Riya is a recovery companion for women recovering from endometriosis or fibroid surgery, distributed through Apple (in TestFlight during testing, and on the App Store). We take your privacy seriously, and we have deliberately built Riya to collect as little as possible.
Riya is operated by Riya Health, a registered entity based in Australia, which is the data controller for the limited information described below. You can reach us any time at the contact address above.
The short version
- Riya works on your device. Your profile and daily check-ins are stored on your phone by default and don't leave it.
- We don't ask for your name, email, or any account. We never have.
- The main data that leaves your phone is: (1) check-ins you choose to share, sent anonymously to help improve the app; (2) questions you type into "Ask Your Stage," which are processed to generate an answer; and (3) anything you deliberately export to show your care team, which goes only where you send it. (As with every App Store app, Apple also receives standard crash and install statistics.)
- We don't show ads, we don't track you, we don't use analytics SDKs, and we never sell your data.
- You can turn sharing off, and delete everything, at any time.
What's stored on your device
When you set up Riya and log check-ins, the following is saved locally on your phone (not on our servers unless you opt in, below):
- Your procedure type, condition, and surgery date.
- Your daily check-ins: pain score, mood, and symptoms.
- Your milestone progress.
- Any private notes you keep in your Notebook — these live only on your phone and are never shared automatically.
If you turn on the optional app lock (Profile → App Lock), Riya can require Face ID or your device passcode before it opens. This stays on your device; we never see it.
You can erase all of it at any time: Profile → Delete all my data.
What we collect if you opt in ("Help improve Riya")
Riya may ask, with a clear prompt, whether you're willing to share your check-ins to help improve the app. This is off unless you tap "Yes." If you opt in, each check-in you log is sent to our database under a random, per-install ID — there is no name, email, or account attached. Specifically, a shared check-in contains:
- A random install identifier (not linked to your identity).
- Procedure type, condition, recovery week.
- Pain score, mood, symptoms.
- The date of the check-in (the day only) and the app version.
We use this only to understand recovery patterns and improve Riya for women like you. It is write-only: the app can send a check-in but cannot read anyone's data back. Because this includes health information, the legal basis for processing it is your explicit consent, which you can withdraw at any time in Profile → Share my check-ins (off). To request deletion of previously shared check-ins, email us at the address above and we'll remove the data associated with your device.
"Ask Your Stage" (questions you type)
When you ask a free-text question in Riya, it's sent to our server, first screened for medical red flags, and then processed by our AI providers to generate an answer (OpenAI turns your question into a search query; Anthropic writes the plain-language answer — see Processors below).
We do not store your question on our own servers, and it is never linked to your identity or to your check-ins. Our AI providers do not use your question to train their models. Under our current setup, OpenAI may keep it for up to about 30 days for safety and abuse monitoring and then deletes it; Anthropic does not retain it beyond what is needed to run the service. We are also working to move to a zero-retention arrangement so nothing is kept at all.
The legal basis for processing your question is your consent, which you give by choosing to use this feature. Please don't include identifying details (your name, others' names, etc.) in your questions. The feature is informational only — Riya is not medical advice.
Sharing with your care team (only when you choose to)
Riya lets you export a single note, or a short "for your care team" summary of how you've been, through the standard iOS share sheet — for example, to show your surgeon. This happens only when you tap share, and the information goes only where you choose to send it. Your Notebook and your records still never sync anywhere on their own.
What we do NOT do
- No name, email, phone number, or account.
- No advertising and no ad networks.
- No third-party tracking, no tracking across apps or websites, no analytics SDKs.
- We never sell or rent your data to anyone.
Service providers (processors)
We use these providers strictly to run Riya. They process data on our behalf:
- Supabase — hosts our database and the server function. (Privacy: supabase.com/privacy)
- OpenAI — turns your "Ask Your Stage" question into a search query (an embedding). OpenAI does not use API data to train its models. (Privacy: openai.com/policies/privacy-policy)
- Anthropic — generates the plain-language answer for "Ask Your Stage." Anthropic does not train its models on data sent through its API. (Privacy: anthropic.com/legal/privacy)
- Apple — distributes Riya through the App Store and TestFlight, and provides us with basic crash and install statistics. (Privacy: apple.com/legal/privacy)
Where your data is processed
Riya is operated from Australia, and the service providers listed above are based in the United States. So the limited data that ever leaves your phone — shared check-ins and "Ask Your Stage" questions — is processed in Australia and the United States, which may be outside your own country. We rely on our providers' standard data-protection terms (including standard contractual clauses where they apply) to protect it. Wherever it is processed, the same commitments in this policy apply: it stays anonymous or unlinked to your identity, it is never sold, and it is used only to run and improve Riya.
Data retention
- On-device data (your profile, check-ins, milestones, and Notebook) stays on your phone until you delete it or delete the app.
- Shared check-ins are kept to help us understand recovery patterns and improve Riya, and are deleted on request (email us).
- "Ask Your Stage" questions are not stored on our servers. OpenAI may retain them up to about 30 days for abuse monitoring and then deletes them; Anthropic does not retain them beyond running the service (see "Ask Your Stage" above).
Children
Riya is intended for adults recovering from surgery and is not directed at children under 18.
Your choices and rights
- Use Riya without sharing anything (sharing is opt-in).
- Turn sharing off any time in Profile.
- Lock Riya behind Face ID or your device passcode (Profile → App Lock).
- Delete all on-device data any time in Profile.
- Request deletion of shared check-ins by emailing us.
- Depending on where you live — for example Australia (Privacy Act 1988 and the Australian Privacy Principles), the UK/EU (GDPR), or California — you may have rights to access, correct, or delete your data. Email us to exercise them.
- If you're in the UK/EU, you also have the right to lodge a complaint with your local data protection authority.
Changes to this policy
If we change what Riya collects, we'll update this policy and the date above, and ask for fresh consent where required.
Contact
Questions or requests: hello@riya.health
Riya is a recovery companion, not a medical device, and nothing in the app is medical advice. If something worries you, contact your care team.