Privacy, without
the fine-print fog.

Who we are

Ovu.la provides cycle tracking and fertility insights. This policy explains how we process personal data when you use our website, apps, and services.

Data we collect

• Account data: email address and authentication identifiers.
• Optional analytics data, only after consent: general page or screen interactions and diagnostics.
• Optional technical data, only after consent: device model, OS version, app version, language, and approximate region.
• Health data you choose to log: cycle details, symptoms, and notes.

Why we use data

• Provide core tracking, predictions, and reports.
• Authenticate you and secure your account.
• Maintain and improve performance and reliability.
• Communicate service-related updates.

Legal bases

We process personal data under EU law based on:

• Contract performance: to provide the service you request.
• Consent: for sensitive health data and optional features.
• Legitimate interests: to secure and improve the service.
• Legal obligations: where required by law.

Special category health data

Health data is considered a special category under EU law. We only process it with your explicit consent or where required to deliver the service you request. You can withdraw consent without affecting prior processing.

Your rights

• Access, rectification, and deletion.
• Restriction and objection to processing.
• Data portability.
• Withdraw consent at any time.
• Right to lodge a complaint with a supervisory authority.

Data retention

We keep data while your account is active or until you request deletion, unless legal obligations require longer retention.

Processors and service providers

We use service providers to deliver the service, including Firebase (Google) for authentication, hosting, and data storage, and Paddle for web checkout and subscription billing. Optional Firebase Analytics is used only after consent. When you subscribe, Paddle processes payment and billing information under its own terms and privacy notice. Ovu.la receives limited billing information such as provider customer, subscription, transaction, and status identifiers; we do not receive your full payment card details.

We do not send cycle details, temperatures, symptoms, fertility observations, notes, or check-in contents to Paddle. Providers process information on our behalf or as independent controllers where their own terms apply, using contractual and technical safeguards.

International transfers

If data is processed outside the EEA, we rely on approved safeguards such as standard contractual clauses.

Security

We use encryption in transit, access controls, and least-privilege policies. No system is perfect, but we work to protect your data.

Cookies and tracking

We use necessary storage to run the site and remember your privacy choice. That choice is stored in a first-party cookie scoped to ovu.la so it can be recognized across the public site and app subdomain, with local browser storage retained for compatibility. Optional Firebase Analytics is disabled until you explicitly choose “Allow analytics” in the privacy banner. If enabled, it may process technical information such as browser, device, language, approximate region, page or screen type, and general interaction events to help us improve Ovu.la.

Our analytics events are deliberately limited to public page types and public calls to action. We do not send cycle details, temperatures, symptoms, notes, fertility observations, API keys, email addresses, Firebase UIDs, or other account data to Analytics. You can decline or withdraw optional analytics at any time through “Privacy choices”. Withdrawal stops future collection; it does not affect the lawfulness of collection that occurred before withdrawal.

Children

Ovu.la is not intended for children under the age of digital consent in their country. We do not knowingly collect data from children.

Contact

For privacy requests, email contact@ovu.la. We may verify your identity before fulfilling requests.

Changes

We may update this policy. Material changes will be communicated in-app or on this page.