Privacy Policy
Version 1.0 · Effective date: 4 November 2026
This policy explains which personal data is processed when you use the Pathive mobile app and the pathive.app website, for what purpose, where, and for how long. For users in Türkiye, the KVKK Information Notice (in Turkish) also applies.
1. Controller
Pathive is operated by Armagan Ercan, a sole proprietor doing business in Canada under the registered business name Areonex. Approastery is the consumer brand under which the app is published; it is not a separate company. The App Store shows Armagan Ercan as the seller.
- Address: 250 University Avenue, Suite 200, Toronto, ON M5H 3E5, Canada
- Privacy requests and support: hello@pathive.app
2. Data we process and why
When you start without an account, an anonymous account ID is created on the server and your data is kept together under it.
| Data | Purpose | Legal basis |
|---|---|---|
| Account ID, whether it is anonymous, creation and last sign-in times | Keeping your account and data together | Performance of a contract |
| If you save your account: your e-mail address or Apple ID (including the e-mail Apple shares, which may be a relay address) | Saving the account, signing in on another device | Performance of a contract |
| Time of the 18+ confirmation; the versions of the Terms and Privacy Policy you accepted | Age limit, record of acceptance | Legitimate interest, legal obligation |
| Language, country, currency, time zone, measurement system, week start, last active time | Language and money formats, working out "today" in your time zone, the time of the morning notification, sponsored suggestions that fit your country | Performance of a contract |
| Goals: category, your own title, dates, status; plans, steps, completions | Building and tracking your goal's route | Performance of a contract |
| Savings goal: target amount, monthly amount, starting balance, emergency buffer, purpose; balances entered later | Feasibility, route, progress | Performance of a contract |
| Fitness goal (health data, see section 4) | Fitness route, progress | Explicit consent |
| Learning and custom goal details (level, exam, your own topic titles, goal description) | Building the route | Performance of a contract |
| Weekly check-ins: load, energy, confidence, available time, blocker codes, optional note | Adapting the plan | Performance of a contract |
| Coach suggestions and your feedback (done/skipped); coach chat messages and replies | Daily suggestion and chat about a goal | Performance of a contract |
| Subscription status: plan (Free/Pro), store, product, whether it is a trial, end date, renewal and billing-problem flags | Unlocking Pro, showing your subscription | Performance of a contract |
| AI usage records (operation type, daily quota, outcome, cost, duration, token count; failed model replies that broke a rule) | Daily and monthly limits, cost control, debugging | Legitimate interest |
| Push token (Expo), platform; reminder and notification settings; morning notification log (user and date) | Reminders and one morning notification a day | Performance of a contract |
| Server logs: function name, event, user ID, error codes (no free text, no goal content) | Operating the service securely | Legitimate interest |
Your payment details (card, bank) never reach us; Apple takes the payment.
Your device also keeps an app cache (goals, plans, suggestions, offline completions) and when each sponsored suggestion was shown or hidden. These are not sent to us.
3. Artificial intelligence (Anthropic)
Plans, suggestions and coach chat replies are generated with Anthropic's Claude model. The calls are made only from our server, never from the app. When you start, you separately and explicitly allow the information below to be sent to Anthropic; this permission is recorded in your account.
Sent: goal category, the goal title you wrote, category details (mostly codes), the plan structure, weekly check-in answers (as codes and ranges), your own topic titles, the custom goal description (digits replaced with #), the last 12 chat messages and your new message. If the rules cannot determine a route, the goal sentence you wrote is sent too.
Not sent: user ID, e-mail, name, device ID; amounts and balances; weight, height and other measurements; your weekly check-in note; messages about self-harm (the app answers those itself, without AI).
Text you write yourself (titles, descriptions, chat) can contain anything. Please do not include health or other sensitive details. Goals about treatment or illness are refused before anything is sent to the AI.
Anthropic states that, under its commercial terms, it does not use this data to train models by default. Routes and suggestions from the AI are not decisions with legal effect on you; you decide whether to follow each suggestion.
4. Health data
For a fitness goal we process height, starting and target weight, starting and target distance or repetitions, activity level, preferred activities, physical limitations (4 fixed codes), weigh-ins and test results. We ask for this only with a separate, unticked consent, at your first fitness goal. Other goals do not need this consent.
You can withdraw your consent at any time in Profile → Health data. All your fitness goals and measurements are then deleted.
5. Pathive Pro subscription
You buy Pathive Pro through the App Store; Apple takes the payment and your card details never reach us. The subscription status is tracked through RevenueCat (USA). RevenueCat receives only your saved account's ID (a number, not your e-mail or name), your App Store purchase records, device model, operating system and app version, and store country and price. Nothing about your goals is sent to RevenueCat. Unsaved (anonymous) accounts are never identified to RevenueCat.
6. Notifications
The morning notification contains only fixed wording: the goal's category and the kind of step (e.g. "Fitness: today's workout is ready · 24 min"). It never contains your goal title or text written by the coach. It is delivered through Expo (USA) and Apple and may appear on your lock screen.
7. Sponsored suggestions
On the map, one partner suggestion that fits one of your steps may be shown. It is always labelled "Sponsored" and is not shown in your account's first 7 days. Matching happens on your device, by country, goal category and kind of step; no user data is sent to partners. On the server we keep only total impressions and taps per suggestion per day, which are not linked to anyone. When you tap a suggestion, the partner's page opens in an in-app browser, where the partner's own site, cookies and privacy policy apply.
8. What we do not use
Pathive contains no analytics, crash-reporting or advertising SDK. The advertising identifier (IDFA) is not used and there is no cross-app tracking. Your data is not sold and is not processed for marketing.
9. Website and early-access list
If you join the early-access list on pathive.app, we keep your e-mail address, your language and the time of your consent. They are used only to tell you when Pathive launches; to leave the list, write to hello@pathive.app (legal basis: consent). The site is hosted on Vercel (USA), which briefly keeps technical connection logs such as IP addresses for security and operation. The site uses no analytics or advertising cookies.
10. Storage location, transfers and retention
Storage location: the database, account system and server functions run on Supabase in Frankfurt, Germany.
International transfers: your data is not processed only in the EU.
- Anthropic (USA): AI; data is stored in the USA, processing may happen in the USA, Europe, Asia or Australia.
- RevenueCat (USA): subscription status.
- Expo (USA): push token and notification text.
- Apple (USA): Sign in with Apple, notification delivery, the App Store and payments.
- Google (USA): sending sign-in code e-mails. We may move to an e-mail delivery service on our own domain; this list will then be updated.
- Vercel (USA): website hosting.
- For users in Türkiye, storage in Frankfurt is itself a transfer abroad.
Transfers from the EU and Switzerland rely on the EU Standard Contractual Clauses in our providers' data processing agreements and, where applicable, the EU–US Data Privacy Framework. For transfers from Türkiye, see the KVKK Information Notice.
Retention:
| Data | Period |
|---|---|
| Account, goals, plans, check-ins, coach chat, subscription status | Until the goal or account is deleted |
| Failed model replies that broke a rule | 30 days |
| Morning notification log | 60 days |
| Anonymous accounts unused for 180 days | Deleted automatically with all their data |
| Push token | Until you sign out, a new account is created on the device, or the account is deleted |
| Inputs and outputs at Anthropic | 30 days by default; up to 2 years if flagged under the usage policy; longer where required by law |
| Server logs and backups | For Supabase's log and backup periods (from a few days up to 30 days) |
| Early-access list | Until Pathive's launch is announced or you leave the list |
What remains after account deletion is explained on the Account deletion page.
11. Your rights
Depending on where you live, you have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent.
- Deletion: Profile → Delete account (works for anonymous and saved accounts), or the Account deletion page.
- Correction: goals, steps and measurements can be edited in the app.
- Access and copy: the app has no data export yet; for a copy, write to hello@pathive.app.
- We answer requests within 30 days. To verify your identity we may ask you to write from the e-mail address your account is saved with.
- You have the right to complain to a supervisory authority: in Türkiye the Personal Data Protection Board (KVKK), in Sweden Integritetsskyddsmyndigheten (IMY), in the EU the authority of your country.
12. Security
Row-level access rules are applied to user tables and tested; privileged keys are kept only on the server, never in the app or the code repository. No system is completely secure. If a security breach affects your data, we notify the authorities concerned and you within the periods the law requires.
13. Age limit
Pathive is only for people aged 18 and over. You are asked to confirm your age when you start.
14. Changes
We may update this policy. The current version is published on this page and the version you accepted is recorded in your account. We tell you in the app about significant changes.