Privacy

Privacy in plain English

This is not the legal document — that's the Privacy Policy. This is what you actually need to know, written the way we'd explain it to a friend. Every sentence has been read aloud. If it sounded like a terms document, it was rewritten.

What we keep

When you use Attriva, two kinds of things live in your account. They're both private. They're not the same thing.

Your submitted content — the moments you logged, photos you uploaded, activities you tracked, and your child's profile. This is yours. You created it. You can export it at any time or delete it whenever you want.

What Attriva built from it — the signals it extracted, the patterns it noticed, the roadmap it generated, the annual portrait, the weekly moves. This is Attriva's analytical work. Think of it like a doctor's notes: the appointment happened to you, but the clinical notes belong to the doctor. You can see them while you're a member. You can't take the analysis with you when you leave — but you can always take your moments.

How you use Attriva — separately from your child's data, we keep a lightweight, implicit picture of your own usage: roughly how often you log something, and whether you tend to follow up on a topic once you've raised it. This is about you as a parent, not your child, and it exists for one purpose only: deciding when a nudge from Attriva is likely to be welcome versus unwelcome, so we don't notify you at the wrong time or too often. It's never shown to anyone, never used for anything else, and isn't part of your child's record.

What we never do

About your entries

Every entry you log in Attriva is tied to your account at the database level. The way the system is built, your entries can only be retrieved by an authenticated session belonging to your account. There is no admin view, no staff dashboard, no route in the application that returns another family's moment content.

This isn't just a policy. It's how the product is built — no feature, dashboard, or automated process ever displays what you write to Attriva staff. The only exception is a serious abuse investigation under our terms of service, or where required by law.

The only processes that touch your data server-side are automated — counting how many moments exist, checking data integrity, sending time-based emails. None of them read content. None of them report back to anyone.

Who processes your data

We're honest about every company that touches your family's information. There are no hidden processors.

Anthropic
Powers the AI features — signal extraction, portrait generation, roadmap, weekly moves, advisor. Attriva uses the commercial API. Under those terms, Anthropic does not train its models on API data. Anthropic holds API inputs for up to 7 days for abuse prevention, then deletes them permanently. Your moments are never used to train Claude or any other Anthropic model.
Supabase
Stores your account data, moments, and files. All data is encrypted at rest and in transit, with row-level security — only your account can access your family's files.
Stripe
Handles all payment processing. We share your name and email with Stripe to process your subscription. We never see or store your card number. Stripe is PCI-compliant.
Resend
Sends transactional emails — account confirmation, receipts, weekly moves. Your email address is shared with Resend for delivery only. It's not used for marketing by Resend.
PostHog
Anonymised analytics only. We track which features are used and how often — in aggregate, with no names, no emails, no moment content. This tells us "the advisor is being used more than the roadmap" — nothing about you specifically.
Sentry
Error tracking. When something crashes, Sentry captures the error log so we can fix it. No moment content appears in error logs. No personally identifiable information is sent to Sentry.

Advisor and safety

Attriva's Advisor includes a safeguard that watches for language suggesting self-harm, abuse, disordered eating, or substance use — in what you type to Advisor, and in moments you log. When something like this comes up, Advisor doesn't try to counsel you through it. It stops, and points you toward real help instead: crisis resources like the 988 Suicide & Crisis Lifeline, or your child's pediatrician or school counselor.

We log that this happened — the category, not the words that triggered it — so we're not holding onto sensitive disclosures longer than necessary.

Advisor is not a licensed counselor, therapist, or medical provider, and using it is never a substitute for professional care. Attriva is not responsible for actions taken or not taken based on Advisor's responses. If you or your child are ever in crisis, contact 988 or emergency services directly.

What you own vs. what Attriva built

Your moments and photos are yours. You can export them at any time in JSON format. You can take them with you if you leave. They belong to your family.

The intelligence Attriva built from them — the signals, the patterns, the portraits, the roadmap — is Attriva's analytical work. While you're a member, you have full access to it. When you leave, the analysis doesn't travel with you, but your raw moments always do.

The honest analogy:Think of it like a doctor's notes. The appointment happened to you — you own that experience. But the doctor's clinical notes are the doctor's intellectual work. You can have your record. You can't have their analysis of it. Neither leaves the room without your consent.

When you leave

You can cancel at any time from your account settings. When you do:

If you want everything deleted sooner than the 30-day window, email privacy@attriva.ai and we'll confirm once it's done.

Questions about your family's data? Something that isn't clear?

hello@attriva.ai

We read every email. Response within one business day.

Read the full Privacy Policy →