Your cycle is your business.

To use Maeve you create an account, and your Maeve data is stored with it on our servers in the EU, so it is safe if you lose or change your phone. This policy has two main parts: what we need to do with your data to run Maeve, and what you can choose. Then it covers who else is involved, your rights under GDPR, and how to delete everything.

Who we are

Maeve is run by Raya s.r.o., a company registered in the Czech Republic (IČO 23377496, DIČ CZ23377496), with its registered office at K Horoměřicům 1182/53, 165 00 Praha 6 – Suchdol, entered in the Commercial Register kept by the Municipal Court in Prague, file C 426110. Raya s.r.o. is the data controller for the personal data described here. In this policy, “we” and “us” mean Raya s.r.o.

This policy covers the Maeve iPhone app, Maeve in the browser, and getmaeve.co. It does not cover services you connect to Maeve, such as Google, Microsoft, Apple Health or Oura, or the Apple and Google accounts you may sign in with, which have their own privacy policies.

No sale of data

We do not sell, trade or rent your personal data. We never give your health data (your cycle, check-ins, feelings, symptoms or notes) to advertisers, and never to the partners behind offers you may see. Maeve does not run ad networks in the app. If you choose to share something from Maeve with someone else, that is your decision and stays in your control.

PART 1 · WHAT IS NEEDED TO RUN MAEVE

This is the processing Maeve cannot work without. You agree to it when you create your account, and you cannot switch it off separately; if you no longer want it, delete your account.

Your account

You sign in to Maeve in one of three ways. There are no passwords.

• With your email: we send a six-digit code to your address and you type it into the app. We store your email address.
• With Apple: we ask Apple only for your email address. You can choose Apple's “Hide My Email”, and then we get a private relay address instead. Apple also gives us an identifier for your account with Maeve, and a token we keep only so that deleting your account also ends Maeve's access at Apple.
• With Google: Google gives us your email address, an identifier for your Google account and, depending on your Google settings, your name and profile picture link. We keep what Google sends with your account, but Maeve does not use your name or picture.

Your account also holds the record of your consents (what you agreed to, when, and to which version of this policy), your privacy choices (apart from usage stats, which each phone keeps for itself), and the technical details needed to keep you signed in, such as when you last signed in.

What we store with your account

When you are signed in, the app keeps a copy of your Maeve data on our servers and keeps it up to date as you use Maeve:

• Last period start date, cycle length, your cycle type, and the period starts you log or confirm from Apple Health
• Your daily check-ins: your energy (Low, Steady or High), the feelings Maeve asks about for the part of your cycle you are in, the hard-day signs you rate (irritable, anxious, low mood, overwhelmed, sleep, cravings), whether your period started, whether you were ill, and any extra symptoms you tick (such as cramps or headache)
• Which parts of your cycle you told us are usually hard, the kind of work you do, and your settings and preferences, including whether Smarter suggestions is on
• Your answers and notes in the app: whether a day fit, the days you marked quiet, how you sorted a day's meetings, your ratings of suggestions, and the title you chose for events Maeve fills in
• The few details from your calendar that Maeve keeps for later: an identifier for each event or series you made a choice about (such as “Can this move?”, “Prep before?” or the kind of meeting it is), which suggestions you acted on, and the titles and dates of workouts in your calendar (so Maeve can learn whether a hard workout on a hard day makes the next day worse)
• What Maeve forecast for past days, so it can check its forecasts against your check-ins, and which walkthroughs you have seen

Much of this is health data, so we store it only with your explicit consent, which the app asks for when you create your account.

What we use it for

• Your account: signing you in and keeping you signed in
• Sync and restore: if you lose your phone, change phones or use Maeve on more than one device, you sign in and your data is there
• Your forecasts and your pattern: Maeve works them out from your period dates and check-ins, and checks its forecasts for you against how your days actually went, so your own pattern gets more accurate
• Your plans and suggestions: worked out from your data and, if you connected one, your calendar
• Reading your calendar, read-only, if you connect one (see Your calendar)
• Sending your sign-in codes, answering you when you write to us, fixing problems you report, keeping Maeve secure and limiting abuse

Using your data beyond your own account, for example to improve Maeve for everyone or for research, is not part of this. Those are separate choices, described in Part 2, and they are off until you turn them on.

Where it is kept and who can see it

Your account and your Maeve data are stored by Supabase in its EU region (Frankfurt, Germany). They are encrypted in transit and at rest, and the database lets each account read and change only its own data. Only a few people at Maeve can access it, and only what their role needs, for example to fix a problem you reported.

Your calendar

If you connect Google Calendar, Maeve asks Google for read-only access (the “calendar.readonly” permission); Outlook, where offered, is read-only too. Your events go from Google or Microsoft straight to your phone. Maeve does not read the calendars stored on your iPhone itself.

Maeve never edits, moves or deletes your existing events, and with read-only access it cannot. When it suggests changing a meeting, for example freeing up one you marked as able to wait, it opens that meeting in your calendar app and any change is yours to make.

Maeve also never adds anything to your calendar on its own. When you choose “Hold in calendar”, “Hold as quiet”, “Add to calendar” or a step to protect a meeting, it fills in a new event and hands it to you: either a pre-filled Google Calendar or Outlook page (opened in Google's or Microsoft's own app or website), or your iPhone's own new-event screen, depending on your choice in Settings. You check it and save it yourself. If you don't save it, nothing is added.

The titles Maeve fills in are neutral, such as “Focus · get ahead”, “Quiet day” (an all-day note shown as free), “Break” or “Prep:” followed by the meeting's name. They never say anything about your cycle, symptoms or how you feel. Some titles and notes mention that the event came from Maeve. People who can see your calendar will see what you save, so change the title before saving if you want to. Maeve cannot remove these events later; you can delete them in your calendar like any other.

What is not uploaded

• Calendar events read from Google or Outlook. They go from Google or Microsoft straight to your phone and are held in memory while you use the app, apart from the few details listed above (and the day being planned, if you turn on Smarter suggestions)
• Apple Health and Oura records you import, until you confirm a period start, which is then saved like any period start you log
• Your doctor report (see Doctor report below)
• Oura sign-in tokens, your notification settings, how Maeve adds events on this phone, and your usage stats choice

When you sign out, Maeve removes your data from that phone, so the next person to use it cannot see it. It stays in your account until you delete the account. A calendar you connected stays connected to your account, so it works again when you sign in on any phone; to remove it, use Disconnect in Settings.

Other things we store on our servers

• Calendar credentials: your Google or Microsoft OAuth refresh token, encrypted at rest in Supabase (EU), kept with your account so your calendar works on any phone you sign in on. Used only to read your calendar events on your behalf. Your phone gets a short-lived access token from it and reads the events itself.
• If you sign in with Apple, a token from Apple (encrypted at rest, EU), used only to end Maeve's access at Apple when you delete your account.
• Your email address, but only if you joined the waitlist on getmaeve.co. It is stored with the date you signed up and which link brought you to the site (for example, which ad), and nothing else. We use it to tell you when there is a build to try.
• A daily count of Smarter-suggestion requests, if you turned them on (a date and a number, nothing else).

Doctor report

You can make a report of what you logged, day by day and by cycle, to show a doctor. It is made on your phone from your check-ins and period dates (which are stored with your account, as above). The report itself is not uploaded or sent anywhere unless you share it yourself, for example by email, Messages or AirDrop. Once you share it, the copy you sent is in the hands of the app and the people you sent it to, and we cannot recall it. The report records what you logged; it does not diagnose anything.

Notifications

The reminders and previews you can turn on (such as the daily check-in reminder, the Sunday preview and the early warning before hard days) are scheduled on your phone, not sent from our servers. Their text can appear on your lock screen, which can mention upcoming hard days. You can hide previews or turn notifications off in iPhone Settings or in Maeve's Settings.

Payments

Maeve's subscription is bought in the app through Apple's App Store. Apple handles the payment; we never see your card or bank details. Apple tells us, through RevenueCat, which plan you have, whether you are in a free trial, and when it started and renews or ends, so the app knows what to unlock. Your mobile trial start date is kept with your account so reinstalling does not restart it. We keep payment-confirmation records to unlock desktop access after payment. Your Mac signs into the same account and syncs the same check-ins. Payment-confirmation records are removed when your account is deleted. Apple's privacy policy (apple.com/legal/privacy) covers what Apple does with your payment.

PART 2 · WHAT YOU CAN CHOOSE

Everything in this part is optional. Saying no changes nothing else in Maeve: your forecast, plan and suggestions work the same.

Privacy choices

You find these in the app under Settings → Privacy choices. Each one is a separate switch, and you can change it at any time. Research, Help improve Maeve and Tips and offers are off until you turn them on. Maeve asks about usage stats once during setup, and they stay off until you say yes.

1. Usage stats

Counts which features get used, so we know what helps and what to fix. Sent to PostHog, hosted in the EU (PostHog Cloud EU, Frankfurt). It never includes your health data: no cycle, period dates, phase, check-ins, feelings, symptoms, doctor report, health imports or calendar content. If you allow it, this may be collected:

• App events, such as that you opened Maeve, finished setup, used a feature, or started a trial or a purchase, and which screens you open (the screen's name, never what is on it)
• Device information: model, operating system, app version, language and settings, and crash reports
• An app-specific ID created for usage stats, and your IP address, used only to work out your approximate country. We never collect your precise location
• On getmaeve.co: pages you visit and whether you joined the waitlist, with an ID stored in your browser, only if you tap “Allow” in the analytics bar

Usage stats are never linked to your Maeve account: we do not send your email address or account ID to PostHog. We do not use PostHog session recording, heatmaps or automatic click capture. Usage data is kept for no longer than 24 months.

2. Help improve Maeve

If you turn this on, we analyse de-identified health and usage data from your account to improve Maeve's forecasts and features for everyone, including training Maeve's own models. For example: how well forecasts match the days people check in as hard, or which kinds of suggestions people find useful.

Before analysis, we separate the data from your email, name and account ID and work with it under a random code. Data handled this way still counts as personal data under GDPR, so this policy and your rights still apply to it. What comes out of the analysis, such as statistics and model settings, is aggregated and cannot identify you.

Maeve's own models are ones we build for Maeve. The work is done by us, or by a provider working only for us under a data processing agreement who may not use the data for anything else. We do not give this data to AI companies to train their models. Data from your calendar, including the choices you make about events and the workouts Maeve reads from it, is never part of this analysis.

3. Research

If you turn this on, we may share de-identified data with vetted research partners, such as universities or health researchers, for studies on cycles, health and work. Shared data never includes your email, name, account ID, calendar or anything derived from your calendar, and is shared only in a form that cannot be traced back to you. Partners must sign a contract that limits use to the named study, forbids any attempt to identify people, and requires them to protect the data.

We share no data for research today and have no research partners. Before we share with the first one, we will name it and the study on this page, change the date at the top, and tell you in the app.

4. Tips and offers

If you turn this on, Maeve may send you personalised tips, news about features, and offers, including offers from partners we choose, based on how you use Maeve. They appear in the app or by email; every email has an unsubscribe link. Partners never receive your health data. A partner learns about you only if you take up its offer, for example by following its link, and then only what you give it.

Advertising measurement and cross-app tracking

No advertising measurement or attribution partner is active today. In future we may want to know which of our own ads bring people to Maeve, for example by telling an ad network such as Meta, TikTok, Google or Apple Search Ads that someone who saw our ad installed Maeve. Before we switch on any such partner, we will name it on this page, update the date at the top, and ask you in the app; on iPhone, it would only run if you also tap “Allow” in Apple's “Ask App Not to Track” prompt, which you can change at any time in iPhone Settings → Privacy & Security → Tracking.

Such partners would get technical and usage data only: device information, device identifiers (including your advertising identifier only if you allow tracking) and app events like install or trial started. Never your health data, calendar content or anything sent for Smarter suggestions, and never your email or account ID.

Smarter suggestions (optional, off by default)

If you turn on Smarter suggestions in the app (Settings → Suggestions), then each time Maeve plans a day your phone sends the following to Maeve's server, and the server asks Anthropic's Claude model to choose and explain suggestions:

• The day being planned, in full: your events' titles, descriptions, start and end times, how many people are invited, whether anyone is from outside your organisation (worked out on your phone; attendee email addresses are not sent), whether you organised the event, what kind of meeting you said it is, and whether you said it can move.
• For the rest of the week (the day before, if it hasn't passed, and the six days after, so Maeve can find time to prepare and a later slot for something that can wait): only the time and type of each event, such as “pitch”, “1:1” or “personal time”, with whether it is busy or repeats, your reply to the invitation, whether you organised it, whether anyone is from outside your organisation, and the choices you made for it (whether it can move, prep and travel time). Never titles or notes, and not how many people are invited. If Maeve can't tell what a meeting is but its title or notes mention preparation, that one word is sent instead (for example “slides”).
• Nothing from days that have already passed.
• Your energy check-in for that day (1–5), and yes/no “likely lower-energy day” estimates for the days ahead, worked out on your phone.
• Your workday settings and the kind of work you do, how much preparation you usually set for kinds of meetings (for example “pitch: 30 minutes”), and your recent “Useful / Not useful” ratings of suggestions.

Before anything reaches Anthropic, Maeve's server removes email addresses, links and phone numbers from event text. Anthropic receives only the day being planned: the details of the events a suggestion is about, your other events that day as busy times without titles, your energy check-in, the lower-energy estimate, your working hours and kind of work, and the options Maeve has already checked against your calendar. An option can be about a meeting on another day, such as preparing on Monday for Tuesday's pitch; that meeting appears only by its type and time. Your phone puts the real title back before showing you the suggestion.

Never sent: your cycle, period dates or phase; the feelings in your check-in, including the ones Maeve asks about for your current phase; the hard-day signs you rate; symptoms you tick; whether you were ill; or your doctor report. These still shape suggestions, worked out on your phone; they are stored with your account (see Part 1) but are never sent for Smarter suggestions. Turning this on asks for your explicit consent first, because an energy check-in and a lower-energy estimate are health-related. Maeve's server does not store the calendar content, the request or the suggestions, and does not log them; it keeps only a daily count of requests per account (a date and a number, nothing else), to keep use fair and to understand how much Smarter suggestions is used. Anthropic processes the request to produce the answer; under its commercial terms it does not use it to train models, and may keep it for a limited time for safety under its own policy (anthropic.com/legal/privacy). With Smarter suggestions off, suggestions are made by rules on your phone and nothing is sent.

Optional health connections

The iPhone app can read your Apple Health period records and sleep, read-only; it never adds or changes anything in Apple Health. You choose which categories to share in Apple’s permission screen. Imported records stay on your phone. A possible period start is saved in Maeve, and with your account, only after you confirm its date.

Oura sleep and recovery are being prepared. When enabled, Maeve will exchange Oura sign-in tokens through its server, without storing them there. Access and refresh tokens will be saved in the iPhone Keychain. Sleep and readiness records will be fetched directly from Oura to your phone and kept for the session. No Oura health records will be stored on Maeve’s server. The sign-in exchange uses a temporary hashed network address to limit abuse.

Disconnecting stops imports and clears imported session data. Confirmed period logs remain until you remove them. Apple Health sharing can be revoked in the Health app; Oura access can be revoked in your Oura account. Disconnect Oura before uninstalling Maeve to remove its locally stored credentials.

PART 3 · THE REST

Service providers

These companies work for us under data processing terms and may use the data only to provide their service to us:

• Supabase (EU, Frankfurt): stores your account and your Maeve data, calendar tokens, the Apple token, and waitlist email addresses if you gave us one
• Resend: sends your sign-in codes by email. It receives your email address and the code, nothing else
• Vercel: hosts getmaeve.co and Maeve's server; requests pass through it but it stores none of your health or calendar data
• Apple and Google: only if you choose to sign in with them; they confirm who you are and tell us your email address
• Apple App Store and RevenueCat: handle your subscription. RevenueCat receives Apple's purchase records and your Maeve account ID so purchases work across your devices, never your email or health data
• Google Calendar API and Microsoft Graph API: read-only access to your calendar events, fetched per session, if you connect a calendar. Events you save from a pre-filled link are saved by you, in Google or Outlook
• Anthropic: only if you turn on Smarter suggestions; processes the day being planned and the other details listed above to write suggestions
• PostHog (EU): usage stats, only if you allow them
• Advertising measurement partners: none today; each will be named here, and asked for in the app, before it is used

When we share data

Apart from the service providers above, we share personal data only:

• When you choose to: for example, saving an event Maeve filled in to a calendar other people can see, or sharing your doctor report or your data export
• With research partners, only if you turn on Research, only in de-identified form, and only partners named on this page first
• When the law requires it (see Requests from authorities below)
• If Raya s.r.o. or Maeve is sold or merged. The new owner would be bound by this policy, and we would tell you before anything changed

We may publish figures that cannot identify anyone, such as how many people use Maeve.

Legal basis (GDPR)

• Contract: your account, sign-in, sync and restore, forecasts, plans and suggestions, reading the calendar you connected and your subscription status are needed to give you the service you asked for
• Explicit consent for health data (GDPR Article 9(2)(a)): storing your cycle, check-ins, feelings, symptoms and notes with your account and using them to run Maeve for you, as described in Part 1. The app asks for this when you create your account, and Maeve cannot run without it. You withdraw it by deleting your account
• Separate explicit consent, one for each: Smarter suggestions, Help improve Maeve and Research. Each is asked for when you turn it on, and you withdraw it by turning it off
• Consent: usage stats, Tips and offers, cookies on getmaeve.co, waitlist emails, and any future advertising measurement and cross-app tracking. You withdraw it by changing the choice in the app or on the site, or by emailing us
• Legitimate interest: keeping Maeve secure, limiting abuse (such as rate limits on sign-in codes) and fixing errors. You can object to this; email us
• Legal obligation: payment records are kept for as long as tax and accounting law requires

Withdrawing consent stops the processing from then on. It does not undo what was done before, and aggregated results that can no longer identify you stay.

Data outside the EU

Your account and your Maeve data, calendar tokens and waitlist emails are stored in the EU. Anthropic (Smarter suggestions), Vercel (hosting), RevenueCat and Apple (subscriptions), our email provider (sign-in codes), Google (if you sign in with it) and, if you allow them, advertising measurement partners may process data in the United States. They do so under data processing terms that include the EU Standard Contractual Clauses, or under the EU–US Data Privacy Framework.

Requests from authorities

Because your Maeve data is stored with your account, a court or authority could ask us for it. We only respond to legally binding requests, check that each one is valid and as narrow as possible, push back on any that are not, disclose the minimum, and tell you unless the law forbids it. Data you have deleted, by deleting your account, is no longer ours to hand over.

Age

Maeve is not meant for anyone under 16. If we learn we hold data from someone younger, we delete it.

Your rights

Under GDPR you have the right to:

• Access the data we hold about you: Settings → Export my data shares your Maeve data as text. For anything else we hold, email us
• Correct it: change your cycle, check-ins and settings in the app, and the change reaches your account
• Delete it: Settings → Account → Delete account (see Deleting your account below)
• Change your mind: switch any of the Privacy choices or Smarter suggestions on or off in Settings, disconnect your calendar, turn off tracking in iPhone Settings, or change your analytics choice on getmaeve.co
• Object to processing based on legitimate interest, and ask us to restrict processing while a question is sorted out
• Data portability: your daily record can be exported from the app as a PDF report at any time, and Settings → Export my data gives you your data as machine-readable text
• Complain to a data protection authority: in the Czech Republic, the Office for Personal Data Protection (uoou.gov.cz), or the authority where you live

To exercise any of these rights, email us at hello@getmaeve.co. We will respond within one month, as GDPR requires.

Deleting your account

In the app, go to Settings → Account → Delete account. This deletes your account, your Maeve data, your consent records and your privacy choices from our live database straight away, disconnects your calendar (the Google sign-in is revoked), ends Maeve's access at Apple if you signed in with Apple, removes your Smarter-suggestion request counts, and clears Maeve from your phone. It cannot be undone. Copies in Supabase's encrypted backups are removed when those backups expire, under Supabase's backup retention; we never restore deleted accounts from them. Events already in your calendar are yours and stay where they are.

If you had Help improve Maeve or Research on, any data we still hold under a random code is deleted with your account. Aggregated results, statistics and models already built from de-identified data stay, because they can no longer identify you and cannot be traced back to you. The same goes for de-identified data already shared with a research partner.

You can also email hello@getmaeve.co and we will delete your account for you. Deleting the app from your phone does not delete your account, and does not cancel an App Store subscription.

Data retention

Your account and your Maeve data are kept until you delete your account. Signing out removes them from that phone only.

Smarter-suggestion request counts (a date and a number per account) are kept while your account exists, and deleted with it; nothing else from those requests is stored. OAuth tokens are deleted from our servers when you disconnect your calendar or delete your account; signing out does not delete them. The Apple token is deleted when you delete your account. If you stop using Maeve without doing either, you can revoke access in your Google or Microsoft account.

Early-access email addresses are kept until the beta ends or you ask us to remove yours, whichever comes first. Email hello@getmaeve.co and it is gone; you do not have to explain why.

Payment records are kept for as long as tax and accounting law requires, and for nothing else. Usage stats are kept for no longer than 24 months, and deleted sooner if you withdraw consent and ask us to.

De-identified, aggregated data that can no longer identify you may be kept after you delete your account.

Security

Your Maeve data is encrypted in transit and at rest, and the database lets each account read only its own data. Calendar tokens are encrypted at rest, and access to our systems is limited to the few people who run Maeve and to what their role needs. Sign-in uses one-time codes or Apple and Google, so there is no Maeve password to leak; on your phone, your session is kept in the iPhone Keychain. Your phone's passcode protects what is stored on it, so keep it to yourself. No system is perfectly secure; if a breach affected your data, we would tell you and the authorities as the law requires.

Changes to this policy

If we make material changes we will update the date at the top of this page and tell you in the app, or by email if we have your address, before the changes take effect. Where a change needs your consent, the app asks for it again. We will never start using data you already gave us in a new way without asking you first.

Contact

Raya s.r.o., K Horoměřicům 1182/53, 165 00 Praha 6 – Suchdol, Czech Republic. IČO 23377496. For any privacy questions or to use your rights: hello@getmaeve.co