How we keep your data safe
You share real things here, about your kids, your partner, the moments that hurt. The least we can do is be specific about what happens to those words after you send them.
What Avani is, and what it is not
- Avani is a coaching tool for stressed parents. It reflects what is happening, offers one concrete next step, and gives words you can say to your child.
- Avani is not a therapist, not a medical provider, and not a substitute for clinical care.
- Avani will not diagnose, prescribe, or give legal or financial advice. When a conversation heads there, the coach steers back to what is happening for you and your child right now.
- When a message signals imminent danger, Avani surfaces crisis resources at the top of the reply. It never tries to handle a crisis alone.
How your data is protected
Encrypted in transit and at rest
Your messages are scrambled while they travel to us and while they sit in our database. Technical detail: all client-to-server traffic is TLS 1.2+ with HSTS enforced; data at rest is encrypted with AES-256 inside our managed Postgres database and on automated backups.
Never used to train AI
What you share is never used to teach any AI model. Our agreements with Anthropic opt out of training on customer data and prohibit retention of inputs or outputs for model improvement. Where supported, provider-side zero-data-retention controls are enabled. We retain only short, redacted summaries you can view and delete from your privacy settings.
Least-privilege access
Only a small number of approved engineers can ever look at production data, and only for a real reason such as fixing a bug or responding to abuse. Access is gated by SSO and hardware-backed 2FA, scoped to role, time-bound, and audit-logged.
How safety works on every turn
Every message you send and every reply you receive passes through a layered pipeline. Each layer is independent, so a single failure cannot let an unsafe turn through: signed-in authentication and per-user rate limits; an input check that scans for crisis cues and masks email and US phone numbers before the model sees them; per-turn token budgets, per-user daily caps, and a global kill switch; admin-curated guidance the coach paraphrases rather than fabricates; an output check for forbidden patterns; and full audit logging of every guard trip and configuration change.
Controls you have as a user
- Delete a single conversation, your stored summaries, or your entire account from your privacy settings. Deletion propagates to our sub-processors within 30 days.
- Email hello@askavani.com and we will send you a portable export of the data we hold about you, free of charge.
Our sub-processors
A sub-processor is a vendor that handles data on our behalf. We keep this list short on purpose. Each is bound by a Data Processing Agreement that requires them to protect your data with our standards and use it only to deliver the service.
- Supabase: database, authentication, and edge-function hosting.
- Anthropic (Claude): powers the conversational responses you receive. Anthropic does not train on this data.
- Stripe: subscription billing and payment processing. Card numbers never touch our servers.
- Vercel: static site and application hosting.
- PostHog: privacy-aware product analytics. Pseudonymous events only, no conversation content.
For the legal text covering CCPA, CPRA, GDPR, and COPPA, see the privacy policy. Questions? Write to hello@askavani.com.