Privacy policy

The short version

Your data is yours. It is stored on your device and, only if you choose to save an account, in a backup copy on our server. We do not show ads, we do not sell your data, and we do not share it with advertisers.

If you link with a partner, a small part of your data is stored in a hosted database so that your partner can see only what you allow.

Who is responsible

The person responsible for your data (the controller) is Nicolas Erni, Chemin de la Crête 9, 1934 Bruson, Switzerland. For any privacy question or request, write to contact@infoproduit.io.

What we collect

Information you give us in the app: your first name, your age confirmation (18+), the dates of your periods and your cycle length, daily check-ins (mood, energy, stress), symptoms you choose to log, your habits and when you complete them, your journal entries, and your weight if you choose to enter it.

If you link with a partner: the partner's name, email address and phone number, and a shared snapshot made of your current cycle phase and, only if you allow it, your mood.

Anonymous usage statistics: which screens are opened and which plan is chosen. No names, no answers, no scores. We use PostHog, hosted in the EU, without cookies, and we do not store your IP address.

Optional screen recordings: only if you tap "Allow" on the page before the audit. They cover only the last steps (from that page to the price). All text is hidden and your answers and the audit questions are never recorded. You can turn them off at any time in Profile.

If you save an account: your email address, and a backup copy of your app data (everything described in this section, including your partner link details) so you can find it again on another phone.

If you subscribe on iPhone or Android: your subscription status (plan, dates, renewal), received from Apple or Google through RevenueCat with a random identifier, or your account identifier if you saved an account. We never receive your card details, and no health data is ever sent to RevenueCat.

We do not use advertising tools, we do not track you across other apps or websites, and we do not collect your location.

Health data and your consent

Cycle dates, symptoms, mood and weight are health data. Swiss data protection law (FADP) and the GDPR classify them as sensitive data that need extra care.

We only use it with your explicit consent, which you give in the app. You can withdraw it at any time. When you withdraw, we stop using your data and you can delete it.

If you save an account, a copy of this health data is stored in your account. You consent to this by choosing to save your account, and you can withdraw it by deleting your account in Profile.

For other information, such as your partner link and subscription, our legal basis is that we need it to provide the service you asked for.

Where your data is stored

Your cycle, check-ins, symptoms, habits, journal and weight are stored on your device. If you delete the app or clear its data, they are gone and we cannot recover them, unless you saved an account.

If you choose to save an account, a copy of your app data leaves your phone. It is stored in your account at our sign-in service (Supabase), sent over an encrypted connection, and updated automatically a few seconds after each change. It is not shared with your partner. Access to the database is limited to the people who run Ova. You can log out or delete the backup at any time in Profile.

The couple link uses a database hosted by Supabase in the European Union. It holds the link between you and your partner, the partner contact details above, and the shared snapshot.

Your control over what your partner sees

Your partner never sees your journal, symptoms, weight or check-in details. Your partner sees only the shared snapshot: your current phase and, if you switch it on, your mood.

You can change what is shared, pause sharing or end the link at any time. When you end it, the shared snapshot is removed from the hosted database.

Who we share data with

We do not sell your data, we do not rent it, and we do not use it for advertising.

Our only service providers are Supabase (account backup and couple link, EU), the service that sends your sign-in code by email, PostHog (anonymous usage statistics, EU), RevenueCat (subscription status) and Apple or Google (store billing). They process data only to provide their service.

How long we keep it

Data on your device stays until you delete it or remove the app. Couple-link data stays while the link is active and is deleted when you end the link or delete your data. Simple backups at our host may take a short time to clear after that.

Your account (email address and backup) stays until you delete it. In Profile > Account backup > Delete my account, your account, email address and backup are erased from our server straight away. You can also ask us at contact@infoproduit.io: we do it within 30 days.

Your rights

You can ask to see, correct, export, delete or limit the use of your data, and object to its use. You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU or the UK, to your local data protection authority.

In Profile you can export your data, delete it, and delete your account. All of this works at any time. For anything else, write to contact@infoproduit.io.

Security

Data on your device is protected by your phone's own security, so use a screen lock. Data sent to the couple-link database travels over an encrypted connection and access is limited by rules so that each person only reaches their own link. No system is perfectly secure, and we will tell you and the authorities if a breach affects you, as the law requires.

Children

Ova is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has used Ova, write to us and we will delete the data.

Transfers abroad

We keep data in the EU wherever we can. Some providers (RevenueCat, Apple, Google) may process data in the United States. In that case we rely on legal safeguards such as standard contractual clauses or the Data Privacy Framework.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app and ask for your consent again where the law requires it.