Privacy

Privacy in plain English

This is not the legal document — that's the Privacy Policy. This is what you actually need to know, written the way we'd explain it to a friend. Every sentence has been read aloud. If it sounded like a terms document, it was rewritten.

What we keep

When you use Attriva, two kinds of things live in your account. They're both private. They're not the same thing.

Your submitted content — the moments you logged, photos you uploaded, voice memos you recorded, activities you tracked, and your child's profile. This is yours. You created it. You can export it at any time or delete it whenever you want.

What Attriva built from it — the signals it extracted, the patterns it noticed, the roadmap it generated, the annual portrait, the weekly moves. This is Attriva's analytical work. Think of it like a doctor's notes: the appointment happened to you, but the clinical notes belong to the doctor. You can see them while you're a member. You can't take the analysis with you when you leave — but you can always take your moments.

What we never do

About your entries

Every entry you log in Attriva is tied to your account at the database level. The way the system is built, your entries can only be retrieved by an authenticated session belonging to your account. There is no admin view, no staff dashboard, no route in the application that returns another family's moment content.

This isn't a policy. It's how the database works. Attriva staff cannot read what you write. Not because we've decided not to. Because the system doesn't allow it.

The only processes that touch your data server-side are automated — counting how many moments exist, checking data integrity, sending time-based emails. None of them read content. None of them report back to anyone.

Who processes your data

We're honest about every company that touches your family's information. There are no hidden processors.

Anthropic
Powers the AI features — signal extraction, portrait generation, roadmap, weekly moves, advisor. Attriva uses the commercial API. Under those terms, Anthropic does not train its models on API data. Anthropic holds API inputs for up to 7 days for abuse prevention, then deletes them permanently. Your moments are never used to train Claude or any other Anthropic model.
OpenAI Whisper
Transcribes your voice memos. Audio is sent to Whisper for transcription only — it's not stored by OpenAI after transcription. The transcript and the original audio recording are both kept in your Attriva account.
Supabase
Stores your account data, moments, and files. All data is encrypted at rest and in transit. Voice recordings are kept in a separate encrypted storage bucket with row-level security — only your account can access your family's files.
Stripe
Handles all payment processing. We share your name and email with Stripe to process your subscription. We never see or store your card number. Stripe is PCI-compliant.
Resend
Sends transactional emails — account confirmation, receipts, weekly moves. Your email address is shared with Resend for delivery only. It's not used for marketing by Resend.
PostHog
Anonymised analytics only. We track which features are used and how often — in aggregate, with no names, no emails, no moment content. This tells us "the advisor is being used more than the roadmap" — nothing about you specifically.
Sentry
Error tracking. When something crashes, Sentry captures the error log so we can fix it. No moment content appears in error logs. No personally identifiable information is sent to Sentry.

Your child's voice recordings

This deserves its own section because parents reasonably wonder what happens to audio after it's transcribed. The honest answer: we keep it.

A child's voice recorded over the years of Attriva — the way they spoke at 9, at 13, at 17 — is something that cannot be recreated. It's an irreplaceable personal archive. So after Whisper transcribes a voice memo, the original audio is not deleted. It's stored in a private encrypted bucket alongside the transcript.

Only you can access your voice recordings. Attriva staff cannot access them except in the case of a serious abuse investigation under our terms of service. Your recordings are never listened to, never analysed beyond transcription, never shared with anyone. If you want to delete them before account deletion, email hello@attriva.aiand we'll handle it. When you delete your account, all audio recordings are permanently deleted within 30 days.

Voice recording is optional. You can use Attriva fully — log moments, build the portrait, use the advisor — using text only. We don't require voice to access any core feature.

What you own vs. what Attriva built

Your moments, photos, and recordings are yours. You can export them at any time in JSON format. You can take them with you if you leave. They belong to your family.

The intelligence Attriva built from them — the signals, the patterns, the portraits, the roadmap — is Attriva's analytical work. While you're a member, you have full access to it. When you leave, the analysis doesn't travel with you, but your raw moments always do.

The honest analogy:Think of it like a doctor's notes. The appointment happened to you — you own that experience. But the doctor's clinical notes are the doctor's intellectual work. You can have your record. You can't have their analysis of it. Neither leaves the room without your consent.

When you leave

You can cancel at any time from your account settings. When you do:

If you want everything deleted sooner than the 30-day window, email privacy@attriva.ai and we'll confirm once it's done.

At 18

Everything you build in Attriva is built for one purpose: your child, eventually, will be able to receive it.

The achievement page is the record Attriva assembles from years of your attention — verified results, documented milestones, the portrait of who your child is and what they built over time. It's designed to be shared: with a coach, a counsellor, a college. It belongs to your child's story, not your private observations.

At 18, Attriva offers the option to transfer the achievement page to a personal account in your child's name. It becomes theirs — to keep, to share, to carry forward.

Your moments journal stays yours. It was never your child's to receive. It was your private record of watching them grow — the worry in October, the thing you noticed on the drive home, the observations that informed the portrait without ever appearing in it. The achievement page is the gift. The journal is the work behind it.

No college counsellor builds this. No app assembles it in a weekend. It is proof of a child known deeply, documented honestly, over years.

Questions about your family's data? Something that isn't clear?

hello@attriva.ai

We read every email. Response within one business day.

Read the full Privacy Policy →