Privacy Policy - Zuva

This Privacy Policy explains how Zuva, developed by One4Studio, handles your information. Zuva is designed to be private: there are no accounts, we run no ads and no third-party analytics SDKs, and your health and personal content stays on your device. The only information that leaves your device is described below: cloud AI coach messages (only after you explicitly allow it), a small set of anonymous usage counters, and anonymous crash reports.

Data Stored on Your Device

The following is stored locally on your device and, if you enable iCloud sync (a Pro feature, off by default), synced privately through your own Apple iCloud (CloudKit) account:

  • Your habit logs, streaks, and badges
  • Journal entries and mood check-ins
  • Progress photos
  • Fasting sessions
  • Your profile — such as your first name, goal, and bed/wake times
  • Whether you have an active Zuva Pro subscription

Apple Health (Optional)

If you grant access, Zuva reads certain Apple Health data — such as steps, active energy, heart rate, heart-rate variability, sleep, VO2 max, body measurements, workouts, and mindful sessions — to verify habits and show trends. This data is used only on your device and is never sent to our servers. Zuva does not sell or share your health data.

Camera, Photos & Voice (Optional)

With your permission, Zuva uses your camera and photo library for progress photos (stored on your device), and your microphone for journal dictation. Speech transcription is performed on your device.

App Blocking / Screen Time (Optional)

If you enable the “No Screens” bedtime blocker, Zuva uses Apple's Family Controls (Screen Time) framework to shield the apps you choose. Your selection is handled entirely by Apple on your device as opaque tokens — Zuva never sees which apps you pick, and this information is never sent to us.

AI Coach

Zuva includes an AI coach. On devices that support Apple Intelligence, many answers are generated fully on your device and nothing is sent anywhere. Anything the on-device model cannot answer requires the cloud coach, described below.

Nothing is sent to the cloud coach until you explicitly allow it. The first time an answer would require it, Zuva shows a consent screen listing exactly what is sent and who it is sent to. You can withdraw that permission at any time in Settings → AI Coach, which also deletes the conversation stored on your device. If you decline, the coach continues to work on-device where available, and the rest of the app is unaffected.

What is sent. When you send a message to the AI coach — or when a Pro weekly check-in or weekly recap is generated — the following is transmitted:

  • Your first name, as entered in the app
  • Your health goal, self-reported activity level, and current protocol level
  • Which habits you have unlocked, your score for that day, and your current streak
  • Your recovery reading for that day, when available
  • Your self-reported smoking status, if you chose to provide it
  • The message you type and the recent conversation history

Who it is sent to. Messages are transmitted over an encrypted connection to a server operated by One4Studio (hosted on Cloudflare), which forwards them to Google's Gemini API to generate the reply. Google processes this data as a service provider under the Gemini API terms, which prohibit using API data to train Google's models and require confidentiality and security protections comparable to those described in this policy. We do not sell this data, and it is not used to train any model.

What is never sent. Your journal entries, progress photos, Apple Health data, and your location are never transmitted to the AI service. They remain on your device.

Identifiers and retention. An anonymous, randomly generated device identifier is used only to authenticate the request and enforce usage limits; it is not linked to your identity. Your conversation is stored on your device so it survives restarting the app. We do not retain message contents on our servers after the reply is returned — only anonymous per-device rate-limit counters.

Subscriptions & Purchases

Zuva Pro subscriptions are processed by Apple through the App Store. We use RevenueCat to manage subscription status. Apple and RevenueCat handle purchase information (such as an anonymous purchase identifier and receipt) under their own privacy policies. We never receive your card or payment details.

Anonymous Usage & Crash Data

To understand whether the app works well, Zuva sends a small number of anonymous milestone events to our own server (for example: onboarding completed, first day completed, subscription started). These events contain no personal data, no health data, and no advertising identifiers — only the event name and the same anonymous device identifier used for the AI coach, which is not linked to your identity. Each milestone is counted at most once per device. If the app crashes, Apple's MetricKit may deliver an anonymous diagnostic report (app version and technical stack trace) that we forward to our server to fix bugs; crash reports are deleted within 30 days.

Accountability Partner (Optional)

If you invite a partner, Zuva shares only your first name, your daily completion percentage, and your streak with that one person, through a private Apple iCloud (CloudKit) share that you create and can revoke at any time. Individual habits, journals, and health data are never shared. We do not operate a server for this feature — the data moves directly between your iCloud accounts.

Data Sharing

We do not sell your personal data, and we do not use it for advertising. We share limited information only with the service providers needed to run the app: Apple (App Store, iCloud, Health, Screen Time), RevenueCat (subscription management), Cloudflare (our secure server for the cloud AI coach, anonymous usage counters, and crash reports), and — only after you have allowed the cloud AI coach — Google (Gemini AI). Each of these providers is bound by contract to protect this information to a standard at least equal to the one described in this policy, and none of them is permitted to use it for their own purposes.

Data Security

Your on-device data is protected by your device's security features (passcode, Face ID, Touch ID) and iOS sandboxing. Any iCloud data is protected by your Apple ID and Apple's encryption. AI coach requests are transmitted over encrypted connections.

Data Retention & Deletion

Because your data lives on your device and, optionally, in your private iCloud, you can delete it at any time by uninstalling the app and removing Zuva's data from your iCloud settings.

Children's Privacy

Zuva is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the date below.

Contact Us

If you have questions about this Privacy Policy, contact us at info@one4studio.com

Last updated: 31 July 2026

← Back to Home