Who we are.
What Kriva is — and isn't.

1. Trader information (EU Digital Services Act)

Under Article 30 of the EU Digital Services Act, the following trader details apply to Kriva as distributed on the Apple App Store within the European Union:

• Trader name: Kriva (operated by Amita Dhand)
• Trading capacity: Sole proprietorship; identified to Apple as a trader for purposes of EU app distribution.
• Contact for compliance and consumer matters: @kriva_ai on X (DMs open, watched daily).
• EU representative: Not applicable — Kriva is below the threshold for designation under Article 11 DSA and the application is distributed via Apple, which acts as the in-scope platform.

2. What Kriva is

Kriva is a software application for iOS (with optional companion Apple Watch and home/lock screen widgets). It helps people understand their own hormone and cycle data through:

• Reading sleep, cycle, and heart-rate signals from Apple Health (on-device only);
• Letting the user log symptoms, mood, sleep, food, journal entries, and visits;
• Producing a short, daily plain-language reading and four suggested moves for the day;
• Offering practices (breathwork, stretches), an Ask Kriva question surface, and a doctor-ready visit-prep PDF.

3. What Kriva is not

• Not a medical device. Kriva does not diagnose, treat, cure, mitigate, or prevent any disease or medical condition. It does not perform measurement, monitoring, or analysis intended to inform clinical decisions. It is not classified as a medical device under EU Regulation 2017/745 (MDR), the US Food, Drug, and Cosmetic Act, or any equivalent national regime.
• Not a substitute for professional medical advice. Users are advised throughout the app and in our Terms of Use that Kriva is a companion, not a clinician.
• Not a physical product. Kriva ships no hardware, no shipped goods, and no components that would require CE marking, UKCA marking, FCC declaration, or analogous physical-product compliance labels.
• Not a financial product. Kriva does not provide financial advice and does not transmit, store, or process payment data. Any future paid plan will be processed entirely through Apple's In-App Purchase system.

4. Product safety and compliance labels

Because Kriva is a software-only application, the following physical-product compliance regimes do not apply: CE marking (EU), UKCA marking (UK), FCC certification (US), KC certification (South Korea), BIS certification (India), or analogous marks. No physical labels exist or are required.

The compliance regimes that do apply to Kriva are software, data-protection, and consumer-protection regimes — covered in the sections below.

5. Data protection (GDPR, UK GDPR, equivalent regimes)

Kriva is designed local-first. The full handling of personal data is set out in our Privacy Policy; the short version for EU users:

• Health data (Apple Health readings, symptom logs, mood, journal) is stored on the user's device and synced only through the user's own iCloud account. Kriva does not operate any server that holds this data.
• Daily AI readings involve sending the relevant signals to a third-party AI provider (Anthropic) for a single inference call. No retention by Kriva.
• Analytics are on by default but strictly anonymous: no name, no email, no symptom names, no journal text, no question text — only product-shape events tied to a per-install random UUID. The user can turn analytics off in Profile → Analytics; the off state is persisted per install. The data falls outside the personal-data scope of GDPR because no identifier links to a person, but we treat the off-toggle as binding regardless of legal interpretation.
• Legal basis for processing — Article 6(1)(a) consent for analytics; Article 6(1)(b) contract performance for the core app function. Special categories (Article 9) health data processing is justified under Article 9(2)(a) explicit consent, given on first launch when the user grants Apple Health access.
• Data subject rights (access, rectification, erasure, portability, restriction, objection): exercise via the in-app Profile → Privacy controls (export, wipe) or by writing to the contact below. For data Kriva never holds, the right is exercised at source — your device or your iCloud account.
• Data Protection Officer: Not designated; Kriva's processing is small-scale and does not meet the Article 37 GDPR threshold for mandatory DPO appointment.
• Supervisory authority complaints: EU users may lodge complaints with their national data protection authority. A list is maintained at edpb.europa.eu.

6. Age rating and content

Kriva is rated 13+ on the App Store and our Terms of Use set 13 as the minimum age of use. The rating reflects:

• References to medical and physiological content (cycles, symptoms, hormones);
• Mental-health content, including locale-aware suicide prevention helplines that may surface as a Crisis Care card when the user's logged signals suggest sustained difficulty;
• Alignment with the COPPA threshold (US) and with the App Store's content-suitability age tier. Users in EU jurisdictions where the digital-consent age is higher (GDPR Article 8, default 16, lowered to 13–15 by individual member states) must comply with their local threshold; Kriva's contractual minimum is 13.

Kriva contains no advertising, no user-generated content shared with other users, no in-app browser, no chat with strangers, no gambling, and no targeted profiling.

7. Accessibility

Kriva is built with Apple's native UI frameworks (SwiftUI) and inherits system-level accessibility features by default — Dynamic Type, VoiceOver labels on interactive elements, reduce-motion respect, dark-mode support, and high-contrast colour pairs. Known gaps and ongoing accessibility work are tracked publicly; if you encounter an accessibility barrier, please write to the contact below and we will address it as a priority.

8. Distribution

Kriva is distributed exclusively through the Apple App Store. We do not operate alternative download channels, side-loading, or independent payment surfaces. App Store review processes (including Apple's content, privacy, and safety review under the App Store Review Guidelines) apply to every release.

9. Contact for compliance, safety, and consumer matters

Anyone — user, regulator, journalist, advocacy group, or fellow developer — is welcome to reach us directly. DMs on X are open and watched daily.

• @kriva_ai on X
• @kriva.ai.24 on Instagram
• Kriva on LinkedIn

We aim to respond within five working days. Urgent safety or compliance reports are escalated immediately.

10. Updates to this page

If our trader status, distribution model, or any compliance position changes materially, we will update this page and note the change in the "Last updated" date above. The current version is always available at krivaweb.web.app/compliance.