Kelvy · Avokado Labs · avokadoapps@gmail.com
Effective 24 September 2026 · Last updated 24 September 2026
The short version
Kelvy keeps your sessions on your device. There is no Kelvy account, no Kelvy server holding your history, and no cloud backup. We do not run analytics, we do not show ads, and we never sell or share your data with data brokers.
Three services do see something, and only what they need: Apple (for Health, Sign in with Apple and payment), RevenueCat (to know whether you have an active subscription) and Google Firebase Remote Config (to deliver settings that change how the app behaves).
Kelvy (“the app”) is developed and operated by Avokado Labs (“we”, “us”), Republic of Türkiye. This policy explains what the app does with information when you use it. It applies to the Kelvy iPhone app and its Apple Watch app.
For the purposes of the EU/UK General Data Protection Regulation, we are the controller for the limited processing described below. Where the app processes information only on your device and we never receive it, we do not act as a controller of that information at all — we simply cannot see it.
Everything you log lives in a database inside the app’s own storage on your iPhone, and in a small shared container so the Apple Watch app can reach it. None of it is transmitted to us.
| Information | Why it exists |
|---|---|
| Sessions | Start time, duration, session type, water or air temperature, how you felt, and any note you write. |
| Session types | The cold and heat activities you keep, including ones you create yourself. |
| Protocols | Sequences of cold, heat and rest steps that you build. |
| Goals and streaks | Your weekly targets and the history used to count streaks. |
| Settings | Units, theme, countdown length, heart-rate alert thresholds, spoken cues. |
| Heart rate from a session | Recorded during a workout on Apple Watch and stored with that session. |
Deleting the app deletes all of it. We have no copy to delete for you, because we never had one.
If you allow it, Kelvy connects to Apple Health. Health access is optional; the app works without it.
Health data is read from and written to Apple’s HealthKit store on your device. It is never sent to us or to any third party. You can change or revoke these permissions at any time in the Health app, under Sharing → Apps. Revoking write access stops new sessions from being saved to Health; it does not remove what is already there.
Apple requires us to state this plainly, and we mean it: Kelvy does not use HealthKit data for advertising, marketing, or any use-based data mining, and does not disclose it to third parties for those purposes.
Signing in is optional and changes almost nothing. Kelvy does not have accounts, does not sync, and does not back anything up. The only thing signing in does today is let the app greet you by name.
When you sign in, Apple gives the app a user identifier, and — only if you choose to share them — your name and an email address, which may be Apple’s private relay address. All three are stored on your device only. They are not transmitted to us, and there is no server that knows you signed in.
You can sign out inside the app at any time. Apple does not give the name a second time, so signing out clears it for good. You can also revoke the app under Settings → your Apple Account → Sign in with Apple.
Kelvy Pro is sold as an auto-renewing subscription through the App Store. We never see your payment details. Apple handles the transaction and tells us nothing beyond whether a purchase succeeded.
To know whether your subscription is active — including on a new device when you tap Restore — the app uses RevenueCat, Inc. RevenueCat receives an anonymous identifier it generates for the installation, the App Store purchase receipt, and basic device and app information such as the app version, country and platform. It does not receive your name, your email, your Health data, or anything you log in the app.
RevenueCat’s privacy policy: revenuecat.com/privacy. Legal basis: performance of our contract with you (providing the paid features you bought).
Kelvy uses Google Firebase Remote Config to change certain settings without shipping a new version — for example which variant of a screen is shown. To do this, the Firebase SDK sends Google an installation identifier it generates, together with technical details such as app version, device model, operating system version, language and approximate country derived from the IP address.
Google Analytics for Firebase is switched off in this app. We do not collect usage events, screen views, or a profile of what you do in Kelvy. Remote Config carries settings to the app; it does not carry your activity back.
Firebase privacy information: firebase.google.com/support/privacy. Legal basis: our legitimate interest in operating and improving the app.
The Apple Watch app records sessions on the watch itself and hands them to your iPhone over Apple’s own device-to-device connection. Nothing in that exchange passes through us or the internet. A session that finishes while your phone is away stays on the watch until the phone confirms it has been saved.
If you allow notifications, Kelvy schedules them locally on your device — for example when a session reaches the target you set. There is no push server, and we cannot send you anything. You can turn notifications off in iOS Settings at any time.
You can export your full session history as a CSV file. The export is created on your device and goes wherever you send it using the standard iOS share sheet. It does not pass through us.
Your session history stays on your device until you delete a session or delete the app. There is nothing for us to retain.
RevenueCat keeps subscription records for as long as needed to provide the service and to meet tax and accounting obligations. Firebase keeps installation identifiers according to Google’s own retention rules, which you can read in the Firebase documentation linked above.
Deleting the app removes the local database, your settings, and any Apple ID details stored on the device. It does not delete what Kelvy already wrote into Apple Health — Health data belongs to you and lives in Apple’s store, so you delete it in the Health app. Deleting the app also does not cancel your subscription; cancel it in your Apple Account settings.
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to complain to a supervisory authority.
In practice, for almost everything Kelvy holds, you can exercise these rights yourself and immediately: the data is on your device, the app lets you edit and delete it, and CSV export gives you portability. For the limited information held by RevenueCat and Firebase, contact us and we will pass the request on.
If you are in California: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not process it for cross-context behavioural advertising.
Kelvy is not directed to children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect information from them. Cold water exposure carries real physical risk and the app is intended for adults.
If this policy changes, we will update the date at the top of this page. If a change materially affects how your information is handled, we will say so in the app before it takes effect.
Questions, requests, or anything that reads wrong here: avokadoapps@gmail.com.