Privacy
Last updated 5 September 2026
Narvita is a journal. What people write in it is their private thinking and, often, a record of their body. The app understands it without us ever receiving it: the work happens on the phone, not on a server. We have built it this way so that we are not in a position to read any of it — not reluctant to, not promising not to, but unable. This page describes exactly how far that goes.
What stays on your phone
Everything you write, and everything Narvita makes of it. Recognising a period, a symptom, a feeling, a person, a reminder — all of that is computation performed by the app on your own device, in milliseconds, and it works with the network switched off. Your writing is never uploaded to be interpreted, so there is no server anywhere that has seen it and no person at Narvita who could look even if asked. The same holds for voice: dictation is transcribed on the device, and where a language has no on-device model, Narvita declines rather than sending your voice away.
Your journal is stored on your phone with iOS file protection, so it is unreadable while the phone is locked.
What we store, if you ask us to
Backup and sync are optional and part of Narvita Plus. If you turn them on:
- Your journal is encrypted on your phone before it is uploaded, with a key that never leaves your devices.
- Our storage provider holds ciphertext. Neither we nor they can read it.
- The key is kept in your Apple Keychain and moves between your own devices through iCloud Keychain, which is itself end-to-end encrypted. You also get a recovery key to write down.
There is no password reset. If you lose every device and your recovery key, the backup cannot be recovered — by you, by us, or by anyone. That is the necessary cost of us being unable to read it, and we would rather say so here than surprise you later.
Nothing is sent, including your questions
There used to be one exception here: general health questions went to our service to be answered. That is gone. Narvita is a journal, not a healthcare provider, and an app that answers "is this normal?" is behaving like one whatever its disclaimer says.
So every question you ask is answered on your phone — from your own writing, by a model running on the device. Your journal doesn't leave. Your questions don't leave. There is no server that receives either, which is a stronger thing than a promise not to look.
Ask something medical and Narvita will decline and hand you the source instead — public-health pages from MedlinePlus, the NIH and the HHS Office on Women's Health — along with the suggestion to ask someone who can actually examine you. Offering a source is a different act from giving an answer, and it is the only one a journal is entitled to.
The model is open — Apache-2.0, owned by nobody. It is downloaded once, about 290MB, from a public repository, and it is the same file for everyone — nothing about you is involved in fetching it. You can delete it in Settings and the app keeps working, with plainer answers.
What we never do
- We do not sell your data, and we never will.
- We do not share it with advertisers, data brokers, or insurers.
- We do not use your writing to train any model.
- We do not track you across other apps or websites, and there is no advertising SDK in the app.
Analytics
Anonymous usage counts are off unless you turn them on, and you are asked once, plainly, with both answers equally easy. If enabled, they record things like which screen was opened — never a word you wrote, and never anything about your cycle or your health. Even the length of an entry is recorded only as "short", "medium" or "long".
Accounts
An account is optional; "keep it on this phone" is a genuine choice. If you create one, we hold your email address and a user identifier, through Firebase Authentication. You can sign in with Apple or Google if you prefer not to give us an email at all.
Your choices
- Export. Take everything you have written out of the app as a document, whenever you want.
- Correct. Anything Narvita concluded can be rejected in one tap, and it stays rejected.
- Delete. Deleting your account erases the cloud copy, the account itself, and the data on your device — permanently and immediately.
If you are in the UK, EU, California or another region with data rights, those rights apply. In practice most of them are satisfied by the app itself: your data is already in your hands, exportable, and deletable without asking us.
Children
Narvita is not intended for children under 13. Many people get their first period well before adulthood, and if a teenager uses this app we hold the same line as for anyone else: her writing is hers, understood on her own phone.
Not medical advice
Narvita is a journal, not a medical device. It does not diagnose anything and will not try. Cycle predictions are estimates from your own writing and are not contraception. If something worries you, please talk to a clinician.
Changes
If this policy changes in a way that affects what we can see, we will say so in the app rather than quietly updating this page.
Contact
Questions about any of this: [email protected].