Maiva Privacy Policy

Effective date: October 12, 2026 · Last updated: October 12, 2026

This Privacy Policy explains how BUNNYSOFT LLC (“BUNNYSOFT”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you use the Maiva mobile app, its AI coaching features, and our website www.bunny-soft.com  (together, the “Service”). Our Consumer Health Data Privacy Policy adds detail about health information and the rights some US states give you over it.

Summary

• We collect what you give us to run your coaching (your account, training profile, workouts and chats), plus purchase and usage records.
• Your messages and training profile are sent to our AI providers, currently OpenAI and Google, to generate responses. The business terms we use with them don’t allow them to train their models on your data.
• We don’t ask for health information, and we ask you not to share it. If you mention it in a chat, it’s sent to our AI providers to generate a reply, and we try to remove it before the chat is saved.
• We don’t sell personal information, show ads, or share personal information for targeted advertising. The app contains no analytics or advertising tools.
• You can delete your account in the app at any time. A few records are kept after deletion, as explained in How long we keep information.
• Your information is stored in the United States.

1. Who we are

BUNNYSOFT LLC, a New York limited liability company, provides the Service and is responsible for your personal information. Our contact details are in section 15.

2. Information we collect

Information you give us

• Account information: your email address. If you use Sign in with Apple or Google Sign-In, we receive an account identifier and the email address the provider shares (which may be an Apple private relay address), and your name if you choose to share it.
• Training profile: your first name, language, date of birth or year of birth (to confirm you are 18 or older), fitness goals chosen from a list, training experience (such as years trained and sports played), training preferences, the movements you want to skip, and your schedule.
• Training locations: the names you give the places you train (such as “home” or “gym”) and the equipment available at each. This is not GPS or device location.
• Workouts: your plans, the sessions you log (exercises, sets, repetitions, loads and duration), workouts you enter manually, and the activity snacks you complete.
• Chats: the messages you send to Maiva’s AI trainers.
• Support requests: what you send us through our support portal or by email.

Information created as you use Maiva

• AI output: the plans, workouts and responses generated for you, and the summaries the AI keeps of your recent and upcoming training and of long conversations, so it can personalize its responses.
• Video searches: the search terms we generate when you look up demonstration videos for an exercise.
• Usage records: how many AI requests your account makes and what they cost us. We use them to apply the free allowance and usage limits, control costs and prevent abuse.
• Technical information: when the app connects to our servers, our hosting provider records technical details such as your IP address, app version, timestamps and errors.

Information from others

• Apple and Google: your sign-in identity, if you sign in with them.
• Apple, Google and RevenueCat: your subscription status and purchase records, such as product, price, dates, renewal status and transaction identifiers. We never receive your payment card details.

What we don’t collect

We don’t collect your precise location, contacts, photos, microphone or camera input, or advertising identifier. We don’t connect to Apple Health, Google Health Connect or wearable devices, and we don’t collect body weight, body measurements or heart rate.

3. Health information

Maiva is designed not to collect health information.

• We don’t ask about injuries, medical conditions, symptoms, medications, pregnancy or body measurements, and the app has no place to enter them.
• The “movements to skip” list records which movements you want left out of your workouts, not why. We treat it as a training preference, and we don’t use it to infer anything about your health.

Please don’t enter health information in chats or free-text fields. If you do:

• it’s used only to generate a response for you, which means it’s sent to our AI providers along with the rest of the conversation (see section 5)
• we use automated tools to detect health details and remove them before chat messages and training summaries are saved. These tools can miss things, so some health details may still be saved
• you can delete any chat in the app at any time, and all your chats are deleted when you delete your account
• it’s never sold, used for advertising, or shared with anyone other than the service providers in section 6

HIPAA doesn’t apply to Maiva. HIPAA covers health care providers, health plans and their business associates, and we aren’t one. Your information is protected by this policy and by the privacy laws that apply to us. Residents of Washington, Nevada and Connecticut have additional rights, described in our Consumer Health Data Privacy Policy.

4. How we use information

• To provide the Service: to run your account, generate your plans, workouts and chat responses, personalize them, and track your progress.
• To manage subscriptions: to check your subscription status and apply the free allowance and usage limits.
• For safety and security: to detect and prevent abuse, fraud and misuse, enforce our Terms of Use, and help our AI providers detect abuse.
• To support and contact you: to answer support requests, and to send you messages about your account, security and changes to our terms or this policy. We don’t send marketing messages today. If we start, we’ll ask for your consent where the law requires it, and every message will have an unsubscribe link.
• To maintain and improve the Service: to fix problems, and to measure the quality, speed and cost of the AI models we use. We use summary or de-identified information for this where we can. We don’t use your chats to train AI models, and our AI providers’ terms don’t allow them to.
• For legal reasons: to comply with the law, keep business and tax records, keep proof that you accepted our terms, and establish, exercise or defend legal claims.

We don’t use automated processing to make decisions that have legal or similarly significant effects on you.

5. How AI processing works

• When you chat with a trainer or ask for a plan, we send your message, the recent conversation, your training profile (including the movements you skip), your training history and summaries, and our instructions to an AI provider. Our providers are currently OpenAI and Google (Gemini). We may also use Anthropic (Claude).
• With requests to OpenAI, we send a pseudonymous identifier (your Maiva account ID) so OpenAI can detect abuse. We don’t send your name or email address.
• The providers process this information as our service providers, under business terms that don’t allow them to use it to train their models. They may keep requests for a limited time to monitor for abuse and to comply with the law, for the period set in their own terms: OpenAI , Google  and Anthropic . Those copies aren’t deleted when you delete your account. They expire on the provider’s own schedule.
• Responses are generated automatically. No person reviews them before you see them.

6. How we share information

We share personal information only with the service providers that help us run the Service, under contracts that limit how they can use it, and in the situations listed below the table.

We may also share personal information:

• when you ask us to: for example, when you tap through to a YouTube search, YouTube receives the search terms and handles them under Google’s privacy policy 
• for legal reasons: to comply with a law, court order or lawful request, or to protect the rights, safety or property of our users, the public or BUNNYSOFT
• in a business transfer: if BUNNYSOFT is involved in a merger, acquisition or sale of assets. We’ll tell you before your information becomes subject to a different privacy policy

We don’t sell personal information. We don’t “share” it for cross-context behavioral advertising, use it for targeted advertising, or give it to data brokers.

Analytics. The app doesn’t use analytics, crash-reporting or advertising tools. If we add one, we’ll update this policy first and name the provider. We’ll never send health information or chat content to an analytics or advertising provider.

7. How long we keep information

We may keep information longer if the law requires it, or if we need it to resolve a dispute or defend a legal claim.

8. Deleting your account

You can delete your account at any time in the app’s settings, or by asking us through the support portal  or at legal@bunny-soft.com. Instructions are on our Delete your account page.

Deleting your account permanently deletes your profile, training locations, plans, workouts, chats and summaries. The records listed in section 7 as kept after deletion are kept for those periods only. Deleting your account doesn’t cancel an App Store subscription. Cancel it in your App Store account settings. For a Google Play subscription, we try to stop it renewing when you delete your account, and tell you if we can’t.

9. Your rights and choices

Wherever you live, you can ask us to:

• tell you what personal information we hold about you, and give you a copy of it in a portable format
• correct information that is wrong
• delete your information
• stop using your information for a particular purpose, or withdraw a consent you gave

Most of your information can be viewed, corrected or deleted directly in the app. For anything else, contact us using the details in section 15. We’ll confirm your identity, usually by checking that the request comes from your account’s email address, and reply within the time the law requires (usually 30 days). You can use an authorized agent; we may ask for proof of their authority. We won’t treat you differently for using your rights. If we decline a request, we’ll explain why, and you can appeal by replying to our decision.

United States

Residents of California, Colorado, Connecticut, Oregon, Texas, Virginia and several other states have rights under state privacy laws, including the rights to know about, access, correct and delete their personal information, to receive a copy of it, and to opt out of its sale, “sharing”, targeted advertising and certain profiling. We offer these rights to every US user, whether or not your state’s law requires it.

• We don’t sell or share personal information, use it for targeted advertising, or profile you in a way that produces legal or similarly significant effects, so there’s nothing to opt out of. We still honor Global Privacy Control signals as an opt-out request.
• We use sensitive personal information only to provide the Service and for the other purposes the law allows.
• Do Not Track: we don’t track you across other companies’ websites or apps, so we don’t respond differently to browser Do Not Track signals.
• If we decline your request and you disagree, you can appeal by replying to our decision. If you still disagree after the appeal, you can contact your state’s attorney general.

Australia

We handle personal information in line with the Australian Privacy Principles. You can ask to access or correct your information. You can use the Service with a first name only, and don’t need to give your full name. If you have a complaint, contact us first. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au ).

New Zealand

We comply with the Privacy Act 2020. You can ask to access or correct your information. Our Privacy Officer can be reached at legal@bunny-soft.com. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz ).

10. Where your information is stored

BUNNYSOFT is based in the United States, and your information is stored there, in our database provider’s East US (North Virginia) region. Our AI providers and other service providers may process it in the United States and in other countries where they operate.

If you live in Australia or New Zealand, this means your information is sent to and held in the United States and possibly other countries. The privacy laws there may not protect it in the same way as the laws where you live. We choose providers with strong security and privacy commitments, and our contracts with them limit how they can use your information.

11. Security

We protect your information with measures that include encryption in transit and at rest, access controls that limit each account to its own data, and limiting who can access our systems. No service is completely secure. If a breach affects your information, we’ll notify you and the authorities as the law requires.

12. Children

The Service is for adults 18 and over. We don’t knowingly collect personal information from anyone under 18. If we learn that someone under 18 has an account, we’ll delete it. If you believe a child has given us personal information, contact us.

13. Our website

www.bunny-soft.com  is hosted by Vercel, which records technical information such as IP addresses and browser details to deliver and secure the site. The site doesn’t use advertising or analytics cookies. It may store your light or dark theme choice in your browser. Our support portal is provided by Zoho, which uses its own cookies, described in Zoho’s privacy policy .

14. Changes to this policy

We may update this policy. We’ll post the new version here and change the dates at the top. If a change is material, we’ll tell you in the app or by email before it takes effect, and we’ll ask for your consent where the law requires it. You can ask us for earlier versions.

15. Contact us

BUNNYSOFT LLC 418 Broadway Ste R Albany, NY 12207 United States

• Privacy requests and questions: legal@bunny-soft.com
• Support portal: bunnysoft.zohodesk.com 
• Privacy Officer (including for New Zealand): legal@bunny-soft.com