Privacy Policy

Effective October 16, 2026

This Privacy Policy explains how Everest Digital LLC, which operates AvaRhythm ("AvaRhythm," "we," "us," or "our"), handles personal information when you use the AvaRhythm website, mobile or desktop applications, nutrition and fitness features, support channels, and related services (collectively, the "Services"). It applies to information we control; a third party’s independent service is governed by that party’s own privacy notice.

At a glance

• We use account, nutrition, fitness, preference, device, and usage information to provide and improve AvaRhythm.
• Google and Apple may provide basic identity information when you choose their sign-in services.
• We do not currently sell personal information or share it for cross-context behavioral advertising.
• You may request access, correction, export, or deletion by contacting us.

Scope and responsible company

Everest Digital LLC is the controller of personal information described in this Policy unless a supplemental notice says otherwise. Features may differ by platform, membership, country, and development stage. Describing a category of features does not mean every feature is currently available.

Information we collect

Account information. When you create an account or sign in, we may receive your name, email address, authentication-provider identifier, and account security information. Google and Apple handle your password when you use their sign-in services; AvaRhythm does not receive those passwords.

Health and fitness information. Information you choose to add may include foods, recipes, meal entries, nutrition goals, hydration, weight, activity, preferences, and progress.

Digital Human conversations. When you choose to start a voice conversation, microphone audio, conversation text, language, the Digital Human you selected, and relevant in-app context are processed to provide the conversation. Your microphone starts only after you tap or click the conversation button.

Technical information. We may process browser, device, IP address, security-event, and diagnostic information needed to operate, protect, and improve the service.

Meal planning and optional notifications

When you save meal-planning preferences, we store your cuisine and dietary choices, meal and subtitle languages, schedule, and time zone with your account. If you enable automatic meal planning, our AWS-hosted servers use these preferences to create and save plans while the app is closed.

When you enable Apple push notifications, we store the app's APNs device token linked to your AvaRhythm account, together with its notification environment and registration time. We use this token and your saved notification preferences to send plan-ready alerts and food-logging reminders through Apple's Push Notification service. This token is used for notification delivery, not advertising tracking. Notifications may appear on your lock screen according to your Apple device settings. You can manage alerts and reminder times in AvaRhythm Settings and disable notifications in your device settings.

How we use information

• Provide and personalize AvaRhythm features.
• Authenticate accounts and keep sessions secure.
• Save member-created meals, recipes, and progress.
• Generate scheduled meal plans and deliver optional notifications.
• Diagnose problems, prevent abuse, and improve reliability.
• Comply with legal obligations and enforce our terms.

How information is shared

We use service providers that process information for AvaRhythm, including Amazon Web Services for hosting, content delivery, storage, databases, monitoring, and authentication; Experts Alive and its underlying conversation services for Digital Human voice interactions; and Apple, Google Play, and Stripe for purchases and subscription management. Google and Apple also process information when you choose their sign-in services. We may disclose information when required by law, to protect rights and safety, to advisers acting for authorized purposes, or as part of a financing or business transaction. We do not currently sell personal information or share it for cross-context behavioral advertising.

Legal bases

Where applicable law requires a legal basis, we rely as appropriate on performance of our agreement with you, legitimate interests in operating and securing the Services, consent for optional features where required, and compliance with legal obligations. You may withdraw consent prospectively, but a feature that needs the relevant information may stop working.

Cookies and local storage

The web Service uses local storage, session storage, cookies, and similar technologies needed for authentication, security, preferences, and core operation. Blocking them may prevent sign-in or other features from working. If we introduce non-essential analytics, advertising, or marketing technologies, we will update this Policy and provide legally required choices.

Storage and retention

Information is stored using AWS services in the United States. We retain account and member data while an account is active and as reasonably needed for service, security, legal, and backup purposes. You can delete your account from Settings in AvaRhythm or follow the instructions on our account deletion page. Deletion is subject to information we must retain for legal, security, fraud-prevention, or financial-record obligations.

Your choices and privacy rights

You may choose which optional health information to provide and can sign out at any time. Depending on where you live, you may have rights to access, correct, export, or delete personal information; restrict or object to certain processing; withdraw consent; appeal a decision; or complain to a regulator. We may verify your identity before completing a request. You can also manage Google or Apple authorization from the applicable account settings.

Security

We use safeguards designed to protect information, including encrypted connections, access controls, managed authentication, and encrypted cloud storage. No security method can guarantee absolute protection.

International processing

AvaRhythm and its providers may process information in the United States and other countries. Where required, we use recognized safeguards for international transfers. Local privacy rights remain available as provided by applicable law.

Children and teens

AvaRhythm is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If local law requires a higher age for independent consent, a parent or legal guardian must participate where required.

Changes

We may update this policy as AvaRhythm develops. We will revise the effective date and provide additional notice when appropriate.

Contact

For privacy questions, rights requests, or account-deletion requests, email support.avafitness@everestdigital.ai with the subject “Privacy Request.” AvaRhythm is operated by Everest Digital LLC, 2126 Club Meadows Dr., Henderson, NV 89074.