authentication data | Session tokens, login attempts, verification and password-reset codes | Account security and fraud prevention |
We do not use third-party advertising or tracking SDKs and do not build advertising profiles.
4. Sensitive health data
Information about your pregnancy and emotional state is sensitive. In the US it is treated as consumer health data under laws such as Washington's My Health My Data Act and Nevada's health-data law; in the EU/UK it is special category data under GDPR Article 9. We only collect and process it with your consent, which you give when you choose to enter it (for example, completing a check-in). You can withdraw consent at any time by deleting the content or your account. Please read our separate Consumer Health Data Privacy Policy, which governs this data specifically.
5. How we use your data
We use your data to: create and run your account; provide and personalise the features you use; process payments; send essential service emails (verification, password reset, security); keep the service secure and prevent fraud and abuse; comply with law; and, only if you opt in, send product updates. We do not sell your data or use it for cross-context behavioural advertising, and we do not use your personal content to train AI models.
Legal bases (EEA/UK users). Where the GDPR/UK GDPR applies, we rely on: performance of a contract (running your account and features); your explicit consent (sensitive health data; optional marketing); our legitimate interests (security, fraud prevention, debugging); and legal obligations.
6. Ava, our AI companion
When you chat with Ava, your messages — and a short summary of your latest check-in, used to set Ava's tone — are sent to our AI provider (OpenAI) to generate a reply. Ava is an AI; her responses may be inaccurate and are never a substitute for professional medical or psychological advice. We keep your conversation history so you can revisit it; deleting your account deletes it.
7. Who we share data with
We share data only with service providers that help us run Eve, under contracts requiring them to protect it. We do not sell your data.
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, database, file storage, content delivery, security |
| OpenAI | Powering Ava's responses (receives chat content + check-in summary) |
| Stripe | Processing token purchases (handles card details directly; we don't store full card data) |
| Resend | Transactional email (verification, password reset) |
| App stores (Apple, Google) | In-app purchase billing and distribution |
We may also disclose data when required by law, to protect rights or safety, or in a business transfer.
Affiliate links. Some content (e.g., "The Natural Way") links to third parties such as doTERRA. Those sites have their own privacy policies, and we may earn a commission. See our Terms for the affiliate disclosure.
8. Your US privacy rights
Depending on your state of residence (for example California, Virginia, Colorado, Connecticut, Texas, Oregon, and others with comprehensive privacy laws), you may have the right to:
- Know / access the personal information we hold about you
- Correct inaccurate information
- Delete your information
- Data portability — obtain a copy in a portable format
- Opt out of "sale" or "sharing" of personal information and of targeted advertising — note: we do not sell or share your personal information and do not use it for targeted advertising, so there is nothing to opt out of
- Limit the use of sensitive personal information to what's necessary to provide the service
- Non-discrimination for exercising your rights, and (in some states) to appeal a decision
California residents also have the right to request the categories and specific pieces of personal information collected, the sources, the business purposes, and the categories of third parties with whom it is shared, and the "Shine the Light" right regarding direct-marketing disclosures (we do not disclose personal information to third parties for their direct marketing).
To exercise any right, use the in-app tools (Download my data, Delete account) or contact [privacy@yourdomain.com]. We will verify your request and respond within the time required by law. You may use an authorised agent where the law allows.
9. Your rights in the EEA / UK (GDPR)
If you are in the UK or EEA, you have the rights to access, rectify, erase, restrict, and object to processing; to data portability; to withdraw consent; and to lodge a complaint with your supervisory authority — for example, the UK Information Commissioner's Office (ICO, ico.org.uk) or Ireland's Data Protection Commission (DPC, dataprotection.ie). Use the in-app tools or contact [privacy@yourdomain.com]; we respond within one month.
10. International data transfers
Eve is operated from the United States, so your data is processed in the US, and some providers (e.g., Stripe, OpenAI) may process data in the US or other countries. If you are in the EEA or UK, transfers of your data to the US and elsewhere are made under appropriate safeguards — the EU/UK Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. You can request a copy of the relevant safeguards from us.
11. EU / UK representative
[If Eve has no establishment in the EU/UK but offers the Service to EU/UK users, GDPR Art. 27 / UK GDPR requires an appointed representative. List name and contact here, or remove this section if an EU establishment makes it unnecessary — confirm with counsel given the operator's presence in Spain.]
12. How long we keep your data
- Active accounts: kept while your account is active.
- Account deletion: a 30-day grace period during which signing back in restores the account; after 30 days, your account and associated personal data are permanently erased.
- Limited exceptions: we may keep certain records longer where required for security, fraud prevention, accounting, or legal compliance.
- Backups & logs: kept for a limited period and deleted on a rolling basis.
13. How we protect your data
Passwords are hashed with PBKDF2 and a per-user salt; data is encrypted in transit (HTTPS/TLS); session tokens can be revoked; rate limiting and account lockout deter brute-force attacks; and access to infrastructure is controlled. No system is perfectly secure, but we work to protect your information and to provide breach notifications as required by law.
14. Children
Eve is intended for adults aged 18 and over who are pregnant or supporting someone who is. It is not directed at children, and we do not knowingly collect personal information from anyone under 18 (or under 13 within the meaning of the US Children's Online Privacy Protection Act). If you believe a minor has given us data, contact us and we will delete it.
15. Cookies and local storage
The web app stores a small amount of data on your device (for example, your sign-in token) using browser local storage so you stay signed in. We do not use advertising or analytics cookies. (If this changes, we will update this section.)
16. Changes to this policy
We may update this policy. For material changes we will notify you in the app or by email before they take effect. The "Last updated" date shows the latest revision.
17. Contact
SSA Technologies LLC 30 N Gould St Ste R, Sheridan, WY 82801 Email: [privacy@yourdomain.com]