Summary

Drivis is designed to keep your data yours. Most of your notes, plans, and chat history are stored on your device. If you enable proactive notifications, a limited set of your content is also stored on our server so Denzel can reach you even when the App is closed — the exact categories and retention periods are described below. Your voice recordings are transcribed in memory during processing and the audio itself is not retained by us. We use AI providers to power the App’s features, we do not run ads, we do not use third-party advertising or tracking analytics SDKs, and we never sell your personal data.

1. Who We Are

Drivis is operated by Hammaad Siddeeqee (“we,” “us,” “our”). We are the data controller for the personal data described in this policy. Contact: support@drivis.app.

2. What We Collect and Where It Lives

Content you provide (stored on your device, and see Section 2a for what’s also sent to our server for proactive notifications):

• Onboarding answers: goals, wake/sleep times, work schedule, coaching preferences, and similar setup information

• Voice notes and text notes

• Messages you send to Denzel, your AI coach

• Habit and life-tracking entries you create (mood, spending amounts, counters, time tracking, etc.)

• Personal instructions you give the App

Onboarding goals and acquisition source. When you complete onboarding, we retain the goals you stated and how you heard about Drivis on our server, associated with a random app-user identifier. We use this narrow record to understand product needs and measure marketing effectiveness. This record is limited to those two fields and does not include your schedule, wake or sleep times, coaching preferences, voice recordings, notes, or other onboarding answers.

Data generated by your use (stored on your device, and see Section 2a for what’s also sent to our server for proactive notifications):

• Daily plans, tasks, and completion history

• GI Scores, streaks, and analytics

• Denzel chat history

When the App requires AI processing (for example, building your plan), the relevant content is transmitted to our servers, forwarded to the applicable AI provider, processed, returned to your device, and is not retained by us after the request completes. See Section 5 for detail on this transient processing.

2a. Proactive Notification Server Snapshot (only if you enable proactive notifications)

If you enable proactive notifications, Denzel can message you even when the App is closed. To do this, we periodically retain a bounded, device-scoped snapshot on our server containing:

• Task titles, schedules, status, priority, and limited historical patterns

• Note excerpts and topics

• Goals and progress

• Scores and streaks

• Tool usage metadata and aggregate measurements

• Voice-note dates and state (not the audio itself — see Section 3)

• An opaque device identifier and your push notification token

Explicitly excluded from this snapshot: raw voice audio, your full coaching chat history, contacts, and precise location.

This snapshot is used solely to let our server evaluate whether a proactive check-in is warranted and to generate that message. You can disable proactive notifications at any time in the App’s settings, which stops new snapshots from being sent.

Purchase data: Subscriptions are processed by Apple and managed through RevenueCat. We receive your subscription status, a plan identifier, and an anonymous app-generated user identifier. We do not receive or store your payment card details.

Technical and diagnostic data:

• Push notification token: used to deliver notifications if enabled.

• Device/platform information: basic technical information necessary to operate the App.

• Diagnostic/error reports: limited technical information sent to help us identify and fix issues, not including the content of your notes, plans, or conversations.

3. Voice Recordings

When you record a voice note, the audio is captured on your device and transmitted securely (HTTPS/TLS) to our server, which forwards it to OpenAI for transcription. The audio is processed in memory during this request and is not written to our servers or databases. The recording and its transcript are stored locally on your device. Locally stored voice entries are automatically pruned from your device after approximately 30 days, or sooner if you delete them manually. Only the fact and timing of a voice note (not its content) is included in the proactive notification snapshot described in Section 2a.

4. AI Processing

Relevant content is sent to these providers strictly as needed for the specific feature you use:

• DeepSeek — generates your daily plans, powers Denzel coach conversations, evaluates your notes for suggestions, produces reports/scoring, and generates proactive notification content.

• OpenAI — transcribes your voice recordings (transcription only).

• Anthropic — generates personalized options during onboarding.

• ElevenLabs — where applicable, converts select coach messages into spoken audio.

These providers process data under their own applicable terms and act as our data processors/sub-processors. We send only the data necessary for the specific feature being used.

5. Transient Server Processing

Content sent for AI processing (outside the proactive notification snapshot described in Section 2a) passes through our infrastructure to the relevant provider and back to your device, and is not stored in our databases after your request completes, except brief operational logging necessary for security, abuse prevention, and debugging, and anonymized technical metrics.

6. What We Do NOT Do

• We do not sell your personal data.

• We do not show third-party advertisements.

• We do not use third-party advertising or tracking analytics SDKs.

• We do not use your content to build advertising profiles.

7. Retention

• Your device-stored content remains there until you delete it or delete the App.

• Notes and chat history older than approximately 30 days are automatically removed from device storage.

• Proactive notification server data (Section 2a): push-device records are removed after 90 days without refresh; proactive snapshots are removed after 45 days without refresh; delivery ledger records are removed after 90 days.

• Server-side AI processing outside Section 2a is transient, per Section 5.

• Subscription records are retained by Apple and RevenueCat per their own policies, and by us as necessary to administer your subscription and comply with legal/accounting obligations.

8. Deleting Your Data

Deleting the App removes your locally stored Drivis content. If you have proactive notifications enabled, resetting or deleting your account within the App also requests deletion of your associated server-side proactive snapshot, push token, and delivery ledger records. Uninstalling the App without first using this in-App deletion path may not immediately delete these server-side rows — they will be removed automatically by the retention schedule in Section 7. You may also contact support@drivis.app to request deletion or access to any data we hold. We will respond to verified requests within 30 days, or sooner where required by law.

9. Your Rights

Depending on where you live, you may have rights under applicable law — including the EU/UK GDPR and the CCPA — to access, correct, delete, or export your personal data, object to or restrict processing, and withdraw consent. Contact support@drivis.app to exercise them.

Legal bases for processing (GDPR/UK GDPR): performance of our contract with you; our legitimate interests in operating and improving the Service; and your consent where applicable (e.g. enabling proactive notifications).

California residents: we do not sell or “share” personal information as defined under the CCPA.

10. International Transfers

AI processing and server infrastructure may be located in the United States or other regions outside your own. We rely on appropriate safeguards required by applicable law for such transfers.

11. Children’s Privacy

Drivis is not directed at children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their data.

12. Security

We use HTTPS/TLS encryption for all communication between the App and our servers. We apply reasonable technical and organizational measures to protect your data, though no method of transmission or storage is 100% secure. In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by applicable law.

13. Push Notifications

Notifications (task reminders, Denzel check-ins, and similar) are opt-in and can be controlled at any time within the App’s settings or your device’s system settings. Disabling proactive notifications stops the server snapshot described in Section 2a from being updated.

14. Changes to This Policy

We may update this policy as the App evolves. We will update the effective date above and, for material changes, notify you within the App before they take effect.

15. Contact

support@drivis.app