Irva ("Irva", "we", "us", "our") builds a companion app for people on GLP-1 medication. Your health data is sensitive, and protecting it is central to how we work. This policy explains what we collect, why, who we share it with, and the controls you have.
Subscription payments are processed by our payment provider, Razorpay. When you start a purchase we pass your name, email address and phone number to Razorpay to open the checkout. Your card and bank details are entered directly with Razorpay — they never pass through, and are never stored on, our servers. We retain your plan type, status and a transaction reference to manage your subscription.
Reminders you enable (medication, weigh-in, meal logging, weekly progress) are scheduled and delivered entirely on your device. Irva does not use a push server, does not create a push token, and does not transmit your reminder times or their contents anywhere. Granting the notification permission does not send us any data.
Basic device and app information needed to operate the service. Irva contains no analytics, advertising, tracking or crash-reporting SDKs. We do not track your behaviour in the app, we do not build advertising profiles, and we have no third-party trackers embedded.
Our legal bases are your consent (which you can withdraw) and the performance of our contract with you (providing the app you signed up for).
Irva's meal plans are generated using the Google Gemini API. When you request a plan, we send Google the details the feature needs: your age, sex, height, weight, activity level, medication and dose, where you are in your injection cycle, your protein target, your dietary preferences and your allergies. We send your first name only where it personalises the plan text; we do not send your email address, phone number, city, lab results or your logged history.
Google processes this data as our service provider under the Gemini API terms. Meal-plan generation is the only feature that sends your data to an AI provider — if you never open it, none of your data reaches Google through this route.
We do not sell your personal data, and we do not share it with advertisers or data brokers. We share it only with service providers who help us run Irva, under contracts that require them to protect it:
We may also disclose data if required by law or to protect the rights and safety of our users.
Data is encrypted in transit and at rest with our cloud provider. On-device secrets are held in the platform's secure store. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.
Depending on where you live (including under the EU/UK GDPR and India's Digital Personal Data Protection Act), you may have the right to access, correct, delete, export or restrict processing of your data, and to withdraw consent. To exercise these, contact support@akagai.co.
Irva is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.
Your data may be processed on servers located outside your country. Where required, we rely on appropriate safeguards for such transfers.
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, notified in the app.
Questions or requests: support@akagai.co.