Privacy policy

Gaveki is operated by Affection Health Care LLC, a Wyoming limited liability company. In this policy, “we” and “Gaveki” mean that company. Write to us at hello@gaveki.com.

This policy explains what we collect, why, who else sees it, and what you can do about it. We have tried to write it in plain words.

Gaveki is a focus and productivity tool built for people who struggle to start tasks, including people with ADHD.

Gaveki is not a medical device. It does not diagnose, treat, cure or prevent ADHD or any other condition. It is not therapy, not medical advice, and not a substitute for care from a qualified professional. Nothing Gaveki writes should be treated as clinical guidance.

Things you give us:

• Your email address, when you create an account. There is no password — signing in is a one-time link sent to that address. If Google or Apple sign-in is offered on the sign-in screen, using one tells us the email address on that account and nothing else.
• What you write. Brain dumps, tasks, routines, the steps in a plan, and messages to the coach.
• Your settings — including whether Gaveki may speak, and which voice it uses.

Things we collect automatically:

• Usage events: that a screen was opened or a feature was used, never what you wrote in it.
• Which marketing link brought you here, if any.
• A two-letter country code, worked out by our hosting platform from your connection.

Two things people often expect to be on that list are not, and their absence is deliberate: we do not store your IP address, and we do not record what device or browser you are using. The country code is the whole of what we keep about where you are.

This is the part that is easiest to get wrong, so it is enforced by the shape of the system rather than by care. The analytics table has no free-form column to put anything in: every property is an explicit, bounded field, and the complete list is

• which client you used (web, iOS, Android) and the app version,
• whether your plan is free or paid,
• the utm_source from a marketing link you arrived on,
• which version of onboarding or the paywall you saw, and
• which A/B test variant you were shown, if one was running.

That is all of it. Your brain dump text, your task text, your notes, your routines and anything else you type are never sent to analytics — there is nowhere in that table for them to go, and the code will not compile if someone tries.

We use no third-party analytics service and no advertising service. There is no Google Analytics, no advertising pixel and no tracking script of any kind on this site.

This is the part most people want to know.

When you ask Gaveki to sort a brain dump, suggest your next move, make a task smaller, help when you are stuck, or answer as the coach, the relevant text is sent to our AI provider, Anthropic, over an encrypted connection, processed to produce that answer, and returned. It is sent for that purpose only. We do not sell it, and we do not use what you write to train AI models.

Only what the feature needs goes with it. The coach is sent the conversation on that screen and nothing else from your account — not your tasks, not your lists, not your brain dumps.

The weekly review is the clearest case: not one word of your task text is sent for it. The provider is given counts — how many things you finished, how long you focused, which days and which parts of the day — and asked what the numbers suggest. The tasks you keep postponing reach your screen by name and reach the provider as a number.

If the AI is unavailable or you have used your allowance, Gaveki falls back to ordinary logic — splitting your dump line by line — and tells you that is what happened. If you never use an AI feature, your text is never sent to an AI provider.

We keep a count of the AI requests you make, so allowances can be applied and costs watched. That record holds the number of tokens, the model and the cost. What the request said is not part of it.

Gaveki lets you speak instead of type, and can read its answers aloud. Both are optional, and every one of them has a typing equivalent.

Speech to text is done by your browser, not by us. On most browsers, including Chrome and Safari, that means the recording of your voice is sent to the browser maker’s speech service to be turned into text — a service run by Google or Apple, not by Gaveki. Their handling of that audio is governed by their privacy policies, not this one.

Gaveki never receives your audio and never stores it. There is no microphone upload in this product: no recording is made, no audio file is created, and no request carrying audio is sent to our servers. We only receive the text that comes back, and only in the field you were speaking into. The control says where the transcribing happens before you press it.

If you do not want your voice leaving your device, do not use the microphone. Type instead — typing is never affected by any of this.

Reading aloud works the same way in reverse: your browser generates the speech, and on many computers the best-sounding voices are not on your device, so using one sends the line being read to the browser maker to be turned into audio. Gaveki never sends it anywhere itself, speaking is off until you turn it on, and your brain dump text is never read aloud. Settings lists every voice your browser has, says against each one whether it runs on your device or through the browser maker, and lets you hear it before you choose. An on-device voice sends nothing anywhere.

We use these companies to run Gaveki. Each handles some of your data on our behalf:

• Supabase — stores your account and your content, and sends your sign-in link.
• Vercel — hosts the site and serves it to you.
• Anthropic — processes text for the AI features described above.
• Stripe — handles payment if you subscribe. Stripe receives your email address and card details directly, on its own page; we never see or store a card number. We also pass Stripe the marketing campaign you first arrived from, so that revenue can be attributed. Nothing you have typed into Gaveki is sent to Stripe.
• Your browser’s maker (Google, Apple or another) — converts speech to text and text to speech, as described above. This happens in your browser; it is not a request from our servers.

We do not sell your personal information and we do not share it with advertisers. We have never done so and we do not plan to. We may disclose information if the law requires it, or to protect someone from serious harm.

Much of Gaveki works with nobody signed in. When it does, your tasks, your focus sessions and your recommendations are held in your browser’s own storage on your device and are not sent to us at all. Signing in migrates that to your account; clearing your browser data clears it.

If you arrive from a marketing link, Gaveki records the campaign parameters on that link and the site that referred you. Three things are deliberately excluded:

• your IP address is never stored — at most a two-letter country code that our hosting platform has already worked out,
• the query string is stripped from the referring address before it is stored, because a search engine referrer can carry what you searched for, and
• nothing you typed inside the product is ever attached to it.

Gaveki sets two identifiers, and no advertising cookies at all.

• A sign-in session cookie, once you have an account.
• A visitor identifier, so a signed-out visit can be counted and an A/B variant can stay consistent between pages. It is random and is not derived from anything about you.

Clearing your browser data clears both, and you get a fresh identifier next time.

We keep your account and your content while your account is open.

The unedited text of a brain dump is wiped after 30 days. The tasks that came out of it are kept, because those are your list — it is the raw, messy original that goes. A job inside the database does this on its own schedule, every night. It does not wait for you to open the app, and it does not depend on anyone remembering to run it. The window above is read from the same configuration row the job reads, so this page and the job cannot disagree.

You can delete a coach conversation from that screen in one tap, and you can edit or delete any task, routine or note at any time. Content you delete is gone from the product immediately; copies may persist briefly in encrypted backups before they age out.

You can delete your account yourself, from Settings. You will be asked to type the word DELETE first, because there is no undo. Nothing is queued for review and nothing waits for us to get round to it.

Everything you wrote goes: your tasks, brain dumps, routines, workspaces, coach conversations, focus history, progress and settings, along with your measurement history and the record of where you first arrived from. If you have a subscription it is cancelled at Stripe before anything is deleted — and if that cancellation fails, nothing is deleted at all and we tell you, rather than leaving you paying for an account that no longer exists.

What stays is the minimum billing record the law requires us to keep — what was charged and when. It no longer carries your account. The same is true of our record of what AI calls cost: the amount stays so the books are auditable, and your account is removed from it.

If you would rather we did it, write to hello@gaveki.com and we will.

• You can edit or delete any task, routine or note at any time, and delete a coach conversation in one tap.
• You can delete your whole account from Settings, and everything in it goes with it.
• You can use Gaveki without ever touching a voice feature.
• You can use Gaveki without ever touching an AI feature, though you will lose most of what makes it useful.
• You can turn speaking out loud off — it is off until you turn it on.

If you are in California, the CCPA gives you the right to know what we collect, to get a copy, to have it deleted, to correct it, and not to be treated differently for asking. Email hello@gaveki.com and we will handle it. We do not sell or share personal information as those terms are defined by that law.

If you are in the EU or UK, you have similar rights under the GDPR, including the right to object and the right to complain to your local data protection authority.

We encrypt data in transit and at rest, restrict who can reach it, and separate every account’s data at the database level: row-level security is switched on for every table that holds your content, so a request carrying your session can read your rows and nobody else’s. That separation is covered by automated tests that try to read another account’s rows and must fail.

No system is perfectly secure, and we will not pretend otherwise.

Gaveki is for adults. It is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has given us information, email hello@gaveki.com and we will delete it.

Gaveki is a focus tool. It does not ask you for health information and there is no field for it. Please do not record clinical details in it — it is not built to hold them.

That includes the coach. It is a way of getting to one small thing you could start, not a clinical service and not a substitute for one. It is instructed never to diagnose anything and to say plainly that a health matter belongs with a professional. Nothing you say to it is scored, rated or inferred from — there is no column for a mood, a diagnosis or a judgement to go in.

If we change this policy in a way that matters, we will say so in the app before it takes effect rather than quietly updating this page. The date at the top always tells you which version you are reading. See also our terms of use.

hello@gaveki.com