YOUR DATA, EXPLAINED

Privacy Policy

Effective date: September 23, 2026

Rehevia helps you rehearse difficult conversations. This policy explains what information is used to provide the app, when conversation content is shared with AI, and how to manage or delete your account.

1. Who is responsible

Rehevia is operated by GestionaTech. GestionaTech is responsible for deciding how personal information is used for the Rehevia app and its related account services. For privacy requests, contact info@gestionatech.de.

2. Information we handle

Sign-in and account information

When you choose Sign in with Apple, Apple provides an account identifier for your sign-in. Depending on your Apple settings and what you choose to share, we may also receive your name and email address. If you use Apple’s private email relay, we receive that relay address. We do not receive your Apple password. Supabase Auth uses an account identifier to authenticate you and maintain your Rehevia account and sessions.

Saved conversations

Rehevia may store conversation transcripts, your saved conversation content, and debrief or reflection data in its Supabase database so these features work with your account. These saved text records are separate from the audio used during a voice session.

Voice and AI processing

If you use voice conversations and have given the required AI-sharing consent, audio is transmitted to OpenAI for processing as the conversation takes place. Rehevia does not save the original audio as a recording in your conversation history. The resulting transcript and debrief are separate account content and may be saved as described above. OpenAI may process request data under its API service terms and data controls; its standard abuse-monitoring logs can include request content for up to 30 days, subject to applicable exceptions and any different controls enabled for the service.

AI-sharing consent

Rehevia records whether you have consented to send conversation content to OpenAI for AI features. You can withdraw that consent in the app. Withdrawal stops future sharing for those AI features; it cannot undo processing that already happened or remove transcripts and debriefs already saved to your account. You can delete saved content by deleting your account.

Purchases and subscriptions

When you make or restore an in-app purchase, Apple and RevenueCat process purchase information such as a transaction or receipt identifier, product, subscription status, and entitlement state. Apple handles the payment. Rehevia does not receive your full payment card number through RevenueCat.

Notifications

If you enable push notifications, OneSignal and Apple Push Notification service (APNs) process the device push token and notification delivery information. OneSignal may also receive a service identifier, device or app details, and notification permission or subscription status needed to deliver notifications.

Diagnostics

Sentry receives crash and error diagnostics, which may include a stack trace, app version, operating system or device details, event time, and technical context related to the error. Diagnostic events are used to find and fix problems. Rehevia does not use Sentry to provide the conversation feature.

3. How information is used and shared

We use information to sign you in, operate and secure your account, provide conversation and debrief features, remember saved content, check subscription entitlements, deliver notifications you enable, diagnose errors, respond to support requests, and meet legal obligations.

Conversation audio and related content are shared with OpenAI for AI processing only after you give the app’s explicit AI-sharing consent. Apple processes Sign in with Apple and App Store purchases. Supabase provides authentication and database hosting. RevenueCat helps validate purchases and maintain subscription status. OneSignal and APNs deliver push notifications. Sentry processes technical diagnostics. These providers process data to provide their services under their own terms and applicable data-processing agreements. Their service operations may involve processing in countries other than yours.

We may also disclose information where required by law, to protect the safety or rights of users, or to investigate fraud or abuse.

4. How long information is kept

We keep account identifiers while your account is active. Saved transcripts and debriefs remain associated with your account until you delete the account or we no longer need the information to provide the service. Original voice audio is used for processing during the voice session and is not kept by Rehevia as a saved recording.

We keep purchase and subscription records for as long as needed to provide entitlements, handle disputes, and meet accounting or legal obligations. Push tokens are kept by notification providers while needed to deliver notifications and are removed or invalidated when the subscription or account is removed. Sentry and other providers retain their service records according to the settings and retention terms that apply to those services. Backup copies may persist temporarily until they are overwritten through normal backup rotation. We do not state a fixed deletion interval for provider logs or backups.

5. Account deletion

You can request account deletion from the account controls in Rehevia or by emailing info@gestionatech.de. We will verify the request, disable access, and delete or de-identify the account information and saved conversation content associated with it from active Rehevia systems, subject to information we must keep by law or need to retain for security, disputes, or purchase records. Provider copies and backups are removed under the providers’ deletion processes and applicable retention periods.

For accounts created with Sign in with Apple, we will use the available Apple authorization credential to request revocation when processing account deletion. Revoking sign-in authorization is separate from deleting your Apple Account. If Apple requires a step from you to finish revocation, we will provide instructions.

Deleting your Rehevia account does not automatically cancel an App Store subscription. Manage or cancel that subscription through your Apple account’s subscription settings.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, and withdraw consent where processing relies on consent. You may also complain to your local data protection authority. To exercise a right, contact us at info@gestionatech.de. We may need to verify your identity before acting on a request.

You can withdraw AI-sharing consent in the app and manage push-notification permissions through the app and your device settings.

7. Service providers

8. Changes to this policy

We may update this policy when Rehevia’s features, providers, or legal requirements change. We will update the effective date above when a revised policy is published.