AŠVA Privacy Policy
Last updated: September 15, 2026. Contact: support@asva.life
AŠVA ("AŠVA," "we," "us," or "our") is operated by YOI Athlete LLC, a Virginia limited liability company. This Privacy Policy explains what information we collect through the AŠVA mobile application and website (together, the "Service"), how we use it, and the choices you have. We built AŠVA around a simple stance: your data exists to run your program, never to be sold, rented, or used for advertising.
Questions any time: support@asva.life.
Definitions and Key Terms
- AŠVA / we / us. YOI Athlete LLC, a Virginia limited liability company operating the Service.
- You / user. The person creating an account and using the Service.
- App. The AŠVA mobile application for iOS and Android.
- Account. Your registered profile, identified by your email address.
- Service providers. Companies that process data on our behalf to make the Service work (listed below).
What Information Do We Collect?
Account information. Your email address and a password. Passwords are hashed by our authentication provider. We never see or store your actual password. If you sign in with Apple or Google, we receive your email (or Apple's private relay address) and no other profile data.
Profile and onboarding information. Your chosen path and goals, date of birth, sex at birth (optional, "prefer not to say" is always available), activity level, and practice experience. These personalize your program, for example by calibrating your heart-rate readings by age and sex.
Safety screening. Health conditions you choose to disclose during the Safety & Intake screening (for example, heart conditions, pregnancy, or recent injuries). We use these for exactly one purpose: automatically adapting your practices so they're safe for you.
Daily practice data. Your check-ins (mood words and how you're arriving), body-map entries (areas you flag), breath-hold results, pulse checks, mind checks, logged sleep hours and water intake, completed sessions, streaks, and your AŠVA Score (also called the Resonance Score) history.
Journal content. Your Golden Book entries: affirmations, intentions, gratitude, and reflections. If you use the voice-note option, speech is converted to text on your device by Apple's or Google's on-device speech recognition; we store only the resulting text, never audio recordings.
Technical and crash data. If the app crashes or errors, we receive a technical report (device model, operating system version, and the technical trace of the error) through our crash-reporting provider. These reports never include your journal content, check-ins, or health information.
Subscription status. Whether you have an active AŠVA Premium subscription. Payment itself is handled entirely by Apple or Google. We never see or store your payment card details.
What We Do NOT Collect
No advertising identifiers, no location tracking, no contact lists, no photos (unless you explicitly choose to save or share something), no audio recordings, and no data purchased from third parties or data brokers.
How Do We Use The Information We Collect?
- To run your 9-week program, daily check-ins, and AŠVA Score
- To adapt practices to your safety screening (our Modification Matrix)
- To personalize suggestions (for example, gentler flows on days you flag pain)
- To maintain your journal, streaks, and progress history
- To provide customer support when you contact us
- To send essential service emails (account confirmation, password reset)
- To fix crashes and improve reliability
We do not use your information for advertising, and we do not sell or rent it to anyone.
Do We Share Information With Third Parties?
Only with the service providers that make the app function, and only to the extent needed:
- Supabase. Our database and authentication provider; stores your account and app data with row-level security so only your account can access your records
- Cloudflare. Streams the practice videos and meditations to your device
- Apple / Google. Process payments and subscriptions; provide on-device speech recognition for voice notes; provide sign-in services if you choose them
- RevenueCat. Manages subscription status across platforms
- Sentry. Receives crash reports (technical data only, as described above)
Each provider is bound to use data only to provide their service to us. We do not share your information with advertisers, data brokers, or analytics resellers. If AŠVA is ever acquired or merges with another company, your data would transfer with the Service under this same policy, and we would notify you.
Partner Directory ("Talk Directory"). The professionals listed in the app are independent practitioners. If you choose to contact or book with one, you do so directly with them, outside AŠVA. We never see or store your calendar, communications, payments, or session details with any partner.
Connected Health Services (Optional)
If you choose to connect a health service, Apple Health (HealthKit) on iOS, Health Connect on Android, or Fitbit, AŠVA reads only the measurements that sharpen your AŠVA Score: sleep (hours and stages), resting heart rate, heart-rate variability, overnight breathing rate, and VO2 max. Any wearable that shares into Apple Health or Health Connect (Apple Watch, Oura, WHOOP, Garmin, Fitbit, Pixel Watch, Samsung) works through that hub; AŠVA never connects to the wearable maker directly except Fitbit. This data is used for exactly one purpose: computing your score pillars and personalizing your program. VO2 max is shown as context only and never scored.
- Data obtained from HealthKit or Health Connect is used solely to provide the features you request. It is never used for advertising or marketing, never sold, and never shared with third parties, consistent with Apple's and Google's health-data rules.
- Connecting is always optional. The manual paths, pulse check, breath test, logging sleep, give you the same live score without connecting anything.
- Disconnect any time: in the app (You → Disconnect Apple Health / Health Connect, shown once a connection exists) or by revoking AŠVA's access in the Apple Health app or Health Connect settings. Disconnecting stops all new reads immediately; previously synced values can be removed by deleting your account, or on request at support@asva.life.
Consumer Health Data (Washington My Health My Data Act and Similar Laws)
Your check-ins, screening answers, breath and pulse measurements, and connected-health data are "consumer health data" under laws such as Washington's My Health My Data Act. Our commitments, everywhere and for everyone:
- Separate consent. We ask for your explicit, standalone consent to collect and process health and wellness data before the Safety & Intake screening, a dedicated consent step, not bundled into Terms acceptance, and we log the date and policy version of your consent.
- No sale, no ad-sharing. We never sell consumer health data and never share it for advertising. It is processed only to provide the Service.
- No geofencing. We do not use geofencing of any kind. We collect no location data at all.
- Withdrawal. Withdraw consent any time by deleting your account in the app (which permanently deletes the data) or by emailing support@asva.life; withdrawal stops all further collection.
- Appeals. If we decline a request you make about your data, you may appeal by replying to our decision at support@asva.life. Your appeal will be reviewed by someone other than the original decision-maker, and we will respond with the outcome and the reasons for it. Washington residents who are unsatisfied with an appeal outcome may contact the Washington State Attorney General.
How Do We Use Your Email Address?
For account authentication (confirmation, password reset), essential service notices, and replies to messages you send us. We do not send marketing email without your separate consent, and every non-essential email includes an unsubscribe option.
How Long Do We Keep Your Information?
For as long as your account exists. Delete your account (You → Account → Delete Account) and your data, profile, check-ins, journal, scores, sessions, everything, is permanently deleted from our systems. This is true deletion, not deactivation. Crash reports expire automatically on our crash provider's standard retention schedule (90 days).
How Do We Protect Your Information?
- All data travels encrypted (TLS) and is stored encrypted at rest
- Row-level security: every database table enforces that only your authenticated account can read or write your records
- Passwords are hashed; we cannot read them
- Payment details never touch our systems (Apple/Google handle them)
- Voice notes are transcribed on your device; audio never leaves it
No method of transmission or storage is 100% secure, but we treat your practice data with the sensitivity it deserves.
AŠVA Is a Wellness Service, Not a Medical Service
The information you share with AŠVA (including safety screening and daily check-ins) is used to personalize a wellness program. It is not medical data in a clinical sense: we are not a healthcare provider, the Service does not provide medical care, diagnosis, or treatment, and your data is never used for medical decision-making. AŠVA is not a HIPAA-covered entity.
Can I Update, Export, or Delete My Information?
Yes, all three, directly in the app:
- Update: your profile and safety screening are editable any time (You → Health & Safety)
- Export: You → Export My Data produces a complete copy of your data in a portable format
- Delete: You → Delete Account permanently removes your account and all associated data
You can also email support@asva.life for help with any of these.
Your Rights (GDPR, CCPA/CPRA, and Similar Laws)
Depending on where you live, you may have legal rights to access, correct, export, delete, or restrict the processing of your personal information, and the right not to be discriminated against for exercising them. AŠVA's in-app tools above satisfy these requests directly, and we honor the same rights for everyone, everywhere, regardless of jurisdiction. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we do not use sensitive personal information for anything beyond providing the Service. California residents may exercise all rights described above via the in-app tools or support@asva.life; we respond within the timelines the law requires.
Europe, the United Kingdom, and Switzerland
If you use AŠVA in the European Economic Area, the United Kingdom, or Switzerland, this section applies to you and adds to everything above.
Who is responsible. YOI Athlete LLC is the data controller for the information described in this policy. Reach us any time at support@asva.life.
Why we are allowed to process your information. We rely on four legal bases, and only these:
| What we process | Legal basis |
|---|---|
| Account, profile, program progress, subscription status | Performance of our contract with you (Article 6(1)(b)) |
| Health and wellness data: safety screening, check-ins, breath, pulse and mind readings, body map, sleep and water logs, journal entries, and anything read from Apple Health, Health Connect, or Fitbit | Your explicit consent (Articles 6(1)(a) and 9(2)(a)), asked as its own step before the Safety & Intake screening and withdrawable at any time |
| Crash reports, security, preventing abuse of the Service | Our legitimate interests in a reliable, secure service (Article 6(1)(f)) |
| Tax, accounting, and responding to lawful requests | Compliance with a legal obligation (Article 6(1)(c)) |
Your rights. You may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we process it, or send it to another provider in a portable format. You may withdraw consent for health-data processing at any time, which does not affect processing that already happened lawfully. The in-app tools (You → Export My Data, Update, Delete Account) answer the first three immediately; for anything else, email support@asva.life. We do not charge for these requests and we respond within one month.
Complaints. If you believe we have handled your data wrongly, please tell us first at support@asva.life so we can put it right. You also have the right to complain to your local data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), and in the EEA the authority for your country, listed by the European Data Protection Board (edpb.europa.eu).
Automated decisions. Your AŠVA Score and the safety adaptations we make to your practices are produced automatically from data you give us. They shape your wellness program and nothing else. They produce no legal effect and nothing similarly significant, they are never used to profile you for advertising, and no decision about you as a person is made on their basis.
Where your data goes. AŠVA is operated from the United States and your data is stored and processed on servers in the United States by the providers named above. Transfers out of the EEA, UK, and Switzerland are covered by the European Commission's Standard Contractual Clauses (with the UK Addendum where the UK applies), together with the technical protections described in "How Do We Protect Your Information?", encryption in transit and at rest, and row-level security that binds every record to its own account.
How long we keep it. For as long as your account exists. Delete your account and the data is permanently erased; crash reports expire on a 90-day schedule.
International Users
AŠVA is operated from the United States and data is processed on servers in the United States. By using the Service you understand your information will be processed in the U.S. under this policy. If you are in the EEA, the UK, or Switzerland, see the section above for the safeguards that apply to that transfer.
Teams and coaches
Some athletes join AŠVA through a team or organization code. Redeeming a code is your consent to share a limited view with that program's coach. The coach sees your name and email address, the date you joined, your AŠVA Score totals and their trend over time, your practice streak, and how many sessions you complete. That is the whole list.
A coach never sees your journal, your check-in words, your health screening answers, your body map, or any reading from a device (sleep, heart rate, HRV, breathing rate, VO2 max). Those stay with you.
To leave a team, email support@asva.life from the address on your account, or delete your account. Leaving stops the coach's view immediately. If you are under 18, join a team only with a parent or guardian's permission; programs that enroll minors are responsible for that consent.
Kids' Privacy
The Service is not directed to children under 13, and we do not knowingly collect information from them. If you are under 18, use AŠVA only with a parent or guardian's permission. In the EEA and the UK, where the age of consent for online services is set by national law at between 13 and 16, anyone under their country's age may use AŠVA only with the consent of a parent or guardian. If you believe a child has provided us information, contact support@asva.life and we will delete it.
Cookies
The mobile app does not use advertising cookies or cross-site tracking. Our website uses only the minimal cookies needed to function.
Links to Other Websites
The Service contains links to external sites (for example, research articles in the Sleep Hygiene checklist, or partner booking pages). This policy covers only AŠVA. External sites have their own policies.
Changes To This Privacy Policy
If we change this policy, we'll update the date at the top and, for material changes, notify you in the app or by email before they take effect. Continued use of the Service after changes means you accept the updated policy.
Contact Us
YOI Athlete LLC (AŠVA) · Virginia, USA
support@asva.life · www.asva.life