What HEVAH keeps, who can see it, and how you take it with you or erase it. Written so you can actually read it.
Effective October 12, 2026. HEVAH is operated by Kage Solutions LLC, an Arizona company.
The short version. Your conversations are sealed to your seat. The person who gave you your key can see that your seat exists and how many messages it has, never a word of what you said. Nothing is sold, nothing is used for ads. You can read everything she carries about you, remove any line, download all of it, or erase all of it, any time, from the menu.
What HEVAH is
HEVAH is an AI companion. She is software, not a person, and the app tells you so when you open it. She is for adults, 18 and over. She is not a therapist, a doctor, a lawyer or a financial adviser, and she does not pretend to be. If you are in crisis, call or text 988 in the US, or your local emergency number.
What we keep
Your name and pronouns, as they were set when your key was made, and anything you change them to.
Your conversation: what you write to her and what she writes back. We keep the most recent 2,000 messages for your seat.
What she carries about you: short memory lines she distills from your conversations now and then (things that are known for sure, things true right now, things still open), each dated. You can see every one of them in the menu under "What I carry about you" and let any of them go.
Daily check-ins, only if you turn them on: the hour you picked, your timezone, and the push subscription your phone gives us so her message can reach you. Turn check-ins off and the subscription is deleted.
A usage count: how many messages you sent today, for the daily limit.
A crisis record: if a conversation triggers her crisis response, we keep when it happened and how serious it was judged, as levels and timestamps only, never the words.
An events log that records that something happened (a key was used, a message was sent, an erase completed). It never contains what was said.
A session cookie so you stay signed in, for up to 180 days. Your IP address is checked briefly at the door to limit abuse; it is not stored with your seat.
What we do not do
We do not read your conversations. The seal is built into the code: no admin screen returns a word of any user's conversation or memory.
We do not sell or share your information for marketing, and we do not run ads.
We do not track you across other websites or apps.
We do not record audio. HEVAH is text.
We do not knowingly keep information about anyone under 18. If you believe a minor has a seat, write to us and it will be erased.
Who touches your data to make her work
HEVAH runs on a small number of services. Each sees only what it needs to do its job:
Anthropic generates her replies. For each reply, your recent messages and her memory lines for you are sent to Anthropic's API. If their service is unavailable, OpenAI's API may be used the same way. Under both companies' business API terms, data sent this way is not used to train their models.
Upstash stores your seat's data, encrypted in transit, under keys that belong only to your seat.
Replit hosts the service, in the United States.
Sentry receives error reports when something breaks. Those reports carry technical details, never your words.
Your phone's push service (Apple, Google or Mozilla, depending on your device) carries her daily check-in to your screen, if you turned check-ins on. The text of that check-in passes through them.
Stripe handles payment when billing is on. We never see your card number.
If a conversation turns serious
If what you write suggests you may be in danger, HEVAH gives you the 988 Suicide & Crisis Lifeline in her reply and stays with you. The operator may receive an alert that a crisis response happened on a seat, with no words from your conversation, so that a human knows the system did its job. Nobody is notified on your behalf and nobody is contacted for you; that choice stays yours.
How long we keep it, and how you end it
See it: Menu, then "What I carry about you".
Correct it: tell her, or let a line go from that same screen.
Take it with you: Menu, then "Download everything I've shared". You get your whole conversation and memory as a file.
Erase it: Menu, then "Erase everything, permanently". This deletes your conversation, her memory of you, your settings, your usage count, the crisis record and any check-in devices. The app only tells you it is done after it has read the storage back and found nothing left. If that read-back fails, it tells you that instead.
We do not keep separate backups of conversations. Our database provider maintains its own short-lived redundancy for reliability, governed by its retention schedule. The events log (which holds no words) is kept for operating the service.
Security
Everything travels over HTTPS. Your key works once and then dies. Sessions are signed cookies the browser cannot read from scripts. Data is stored under per-seat keys, and the door is rate-limited against abuse. No system is perfect; if we ever learn that your data was exposed, we will tell you plainly and promptly.
Your rights
Wherever you live, you can see, correct, export and erase your data using the menu, with no request form and no waiting. If you are a California resident, you also have the rights to know what we hold, to delete it, to correct it, and not to be treated differently for exercising those rights; we do not sell or share personal information as those words are defined in California law. If you cannot reach the menu, email us and a human will do it for you.
Changes
If this page changes, the date at the top changes with it, and anything that matters to you will be said in the app, not buried here.
Contact
Kage Solutions LLC, Arizona, United States. Email: privacy@hevah.ai.