Highva Privacy Policy

Effective date: Oct. 7, 2026

Who we are: Highva is an iPhone app made by Koby Hilbig ("we", "us"). Contact: support@highva.app.

The short version

• Almost everything stays on your iPhone. Your goals, check-offs, streaks, journal, vision board, chats and profile are saved in the app on your phone. We don't keep a copy on our servers.
• The AI coach is optional and off until you agree. When you turn it on, the data it needs is sent through our server to our AI provider, Anthropic, to write your coaching. Our server passes it along and doesn't store it. Anthropic doesn't use it to train its AI models.
• No ads, no tracking, no selling. We don't sell your data, share it for advertising, or use analytics or tracking tools.

1. What's stored on your iPhone

Highva saves the following inside the app, on your phone:

• Goals and daily tasks: names, why they matter, categories, colors, deadlines, which tasks you checked off or missed each day, the reasons you gave for misses, streaks, streak freezes, vacation days, and your city's progress.
• Your journal: how you felt, what made the biggest difference, tomorrow's #1 priority, any notes you write, and the coach's advice on each entry.
• Your profile: your name, your onboarding answers (why you joined, life areas, your 5-year vision, what holds you back, what drives you, how you want to be coached) and any "About you" details you chose to share (sex, age, relationship status, career stage, height, weight, religion). Every "About you" field is optional and has "Prefer not to say".
• Your vision board: the photos you add from your library, pins from a Pinterest board you connect, photos you add from Unsplash (saved as links), captions, which goal each image is for, and the AI's short description of each photo (when the AI coach is on).
• Coach chats, your profile picture, your settings, and small app records (for example which day a celebration last played, or the day signs of distress were last noticed; see section 6).

This data stays on your phone. Deleting the app deletes it. If you back up your iPhone (iCloud or your computer), Apple's backup may include it, under Apple's privacy policy.

2. The AI coach (optional)

The AI coach writes your chat replies, journal advice, journal analysis, morning advice, the Roast, goal tips, suggested tasks, your goal-achieved message, and short descriptions of your vision board photos.

It's off until you turn it on. The first time, and whenever what's shared changes, the app shows exactly what will be sent and asks you to agree. You can turn it off anytime in Account → AI Coach.

What's sent when it's on:

• your goals, tasks, streaks, check-offs and miss reasons
• your journal answers, and your journal notes unless you turn notes off (Account → AI Coach → Include journal notes)
• your vision board captions, which goal each image is for, and each vision board photo, once, so the coach can describe it
• your name, your onboarding answers and any "About you" details you shared, including sensitive ones like religion, height or weight if you entered them
• what you write to the coach in chat

The Roast uses your goals, tasks and your numbers (streaks, completion, counts). It never reads your journal's words.

Who receives it: our AI provider, Anthropic (the company that makes Claude), in the United States. It travels through our server (see section 3), which passes it to Anthropic and doesn't keep it. Under Anthropic's terms for business customers, Anthropic does not use it to train its AI models and deletes it within 30 days, except when it must keep it longer to investigate misuse of its services or because the law requires it. Anthropic's privacy policy: https://www.anthropic.com/legal/privacy

If we ever switch AI providers, the app turns the AI coach off and asks you again, naming the new provider, before anything is sent to it.

AI can be wrong. The coach can make mistakes. It isn't a therapist, a doctor or a crisis service, and its advice isn't medical, legal or financial advice.

3. Our server

Highva uses a server run on Supabase (hosted on Amazon Web Services in the United States, Ohio region). It does three things:

• An anonymous account. The first time the app contacts our server, it creates an account with a random ID. It has no name, email or password. That happens when the app checks which AI provider to name on the AI coach screen (before you decide), when the AI coach is on, or when you use Explore. If you say "Not now" to the AI coach, nothing of yours is sent to the AI.
• Daily limits. To keep the service fair and affordable, the server counts how many times a day each account uses each AI feature (and how much AI processing it used), and how many photo searches it makes. These counts are kept with the random ID. Usage counts are deleted automatically after 90 days, and anonymous accounts that haven't been used for 12 months are deleted with everything linked to them.
• Passing requests along. AI requests go through it to Anthropic, and photo searches go through it to Unsplash. The content of these requests isn't stored or logged.

Like most online services, the hosting provider keeps short-lived technical logs (for example the time of a request and the network address it came from) for security and to fix problems.

4. Other services the app connects to

• Unsplash (suggested photos on the Explore page): your search words go to Unsplash through our server. Searches are built from your goals' life areas and can reflect "About you" details you shared (for example an age group, or a place of worship for your religion). No name or account is sent. The photos load straight from Unsplash's servers, and when you add one, Unsplash is told it was added, as its rules require. Unsplash's privacy policy: https://unsplash.com/privacy
• Wikipedia and Wikimedia Commons (quote authors' photos and facts, Habits of the Greats): the app asks Wikipedia for the person's page and loads their photo. Only the person's name is sent. Wikimedia's privacy policy: https://foundation.wikimedia.org/wiki/Policy:Privacy_policy
• Pinterest (only if you connect a board): the app loads that public board's feed and its images from Pinterest. Pinterest's privacy policy: https://policy.pinterest.com/privacy-policy

These services can see your device's network address when the app connects to them, like any website you visit.

5. Notifications

Morning briefings and evening reminders are scheduled on your phone (no notification server). They can show your tasks, your #1 priority and coaching advice on your lock screen. You can change what's shown in your iPhone's notification settings, or turn them off in Account → Notifications.

6. Crisis safety

If something you write in the coach chat or your journal shows signs that you may be in crisis, the app shows crisis resources (such as 988 in the US). This check happens on your phone. When the AI coach is on, the AI can also notice it. The app then remembers only the date on your phone, for a week of gentler coaching. This isn't reported to us or anyone else.

7. What we don't do

• We don't sell your personal information.
• We don't show ads or share your data for advertising.
• We don't use analytics, tracking or advertising tools, and we don't track you across other apps or websites.
• We don't use your data to train AI models, and neither does our AI provider.

8. Your choices and rights

• AI coach: turn it off anytime (Account → AI Coach). Nothing more is sent after that.
• Journal notes: keep them out of what the coach sees (Account → AI Coach → Include journal notes).
• About you: change or clear any answer (Account → Your answers).
• Photos: remove vision board photos anytime; Highva only accesses the photos you choose.
• Delete your data: delete the app to remove everything stored on your phone. To delete your anonymous account and its usage counts on our server right away, tap Account → AI Coach → Delete my AI coach data (this also turns the AI coach off). Otherwise they're deleted automatically (see section 3).
• Your rights: depending on where you live (for example under the GDPR in Europe or privacy laws in California), you may have the right to access, correct, delete or get a copy of your personal data, to object to or limit its use, and to withdraw consent. Since almost all of it is on your phone, you can do most of this in the app. For anything else, email support@highva.app. You can also complain to your local data protection authority.

Why we use your data (legal bases, for the GDPR): to provide the app you asked for; with your consent for the AI coach and any sensitive details you choose to share (you can withdraw it anytime); and our legitimate interest in keeping the service secure and affordable (daily limits, technical logs).

9. Children

Highva isn't meant for children under 13, and we don't knowingly collect data from them. If you think a child has used the AI coach, use Delete my AI coach data on their phone, or contact us.

10. Security

Connections to our server and our providers are encrypted (HTTPS). The keys for the AI provider and Unsplash are kept on our server, never in the app. Our server's database only accepts requests from our own server code. Your on-phone data is protected by your iPhone's own security (your passcode and Face ID).

11. Changes

If we change this policy, we'll update the date at the top. If a change affects what's sent to the AI coach, the app will ask for your agreement again before sending anything new.

12. Contact

Questions or requests: support@highva.app (subject "Highva Support").

When you email us, we receive your email address and whatever you write. If you use Send feedback (Account → Help & support), the email draft also includes, at the bottom, the app version, your iPhone model and your iOS version, to help us fix problems. Nothing else is added (no name, goals or journal), and you can delete those lines before sending. We use emails only to answer you and improve Highva.