Privacy Policy

Last updated: April 15, 2026

Avsha ("we", "our", or "us"), operated by Metivity, provides the Avsha mobile application and website. This Privacy Policy describes how we collect, use, store, and protect your information.

1. Information We Collect

Information You Provide

Collected Automatically

Local Storage

We use browser localStorage and IndexedDB (via localforage) to store your preferences, cached tour data, and offline content locally on your device. This data is not transmitted to our servers unless you are signed in and syncing your account. You can clear this data through your browser or app settings.

2. How We Use Your Information

We do not sell your personal data. We do not use your data for third-party advertising.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data based on:

4. Third-Party Services

We share data with the following service providers, solely for the purposes described in this policy. We maintain Data Processing Agreements with our providers as required by applicable data protection law.

5. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. When data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure adequate protection.

6. Data Storage & Security

Data is stored in Google Firebase with security rules restricting access to authenticated users. All data in transit is encrypted via HTTPS/TLS. We implement access controls, audit logging, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

8. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, and similar laws:

We respond to data requests within 30 days as required by applicable law. To exercise your rights, contact privacy@metivity.com.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information.

9. Children's Privacy

Avsha is not directed at children under 13. We do not knowingly collect personal data from children under 13. Users must confirm they are 13 or older during account setup. If we learn we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us personal data, please contact us at privacy@metivity.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects when the policy was last revised.

11. Contact

For privacy-related inquiries: privacy@metivity.com

General support: support@metivity.com

12. Account & Data Deletion

You can permanently delete your Avsha account and all associated data at any time:

Personal data is deleted within 30 days of the request. Transaction records may be retained for up to 7 years where required by tax and accounting law; anonymized, non-identifying usage statistics may be retained for analytics. Account deletion is permanent and cannot be undone.