Privacy Policy

Last updated September 30, 2026

Ava's Narwhal is a calming companion for hard moments, daily check-ins, resets, and sleep. We built it to be private by default: the app works without an account, and the sensitive things you record stay on your device.

The short version: your journal lives on your phone, chats are sent only to generate Nori's reply, we don't run ads, we don't sell data, and we don't track you across apps or websites.

What stays on your device (and your iCloud)

Your check-ins, journal and Loop Breaker entries, saved anxiety-wave logs, your "usual diet," your "What Nori knows" notes, care-tool usage, theme choice, and settings are stored on your device, and synced through your personal iCloud so they follow you to a new phone. That sync runs through your own Apple account — we do not have a copy, and there is no server-side account of ours holding them.

Talking to Nori

Chat sends information to our server and our AI provider, OpenAI, only after you agree to the in-app disclosure. What is sent: your message and recent conversation, today's saved entry labels and ratings, and the notes you added to "What Nori knows." These can contain sensitive information. Only share information you are comfortable sending.

The information is used to generate Nori's reply. Our chat handler does not save a server-side conversation. Chat history is stored on your device and in your personal iCloud; recent messages are included in later requests. We do not add your account name or email to the request, but the text you type may identify you.

OpenAI does not use API data to train its models by default. It may retain request and response content in safety-monitoring logs, usually for up to 30 days, with exceptions described in its policy. We do not promise zero retention. See OpenAI's API data controls and privacy policy.

Your journal text and Apple Health data are not included automatically. They may be shared if you type or paste them into chat. Declining chat consent leaves Anchor, care tools, journaling and the other local activities available.

Voice input

Dictation uses Apple speech recognition after microphone and speech permission. When on-device recognition is unavailable, Apple may process the audio on its servers. Recognized text goes to OpenAI only if you send it in chat after agreeing to chat sharing.

Recorded guidance

Some fixed spoken guidance was generated with AI during app development and is bundled in the app. Listening plays those recordings locally and sends no personal information to an AI service.

Sign in with Apple (optional)

You can use the entire app without signing in. If you choose to sign in with Apple, the name and email Apple shares are stored on your device (in the iOS Keychain) to personalize the app. We do not upload them to our servers.

Apple Health (optional)

With a separate permission, Nori can save the active time spent in completed Anchor exercises as Mindful Minutes in Apple Health. Paused and background time are excluded. Turn this off in the app or revoke access in Apple Health. Previously saved Health records remain in Apple Health, where you can manage or delete them.

If you connect Apple Health, the app reads sleep, activity, and heart data on your device to surface gentle patterns. Health data is never uploaded to us or shared with anyone.

Subscriptions

Nori+ subscriptions are processed by Apple through your App Store account. We never see your payment details. Crisis tools — including Anchor — are free and are never placed behind the paywall.

No ads, no tracking

The app contains no advertising, no third-party analytics SDKs, and no cross-app or cross-site tracking.

Children

The app is intended for ages 13 and up. We do not knowingly collect personal information from children under 13.

Deleting your data

Your data lives on your device and in your personal iCloud — there is no copy on our servers to request or erase. Use Account → Delete account (or Delete saved data when signed out) to clear the app's local and personal iCloud records. Deleting the app alone does not clear every iCloud copy. This does not cancel an Apple subscription or erase any provider logs retained under the policy above.

Changes

If this policy changes in a meaningful way, we'll update this page and the date above.

Contact

Questions? Email shawn@stockalarm.io.