Skip to main content

Privacy Policy

Last updated: February 2026

AVA does not collect, store, or transmit any patient data, client names, session notes, or personally identifiable information of any kind. Zero.

This Privacy Policy explains what information AVA collects, how it is used, and your rights regarding that information.

1. What AVA Does NOT Collect

AVA is designed with privacy as a core principle. The extension never accesses, stores, or transmits:

  • Patient names, diagnoses, or any Protected Health Information (PHI)
  • Client session notes or therapy documentation
  • Your ABAMatrix login credentials or session tokens
  • Any content visible on the ABAMatrix page beyond what is needed to complete the form fields
  • Browsing history or activity on any website other than ABAMatrix

2. What AVA Does Collect

AVA collects only the minimum data necessary to operate the licensing and payment system:

  • Email address: Collected at the time of purchase via Stripe, used to send your license key and service communications.
  • License key and plan status: Stored in our backend (Supabase) to verify your active subscription when you use AVA.
  • Device fingerprint (anonymous): A non-identifying technical identifier stored locally on your device and used solely to enforce the 2-device limit. This fingerprint cannot be linked back to any personal information.
  • Last active timestamp: Used to manage your active device sessions.

3. ABA Options Database

AVA uses a built-in database of clinical ABA options (antecedents, consequences, behaviors) to intelligently fill forms. When AVA encounters new options on ABAMatrix that are not yet in its database, it may send the text of those options (never patient data) to a classification service to categorize them correctly.

Only the raw option text (e.g., "Asked to follow a verbal direction") is ever transmitted — never any patient information, names, or session content.

4. Third-Party Services

AVA relies on the following third-party services, each with their own privacy policies:

5. Data Storage and Security

Your license data is stored securely in Supabase with access controls. Your device fingerprint is stored locally in chrome.storage.local on your own device and is never shared with third parties. We do not sell, rent, or share your personal information with any third parties for marketing purposes.

6. HIPAA Notice

AVA is a productivity tool, not a covered entity or business associate under HIPAA. Because AVA does not access, process, or store any Protected Health Information (PHI), HIPAA does not apply to AVA's operation. You remain responsible for ensuring that your use of ABAMatrix complies with HIPAA and your organization's policies.

7. Your Rights

You have the right to:

  • Request a copy of the personal data we hold about you (email and license status).
  • Request deletion of your account and associated data.
  • Opt out of non-essential communications at any time.

To exercise any of these rights, contact us at avanoreply@yahoo.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users by email before significant changes take effect. Continued use of AVA after the effective date constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests: avanoreply@yahoo.com