Your journal. Your choices.

Who is responsible

Mavi is provided by J.R.SOSA & CO. LLC. For privacy questions or requests, email contact@jrsosa.co. This policy covers the Mavi mobile app and these public information pages.

What stays on your device

The journal stores the cycle preferences and entries you choose to record: period dates and flow, symptoms, mood, energy, notes, and local summaries or estimated dates. Appearance, language, optional reading progress, reminder preferences and other journal settings are also local.

Mavi does not upload these records to us. We do not send them to RevenueCat, Google advertising services, a cloud account service or a remote AI provider. We do not sell journal records or use them to choose ads. Mavi does not request your contacts, precise location, camera, photo library, microphone, or installed-app inventory.

The app encrypts its saved journal with a device-held key in platform secure storage. Journal files and keys are configured to be excluded from automatic backup or transfer. This is a local protection, not a promise that every compromised device or every operating-system process can be prevented from accessing information.

Optional local note assistance

On compatible devices, Mavi Plus can use an on-device model to suggest check-in fields from one note you submit, up to 600 characters. The model receives that note and fixed extraction instructions, not your journal history. Mavi validates exact source evidence and allows only supported symptoms, mood, flow and an explicitly stated energy rating. You review selected suggestions in the ordinary editor; only your Save records them. This is drafting help, not diagnosis, treatment or medical advice. You can always use the manual check-in.

Apple’s local model requires a compatible iOS or iPadOS 26 device with Apple Intelligence available and the requested language supported. Gemini Nano is available only in Mavi’s Android Preview testing builds; it is disabled in the published Android build. Availability, downloads and language support depend on the platform. There is no paid API or cloud inference fallback.

Where the Android Preview uses Google ML Kit, Google says note inputs and model outputs are processed on-device and are not sent to Google servers. Its SDK can contact Google for model updates and compatibility information and send technical metrics, including device and app information, identifiers, configured language, performance and API-use events. Those metrics are separate from note content. Local processing does not mean the device never connects to a network. See Google’s ML Kit privacy terms and SDK data disclosures.

App lock, reminders and widgets

App lock is optional. When enabled, Mavi uses the device’s authentication system; Mavi does not receive or store your fingerprint or facial template. Device security and the people who can unlock the device also affect access.

Optional reminders use the device’s local notification system. Scheduled times and messages are held by the operating system outside journal encryption. Neutral wording is the default. If you choose more descriptive wording, it can reveal context on the lock screen. Delivery depends on notification permissions and device settings.

Home-screen widgets provide shortcuts and appearance choices without displaying period dates, symptoms, notes, or journal summaries.

Exports and local deletion

Sharing an export is your choice. Mavi explains that exported JSON records, text summaries and Plus PDF reports are not encrypted by Mavi. The app creates temporary files for the system share flow and removes its own temporary copies after that flow returns, with another cleanup at startup. A destination app, recipient or saved copy is outside Mavi’s control.

Use the journal deletion control in Settings to erase local journal records, related local settings and the journal encryption key. Mavi cannot erase copies you previously exported or information held by another app. Deleting your journal or uninstalling Mavi does not cancel a store subscription.

There is no cloud journal backup or email recovery. Losing the device, reinstalling, or losing the encryption key can mean losing access to your records. We cannot recover a key or journal that we do not hold.

Purchases and RevenueCat

The App Store or Google Play processes payments. Mavi does not receive your payment-card or bank details. RevenueCat helps validate store purchases, restore eligible subscriptions and enable Mavi Plus.

RevenueCat receives an automatically generated app purchase identifier, store purchase/receipt information and related subscription status, product, currency, locale and technical request information. These records are separate from your journal. Mavi does not attach your name, email, period dates or notes to purchase requests, and it disables optional automatic device-identifier collection and diagnostic reporting in its RevenueCat configuration.

Purchase history supports entitlement delivery, fraud prevention and subscription analytics. Store and purchase-service records may remain for service operation, support, fraud prevention and applicable recordkeeping requirements. The stores keep their own purchase records. See RevenueCat’s privacy policy.

Advertising and your privacy choices

Eligible free adult users may see ads automatically after onboarding. Mavi first verifies store ownership and checks Google’s current privacy status, presenting any required consent form before ad requests. Mavi uses Google AdMob and Google’s consent tools; there is no separate sponsorship opt-in switch. Labeled banners can appear below the primary navigation on Today, Calendar, Insights and Learn. Labeled native ads appear only in Learn. An occasional full-screen ad may appear only after you mark an article complete and leave it for Learn, subject to a session frequency limit. Mavi shows no ads on launch, exit confirmations, check-in or period-date editors, screens opened over the primary tabs, conversations, reports, exports, lock screens, onboarding, permission dialogs or purchase screens. The app keeps only a bounded, session-local activity count and foreground time for this frequency rule; it does not send that count or article identifiers to the ad provider. Mavi does not supply journal entries, cycle estimates, health details, article-reading history, keywords or a content URL for ad targeting. Requests use the SDK’s non-personalized setting, strict limited-ad treatment and a disabled publisher first-party ID.

Non-personalized does not mean that no technical data is processed. Google’s services can receive network information such as your IP address and approximate location inferred from it, app or device identifiers, ad interactions and SDK diagnostic/performance data. Google uses technical data for ad delivery, measurement, security and fraud prevention, and may share it with advertising partners. Mavi removes Android advertising-ID permission and does not request iOS tracking permission.

Use Settings to review the ad provider’s privacy choices when available. Those choices are managed by Google’s consent tools, and are separate from Plus ad removal. Unknown purchase or consent status suppresses ad requests. A verified active Mavi Plus entitlement removes visible feed and banner placements and prevents further interstitials; loaded or late-arriving ads are discarded. A full-screen ad already presented by the SDK is closed using its own close control. Plus does not erase technical information already received by a provider. See Google’s privacy policy and Google’s ad controls.

Support, website access and external links

If you contact us, we receive the email address and information you choose to send. For purchase help, an order or transaction reference may help locate the relevant purchase. Please do not send your journal, period history, private health notes, payment-card details or authentication credentials. Support correspondence is used to answer your request and handle related issues, and is retained while needed for those purposes or required recordkeeping.

These public pages use no advertising scripts, analytics scripts or external fonts, and set no cookies. The website host still processes standard connection and security information, such as IP addresses and HTTP request details, to deliver the pages. Links to educational sources or provider controls open an external website with its own privacy practices.

Privacy requests and retention

You can access and export your journal or erase it in the app without contacting us. Local records remain until you delete them or the installation is removed; loss of the encryption key can also make them inaccessible.

For support correspondence or publisher-managed purchase records, email contact@jrsosa.co with the subject “Mavi privacy request.” You may ask for access, correction or deletion of information we hold. Include only enough information to find your request or purchase; we may ask for proportionate verification. Do not send journal records. We will explain any records that must be retained and any requests that belong with a store or another provider. These choices do not affect rights available under applicable law.

Service providers may process purchase, support or technical data in countries other than your own. The journal itself is not transferred to those providers by Mavi.

Adults and policy changes

Mavi is intended for adults aged 18 and older. It is not designed for children. To check adult access, Mavi uses age categories shared by Apple or Google Play when available, with local adult confirmation where the platform permits that path. Mavi does not ask for or retain your date of birth or identity documents. The access decision stays in the current app session and is not attached to advertising or purchase requests. A required check that is unavailable or does not establish adult access prevents entry while preserving saved records. If you believe a child has sent us personal information through support, contact us so we can review and address it.

We will update this page when Mavi’s practices change. The date below identifies the current policy. A change that needs a new permission or consent will be addressed through the applicable app or provider controls.