PiViva Privacy Notice

Version 2026-10-09, published 9 October 2026 at 10:32.

Version 2.03. Effective from 9 October 2026.

This notice explains what PiViva collects about you, what we do with it, who else sees it, and what you can do about it. The short version comes first. The full notice follows, and where the two differ, the full notice is the one that counts.

The short version

PiViva is for adults living in the United Kingdom. You need to be 18 or over, and we ask where you live when you sign up.
What you write is yours. We use it to run PiViva for you, and for nothing else. We don't sell it, we don't use it for advertising, and it is never used to train AI models.
What you write is encrypted with a key that belongs to your account. That key is held by Amazon Web Services and only our own servers can use it. A copy of our database on its own would show nothing you have written.
Viv is an AI. When you talk to Viv, your conversation goes to our AI provider, Anthropic, to produce a reply. Viv reads your tools only if you switch that on, and you can switch it off at any time.
Report Room reads your reports with AI. When you upload a report you agree to that, report by report. Delete the report and everything made from it goes too.
You choose what a coach sees. Nothing reaches a coach unless you share it, and you can stop sharing at any time.
Every message to Viv is checked for signs that you might be at risk. If something is flagged, you are shown where to get help straight away, and a member of our team reviews it, usually within two working days, not straight away. We never close an account because someone said they were struggling.
You can export or delete everything yourself, from Settings. Deletion is immediate.
One optional analytics cookie, and only if you say yes.
Questions or concerns: privacy@piviva.com. You can also complain to the Information Commissioner's Office at any time.

1. Who we are

PiViva is run by PiViva Ltd, a company registered in England and Wales under company number 17357455. Our registered office is 60 High Street, Wimbledon, London, SW19 5EE.

We are the controller of the personal data described in this notice. Our registration number with the Information Commissioner's Office is ZC227068.

You can reach us about anything in this notice at privacy@piviva.com.

In this notice, "PiViva", "we" and "us" mean PiViva Ltd. "The Service" means the PiViva app and website, including the coaching tools, the AI companion Viv, Report Room, the learning library and the coach directory.

2. Who this notice covers

Members: people with a PiViva account. Most of this notice is about you.
People invited to give feedback: if a member asks you to take part in their 360 Feedback or their Johari Window, section 10 explains what we hold about you and who sees it.
People who ask us for a sign-in or password email: section 3.5 explains why we may hold your email address even if you have no account.
People who register their interest on piviva.com: section 3.6 explains what we hold and for how long.
Coaches listed in our directory: the Coach Agreement explains how we handle your data as a coach. Where you also use PiViva as a member, this notice applies to that use.

3. What we collect

3.1 When you sign up

Your name and email address.
Your password, stored as a one-way hash so that nobody, including us, can read it. If you sign in with Google, we receive your name and email address from Google, and no password.
Your date of birth, and your confirmation that you are 18 or over.
The country you tell us you live in.
How you would like Viv to be presented to you: as Vivienne, as Vivian, or as Viv.
Your answers to the sign-up questions: whether you agree to our Terms, whether Viv may read your tools, and whether you would like marketing emails.

If we set up your account for you. Sometimes we set up an account because someone has asked us to, for example an early member. A member of our team enters your name and email address, and we email you a link to choose your own password. Nobody at PiViva sets or sees your password. Everything else on this list you give us yourself, the first time you sign in. We keep a record of who set up the account and why.

3.2 What you create

What you write and record in the coaching tools: goals, actions, habits, scores, answers, reflections and the things you capture in lists.
What you tell us at the start about what you want from PiViva, and the pathway you choose.
Your conversations with Viv.
Reports you upload to Report Room, and the readings made from them.
Messages you send to a coach.
Your 360 Feedback and Johari Window cycles, including the names and email addresses of the people you invite.
A record of what you have shared with a coach, when, and when you stopped.

3.3 Your subscription

Your plan, its status, what you have paid and when, and any add-ons you have bought.
We never see or store your card details. Payments are handled by Stripe.

3.4 Technical information

Your IP address, device and browser details, and records of when you signed in.
A record every time someone at PiViva opens information about your account, with who it was, when, and why.

3.5 Sign-in and password emails

We record every request for a sign-in link or password reset, including requests for email addresses that have no PiViva account. The screen shows the same message either way, so a stranger can't use it to find out whether an address is registered with us.

That means we may briefly hold the email address of someone who has never used PiViva. We keep the address, the kind of email, whether it was sent, and any error. Nothing else. We delete it after 30 days. If it is your address and you would like it removed sooner, write to privacy@piviva.com.

3.6 If you register your interest on piviva.com

Before PiViva opens to everyone, you can ask us to tell you when it does, on the register interest form on piviva.com.

What we hold: your name, your email address, whether you asked to join the founder member list or the founder coach list, the wording you agreed to and when you agreed.
Why: to tell you about PiViva's development, features and launch, and to invite you in. We rely on your consent, which you give by ticking the box on the form.
Where it is held: in our email provider, Brevo, which sends our emails to you, with a backup copy in the database behind piviva.com, provided by Lovable and held in Ireland. The form uses Cloudflare to check that a person, not a program, is filling it in.
How long: until you unsubscribe or ask us to remove you. Every email has an unsubscribe link, and unsubscribing stops our emails straight away and takes you off the founder lists. We delete the whole list, backup included, 12 months after PiViva opens to everyone, or sooner if you ask us at privacy@piviva.com.
We never sell or share your details, and they are not used to create a PiViva account. If you later sign up, your account is separate.

4. Your health and other sensitive information

We don't ask about your health, and nothing in PiViva is designed to collect it. But PiViva is a place where people write openly, and what you write may reveal something about your physical or mental health, your beliefs or your relationships.

Where it does, the law treats it as special category data, and so do we. We hold it for you, as part of what you have written. We don't analyse it for its own sake, we don't build a picture of your health from it, and there is no score attached to your account.

Report Room is for occupational and personality reports, such as psychometric profiles and leadership assessments. Please don't upload medical or clinical records.

5. Why we use your data, and the law we rely on

Data protection law requires a lawful basis for each thing we do with your data, and an extra condition where the data is special category data.

Running your account and the coaching tools, and storing what you write. Lawful basis: Contract: providing the Service you signed up for. Where special category data is involved: Your explicit consent.
Letting Viv read your tools, where you have switched that on. Lawful basis: Your consent. Where special category data is involved: Your explicit consent.
Talking to Viv. Lawful basis: Contract. Where special category data is involved: Your explicit consent.
Storing and reading a report you upload, including with AI. Lawful basis: Your consent, given for each report. Where special category data is involved: Your explicit consent, given for each report.
Sharing with a coach you have chosen. Lawful basis: Your consent, given at the point of sharing. Where special category data is involved: Your explicit consent.
Billing and your subscription. Lawful basis: Contract, and our legal duty to keep tax records. Where special category data is involved: Not applicable.
Emails about your account and your subscription. Lawful basis: Contract. Where special category data is involved: Not applicable.
Your daily tonic and weekly reminder emails. Lawful basis: Legitimate interests: helping you keep going with what you started. You can turn them off at any time. Where special category data is involved: Not applicable.
Adding stamps to your loyalty card for what you do in PiViva. Lawful basis: Legitimate interests: rewarding regular use, which is what helps the coaching work. Where special category data is involved: Not applicable.
Marketing emails. Lawful basis: Your consent. Where special category data is involved: Not applicable.
The optional analytics cookie. Lawful basis: Your consent. Where special category data is involved: Not applicable.
Checking that members are 18 or over and live in the UK. Lawful basis: Legitimate interests, and our legal obligations. Where special category data is involved: Not applicable.
Checking messages to Viv for signs of risk, and responding. Lawful basis: Legitimate interests in keeping people safe, recognised in law for safeguarding. Vital interests, where someone's life is at risk. Where special category data is involved: Where you are able to consent, your explicit consent. Where your life or someone else's is at risk and you can't consent, protecting vital interests.
Security, preventing misuse, and recording who at PiViva opened what. Lawful basis: Legitimate interests. Where special category data is involved: Not applicable.
Dealing with complaints and requests about your data. Lawful basis: Legal obligation. Where special category data is involved: Not applicable.

We use what you do in PiViva, such as finishing a tool, a course or a week of activity, to add stamps to your loyalty card. Our basis is legitimate interest: rewarding regular use, which is what helps the coaching work.

Where we rely on your consent, you can withdraw it at any time. Withdrawing doesn't make what we did before unlawful.

6. Viv

Viv is an AI companion. Viv is not a person, a coach, a therapist or a medical professional, and we say so at the top of every conversation.

6.1 Where your conversation goes

When you send Viv a message, your conversation is sent to our AI provider, Anthropic, so that a reply can be written. We call Anthropic from our own servers, never from your browser. Anthropic does not use what we send to train its models.

Your conversations are kept in your account so you can read them back. You can delete any conversation from Viv history, and it is removed at once. The one exception is set out in section 11.

6.2 What Viv can read

This depends on one setting, "Viv reading your entries". It is off unless you switch it on, at sign-up or later in Settings.

When it is off, Viv knows your first name, what you say in the conversation, and the list of reports in your Report Room (see 6.3). Nothing from your tools.

When it is on, Viv can also read:

What you told us at the start about what you want from PiViva, and your chosen pathway.
Everything you are currently working on in your lists, word for word, up to 80 items. That includes things like your limiting beliefs and the fears you have named. Items you have marked done are left out.
Your active goals and outstanding actions.
For each tool you have used, its name, its category, the date, and either your score or the first 200 characters of your reflection.
The pooled results of your 360 Feedback, which are the same results you see, and, for your Johari Window, how many people chose each word and up to five of the written answers. Never a name, and never who said what.
When Viv needs it, one tool's most recent saved entry at a time: your answers, up to 1,500 characters, and your reflection on that entry in full.

You can switch this off at any time. It takes effect on Viv's next reply. Viv can read. Viv can't create, change, delete or move anything in your account.

6.3 Viv and your reports

Report Room has its own consent, given report by report when you upload (section 7). For each report you have uploaded, Viv sees its name, its category, the date you uploaded it, and whether it has been read yet. When you ask about a report, Viv can open its reading to talk it through with you. This works whether or not the setting in 6.2 is on, because you agreed to it when you uploaded the report.

If you delete a report, Viv loses access to it straight away. Anything Viv said in earlier conversations that drew on that report is replaced with "This reply discussed a report you have since deleted." The one exception is set out in section 11.

6.4 Safety checks

Every message you send to Viv is also checked, by a separate AI request to Anthropic, for two things: signs that you may be at risk of serious harm, and a statement that you are under 18. The risk check is given your message and up to six of your own earlier messages in the same conversation, never Viv's replies. The age check is given your message and the earlier turns of the same conversation. Neither is given your name, your tools or anything from another conversation. Before your first conversation with Viv, we show you how this works, and the same explanation is on the Get support page. Section 11 explains what happens next.

6.5 What Viv gets wrong

Viv can be wrong, can miss things, and can be out of date with your account. Please use your own judgement, and don't rely on Viv for medical, legal or financial advice.

7. Report Room

Report Room lets you upload reports you have had prepared elsewhere, such as a psychometric profile, and have them read and analysed for you.

When you upload a report, you agree, for that report, to PiViva storing it and using AI to read and analyse it for you, including Viv reading it and talking it through with you. To do that, the report is sent to Anthropic. It is used only for you, and by a coach only if you choose to share it.

The report and its readings are encrypted with your account's key (section 16).
Reports often contain information about other people, such as colleagues who gave feedback. Please upload only reports you are entitled to share.
Deleting a report is how you withdraw your consent for it. Deleting it removes the report, its reading, every combined reading and comparison that includes it, every share of any of them with a coach, and what Viv said about it (section 6.3).
We keep a record that you gave your consent and when you withdrew it, as evidence. It holds no content from the report.
Your plan sets how many reports you can upload each month. An upload counts when you make it, so deleting a report doesn't give it back.

8. Coaches

Coaches in our directory are independent professionals. They are not employed by PiViva.

Contacting a coach. When you send a coach a message through PiViva, it is kept in your account and emailed to the coach, so it passes through our email provider (Annex A). Any coaching sessions and payment are arranged directly between you and the coach, outside PiViva.
Sharing with a coach. Once a coach has accepted you, you can share tools, entries, reports and readings with them. You choose what, one thing at a time. A coach can read what you share, and so can the AI assistant PiViva gives coaches. For a report, a coach sees its reading and can open a preview of the file, but can't download it.
Stopping. You can stop sharing any item at any time, from inside the app, and the coach loses access straight away. Stopping can't undo what a coach has already read, or anything they have written in their own notes. You can see everything you have ever shared, and when you stopped, under Shared with coaches.
If a coach becomes unavailable. A coach can only see what you share while their subscription is live and their qualification and insurance are current. If that stops, they lose access to what you have shared, and we tell you they are not available on PiViva at the moment, without giving a reason. Your shares stay as you left them.
What coaches are responsible for. When a coach reads what you have shared, they are responsible for how they use it, under their own professional obligations.

9. Emails we send you

About your account: sign-in links, confirmations, billing notices and security messages. These are part of running the Service.
If a safety check flags a message: a short check-in email pointing you to support (section 11). It never quotes what you wrote.
Your daily tonic and weekly reminder: a short daily note, and a weekly note from Viv about what you have been doing with a suggestion for what to try next. They are on when you join, and in Settings you can have them daily, weekly or not at all. To write the weekly note, we send Anthropic a short activity summary: the names of tools you have used or not yet used, your current streak, and when you were last active. Tools whose name would itself say something personal are left unnamed.
Marketing: only if you have said yes. You can stop at any time from Settings or from the link in any email.

Our email providers receive your name, your email address and the email itself. Apart from messages you send to a coach, and tool names in your weekly reminder, nothing you have written in PiViva is put into an email.

10. 360 Feedback, the Johari Window, and the people you invite

Two tools ask other people what they see in you: 360 Feedback and the Johari Window. To use either, you give us the names and email addresses of the people you want to ask. We email each of them an invitation that names you, with a private link. To answer, they sign in to PiViva, or create an account, so we know the answers come from the person you asked.

The two tools treat those answers differently, and each invitation says which applies.

10.1 360 Feedback: anonymous

What people are asked: to rate you against a set of statements, to say how they know you (for example, as your manager or a colleague), and to answer three short written questions.
What you see: pooled results only. Averages across everyone, averages for a group only when enough people in that group have answered, and the written answers mixed together in a random order. You are never shown who said what, and no name is stored with an answer.
What Viv sees, if you have switched on "Viv reading your entries": the same pooled results you see, and never a name.

10.2 Johari Window: named

What people are asked: to choose words from a set list that describe you, to write something they think you may not see in yourself, and, if they like, to give an example.
What you see: each person's words and written answer, with their name and the date they answered. Everyone is told this before they answer.
What Viv sees, if you have switched on "Viv reading your entries": how many people chose each word, and up to five of the written answers, without names.

10.3 If you have been invited

We hold your name and email address as the member gave them to us, whether you have answered, and your answers. For a Johari Window, we also hold the name you give with your answer.

Your answers are encrypted with the key of the member they are about.
They are used only to show that member their results, as described above, and to let Viv talk them through with the member where the member has allowed it. That means they may be sent to Anthropic, without your name.
They are deleted when the member deletes their account. Your own PiViva account is yours, and this notice covers it like any other.
We don't use your details for anything else, and we don't add you to any mailing list.

If you would like your details removed, write to privacy@piviva.com.

10.4 Invitations you haven't sent

A 360 Feedback you set up but haven't sent keeps the names and addresses you entered for 90 days from your last change, then deletes them.

11. Keeping people safe

PiViva is not a crisis or emergency service, and nobody watches conversations as they happen.

Where the safety check in section 6.4 finds signs that you may be at risk, you are shown where to get help straight away. We may send you a short check-in email, which never quotes what you wrote. You can reply to it, and a person at PiViva will read your reply. A member of the PiViva team is alerted and reviews what raised it, usually within two working days. We will never close or restrict your account because you have told us you are struggling.

In rare cases, where someone's life is at risk and they aren't able to agree, we may pass information to the emergency services. That decision is made by a person, never automatically, and it is recorded.

Where a conversation is part of a safeguarding review, or we are required by law to keep it, we keep it for that purpose even if you delete it, or a report it mentions. It is hidden from you and never sent to the AI again.

If you need help now: call Samaritans free on 116 123, at any time, or call 999 in an emergency.

12. Age and where you live

PiViva is for adults aged 18 and over who live in the United Kingdom. We ask for your date of birth and your country when you sign up, and we refuse a sign-up that doesn't meet both. If we set up your account for you (section 3.1), we ask the same questions the first time you sign in, before anything else. If your answers don't meet both, we delete the account straight away.

We use your date of birth to check you are eligible and, in general terms, to help Viv respond in a way that suits your stage of life. We don't use it for advertising or profiling.

If you tell Viv you are under 18, or we otherwise come to believe it, we pause the account straight away and look into it. If we can't be satisfied that you are 18 or over, we close the account and delete everything in it. We then keep a minimal record so the same person can't immediately sign up again: a one-way hash of the email address, the date and the reason. We delete that after 24 months.

If you believe a child has an account, write to safeguarding@piviva.com. You don't need to prove anything before we act.

13. Who we share your data with

The companies that process data for us are listed in Annex A, with what each one does and where. Each works on our instructions under a written agreement and may not use your data for its own purposes.

We also share data with:

Google, if you choose to sign in with Google. Google handles that sign-in under its own privacy policy.
Coaches you choose to share with (section 8).
The emergency services, only as described in section 11.
Regulators, the police, courts and our professional advisers, where the law requires it or where we need to establish or defend a legal claim.

We don't sell your data, we don't rent it, and we don't share it with anyone for their own marketing.

14. Where your data is held

Your account and everything you create in PiViva is stored in Frankfurt, Germany. The key that protects what you write is held by Amazon Web Services, also in Frankfurt. Anthropic's service for UK customers is provided through an Irish company. The register interest list on piviva.com (section 3.6) is held by Brevo in the European Union, with its backup copy in a database in Ireland.

The UK recognises Germany and Ireland, as parts of the European Economic Area, as protecting personal data adequately. Some of our providers are companies based outside the UK and the European Economic Area, or may process data elsewhere. Where that happens, we rely on the UK's approved safeguards, the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, and we assess each transfer before it starts.

15. How long we keep things

Your account and everything you have created. How long: Until you delete your account, then deleted immediately. From when: Account deletion.
A report and everything made from it. How long: Until you delete it or your account, then deleted immediately. From when: Deletion.
Your conversations with Viv. How long: Until you delete them or your account, then deleted immediately. From when: Deletion.
Records of consents you gave and withdrew, with your name and email removed once your account is deleted. How long: 6 years. From when: The consent being withdrawn, or your account being deleted, whichever is later.
Billing and tax records. How long: 6 years plus the current financial year. From when: The end of the accounting period.
Sign-in records. How long: 12 months. From when: Creation.
Records of who at PiViva opened information about your account. How long: 24 months. From when: Creation.
Records of emails we have sent. How long: 90 days. From when: Sending.
Sign-in and password email records (section 3.5). How long: 30 days. From when: Sending.
Names and emails in a 360 you haven't sent. How long: 90 days. From when: Your last change.
The register interest list on piviva.com (section 3.6). How long: Until you unsubscribe or ask us to remove you, and no more than 12 months after PiViva opens to everyone. From when: Your registration.
Safeguarding case records. How long: 6 years. From when: The case closing.
Complaints. How long: 6 years. From when: The complaint closing.
The record that stops an under-18 account being reopened. How long: 24 months. From when: Account closure.
Your reward claims. How long: 2 years. From when: The claim.
Partner reward codes we have given out, as the record of the purchase. Once your claim is deleted, nothing links the code to you. How long: 7 years. From when: The code being given out.
The record that we set up your account for you (section 3.1). How long: Until your account is deleted, or 90 days after it was set up, whichever is later. From when: The account being set up.
The link we email you to choose your password. How long: 90 days. From when: The link expiring.
Database backups. How long: 7 days. From when: The backup being taken.

What deletion means. When you delete something, it is removed from our live database straight away. We keep daily backups for 7 days, so a deleted record is out of every backup within 8 days. Uploaded files aren't in the backups at all, so a deleted file is gone at once. We never restore deleted data from a backup.

When you delete your account, we also tell our email provider and Stripe, and remove your stored files, within a day.

Where the law requires us to keep a financial record after you have asked us to delete your data, we remove your name and email and keep only the transaction.

16. How we protect your data

Encryption with your own key. What you write in PiViva is encrypted before it is stored, with a key that belongs to your account alone. That covers your tool entries and reflections, your lists, goals, actions and habits, your conversations with Viv, your reports and their readings, your messages with coaches, and your 360 Feedback results. The keys are themselves protected by a master key held in Amazon Web Services' key management service, which never receives your content. Only our own servers can use the master key, and every use is logged. Anyone who got hold of a copy of our database would see encrypted text.
Encryption in transit and at rest, for everything, as well.
Access controls on every table, so that what is yours can be read by you, by Viv as described in section 6, and by a coach you have chosen, and by nobody else.
Access by our team. Nobody at PiViva reads what you write as a matter of course. Where we have to open information about your account, for example to review a safety alert or to answer a request from you, it is recorded with the person's name, the time and the reason.
Two-step verification, which you can switch on in Settings.
Uploads are limited to certain file types, and checked for hidden active content before they are accepted.

No system is perfectly secure. If something goes wrong that puts your data at risk, we will tell you and the Information Commissioner's Office as the law requires.

17. Your rights

You have the right to:

Get a copy of the personal data we hold about you.
Have inaccurate data corrected.
Have your data deleted.
Receive your data in a form you can take elsewhere.
Object to, or ask us to restrict, some of what we do with it.
Withdraw any consent you have given.

Most of these you can do yourself. In Settings you can export everything, change what you have agreed to, and delete your account. For anything else, write to privacy@piviva.com. We will reply within one month.

We won't ask for more proof of who you are than the request needs. If you are signed in and asking about your own data, that is usually enough.

None of our decisions about you are made by automated means alone in a way that has legal or similarly significant effects.

18. Complaints

If you are unhappy with how we have handled your data, please tell us at privacy@piviva.com or complaints@piviva.com. Both go to the same complaints record. We will acknowledge your complaint within 30 days, and we aim to do so within five working days. We will then look into it and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113, at any time. You don't have to come to us first, though we would welcome the chance to put things right.

If your complaint is about the Service rather than your data, our Terms of Service explain where to send it.

19. Cookies and similar technologies

"Cookies" here includes the similar things browsers store, such as local storage.

Strictly necessary. What it does: Keeps you signed in, remembers where you were going after signing in, keeps what you have typed into a form, and remembers your cookie choice. Do we ask first? No. The Service can't work without these.
Preferences. What it does: Remembers display choices, such as which tool categories you have collapsed, and the state of your timer or audio player. Do we ask first? No. They stay on your device and are never sent to us.
Analytics. What it does: One cookie from PostHog, hosted in the EU, that records a short list of events, such as starting or finishing a tool and sending a message to Viv, so we can see how PiViva is used. It never records what you type, and never records your screen. Do we ask first? Yes. Only if you choose "Accept all".

Our security provider, Cloudflare, may also set a cookie that helps block automated attacks.

We don't use advertising cookies or cross-site tracking. You can change your analytics choice at any time in Settings.

20. Changes to this notice

We will update this notice when what we do changes. If a change matters, we will tell you by email or in the app before it takes effect. Where a change affects something you consented to, we will ask you again.

21. Contact

PiViva Ltd, 60 High Street, Wimbledon, London, SW19 5EE
Company number 17357455. ICO registration ZC227068.

Privacy: privacy@piviva.com
Support: support@piviva.com
Safeguarding: safeguarding@piviva.com

Annex A. The companies that process data for us

Last reviewed 1 October 2026. We update this list before a new company starts processing personal data for us. If you would like to be told when it changes, write to privacy@piviva.com.

Supabase. What it does for us: Our database, sign-in, file storage and servers. What it receives: Everything held in your account, with what you write encrypted. Where: Frankfurt, Germany.
Amazon Web Services. What it does for us: Holds the master key that protects your encrypted content. What it receives: Your account's encrypted key and your account number when the key is used. Never your content. Where: Frankfurt, Germany.
Anthropic. What it does for us: Powers Viv, the Report Room readings, the safety checks and the weekly reminder. What it receives: What each feature needs, as set out in sections 6, 7 and 9. Where: Provided through Anthropic Ireland Limited, with processing under Anthropic's own arrangements.
Stripe. What it does for us: Subscriptions and payments. What it receives: Your name, email, billing address and payment details. We never receive your card number. Where: Ireland and the United States.
Resend. What it does for us: Account, billing, security and safety emails, messages to coaches, and 360 Feedback invitations. What it receives: Your name, email address and the email. Where: Ireland.
Brevo. What it does for us: Daily tonics, weekly reminders and marketing emails, and the register interest list on piviva.com. What it receives: Your name, email address, the email, and your email preferences; for the register interest list, the details in section 3.6. Where: European Union.
PostHog. What it does for us: The optional analytics cookie, only if you accept it. What it receives: Your account number and the events listed in section 19. Where: European Union.
Lovable. What it does for us: Hosts the PiViva app's pages and some of its server code, and hosts piviva.com with its database. What it receives: Requests pass through it as you use the app; it doesn't store your account data. For piviva.com, it holds the backup copy of the register interest list (section 3.6) and passes the form's details to Brevo. Where: Served from Lovable's global network, from the location nearest to you.
Cloudflare. What it does for us: Security, delivering the app quickly, and checking that the register interest form on piviva.com is filled in by a person. What it receives: Your IP address and technical details of each request. Where: Global network.