Privacy

Ravita is operated by Dmitriy Fridkin ("Ravita", "we"), the data controller for the information described here. This policy is effectiveAugust 27, 2026. If we change it, we will update this page and the date above; material changes will be noted in the app.

What we collect and why

Ravita stores the activities and nutrition you log, the ratings you give, and the settings on your profile. It is kept so your record syncs across your devices and remains available to you. You can export it or delete it at any time.

How we collect it

• Sign-in. You sign in with Apple or Google. We receive an account identifier and, if you allow it, your email address. We do not receive your password.
• Strava, when you connect it. Through Strava's OAuth consent screen we request read access to your activities. We store the resulting access tokens, encrypted, to read finished activities. We never request write access.
• In the app. The activities, nutrition, ratings and settings you enter yourself.
• Push, if you turn it on. A device push token, so we can tell you when an imported activity is ready to log.
• Server logs. Routine request logs, including IP address, kept briefly to operate and secure the service.

Ravita ships no third-party analytics, advertising, or crash-reporting software. Nothing on the device profiles you or reports your behavior to us or anyone else.

The waitlist

If you join the waitlist on this site, we store your email address with Resend, our email provider, to tell you when Ravita is ready. Nothing else, and we never sell your address. Every message includes an unsubscribe link, or write to us and we will remove you.

Who else touches your data

We use a small set of providers to run the service, each bound by contract to protect your data to the same standard described here and to use it only to provide their part of the service:

• Amazon Web Services: hosting, the database, sign-in, and push delivery.
• Strava: the source of imported activities, only when you connect it.
• Apple Push Notification service: delivers notifications to your device.
• Resend: waitlist email only (above).
• Vercel: hosts this website.

We do not sell your personal data, and we do not share it for advertising.

Activity sync is one-way

When you connect Strava, Ravita reads your finished activities. Nothing is ever written back to Strava or any connected service.

Nothing you log trains a model

What you log is used to build your own record and to compute your own guidance. It is not used to train any model, and your personal data is never sold.

Grouped figures, never you

Ravita may share grouped, anonymized, category-level figures (including with brands) about how products rate across many athletes. This helps keep the app free. It is bound by strict rules: a figure is only ever published for a group of at least 20 distinct athletes, it is recomputed on fixed periods, it is suppressed entirely below that threshold, and Strava-sourced data is excluded from it completely. Nothing shared is traceable to an individual.

How long we keep it, and backups

We keep your record for as long as your account exists. When you delete your account, your data is removed from the live service immediately. Encrypted database backups are retained for up to 7 days and then expire on their own schedule; deleted data is not restored from them.

Your choices

These are each separate from deleting your account:

• Turn off notifications in your device's settings.
• Disconnect Strava in the app, under Profile then Connections, or revoke access from your Strava account settings (Settings, then My Apps). Either way, Ravita can no longer read your activities.
• Opt out of grouped figures in the app, under Profile then Privacy, to leave your own ratings out of the anonymized figures described above.
• Ask us to export your record: write to us and we send everything you have logged, so leaving never means losing it.

Export and deletion

In the app: Profile → Account details, to delete your account and everything you have logged. Deletion is immediate and complete. To export your record, write to us and we will send it to you.

California privacy rights

Ravita launches in the United States, and if you live in California the CCPA and CPRA give you specific rights over your personal information. We honor them for everyone, so most are already covered above.

• Know and access what we hold about you and why: it is set out in this policy, and you can ask us for a copy of your record.
• Delete your account and everything you have logged: in the app, Profile then Account details, or ask us.
• Correct inaccurate personal information: write to us and we will fix it.
• Opt out of the sale or sharing of your personal information. There is nothing to opt out of: we do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We will not treat you differently for exercising any of these rights. To make a request, write to support@ravita.app; we may first need to confirm you own the account.

Children

Ravita is not directed to children under 13, and we do not knowingly collect their personal data. The app is rated accordingly. If you believe a child has given us data, write to us and we will delete it.

Contact

Questions about privacy, or to exercise any choice above:support@ravita.app.