Ovia Health Apps Privacy Policy

Introduction and scope

This Privacy Policy (“Policy”) describes how Ovuline, Inc., doing business as Ovia Health (“Ovia”) uses and shares personal data collected through the Ovia Fertility, Ovia Pregnancy and Ovia Fertility apps, health coaching services and surveys, and related social media and marketing activities (the “Services”).

For California residents whose personal data is governed by the California Consumer Privacy Act (“CCPA”), Ovia provides a supplementary CCPA Privacy Policy here. The CCPA Privacy Policy describes Ovia’s use and sharing of personal data of California residents using the format specifically required by the CCPA and its regulations.

For more on the scope of this Policy, click here.

Some parts of this Policy only apply to Ovia’s free consumer version of the apps, while others only apply to the enhanced paid versions provided as a benefit by employers, health plans and health care providers. In this Policy, we refer to these different versions as the “Consumer” and “Enterprise” versions of the Services. The “Enterprise” version includes both “Employer” and “Health Plan/Provider” versions. When there are differences in data processing between versions, we note the differences in this Policy and summarize them here.

This Policy does not apply to personal data collected outside the scope of the Services. For Ovia’s non-app Privacy Policy, which covers personal data collected by Ovia from job applicants and business contacts or through our corporate website, please see our Non-App Privacy Policy.

In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to consumers who use the Services. The term “indirect identifier” means personal data that does not identify you directly but that could be used to identify you. Your name and email address are direct identifiers; your IP address and the Advertising ID of your mobile device are indirect identifiers.

Personal Data We Collect

We collect the personal data that you choose to submit to us through the Ovia apps, coaching services and user surveys. We automatically collect your IP address, the Advertising ID of your mobile device, data about your mobile device such as device type and operating system, and data about your activity in the apps such as the articles and ads you view. To facilitate automatic collection of data about your device and activity, we store cookies and similar technologies on your device. Our advertisers, advertising networks and analytics providers may also store such technologies on your device. We explain this in more detail below in the section on Cookies and Tracking Technologies. If you login through Facebook, we automatically collect your email address. We make inferences about you based on the data you have provided. We may also collect personal data, such as name and email address, from third parties in connection with marketing by Ovia and other companies.

The data we collect is transferred to servers located in the US of our cloud computing provider, Amazon Web Services (AWS); some personal data may be transferred to other US-based vendors who provide services to Ovia, including the principal vendors listed here. If you are resident outside the US, your data may as a result become subject to US jurisdiction which may provide you with weaker data protection safeguards and rights than you would enjoy in your home jurisdiction. By accepting this Privacy Policy, using the Services or providing us with your personal data you acknowledge and consent to your personal data being transferred and/or processed as described in this Policy

More about this.

Information You Submit: When you register for the Services, we collect your first name, email address and some information to enable the tracking and personalization offered by our apps, such as date of birth, cycle type and length, date of last menstrual period, baby’s name or nickname, and expected due date. We also collect health tracking data you submit and the answers you give to questions within the app, such as Ovia Health Assessment and MyQ questions, about your lifestyle, health, fertility, pregnancy and parenting. If you synch a fitness tracker to the Ovia app or share data with Ovia through Google Fit or Apple Health, we collect the data you synch to Ovia. We collect any photos or video that you upload. If you participate in coaching services, we collect the information you give to our coaches, which may occur online or through recording of telephone coaching sessions for quality control and monitoring purposes. We collect your questions and answers in the Community section of the app and your answers to user surveys.

Information We Collect Automatically: If you log in through Facebook, we automatically collect your email address from Facebook. We automatically collect data from your device, including your IP address, the Advertising ID of your device, mobile device type and platform, and activity data such as pages and ads viewed and the order of those pages, amount of time spent on particular pages, and the date and time. When we send you email communications, we may use tracking technologies to track whether the email was opened and what links you clicked on.

Information We Infer: We attribute data to you based on information you have provided to us. For example, we may classify you on trimester of pregnancy (based on the expected due date you provide) or as an older expectant mother (based on the date of birth you provide).

Marketing Information: We may collect personal data, such as your name and email address, from third parties for marketing purposes.

Cookies and Tracking Technologies

Ovia, and its analytics and advertising technology partners, use cookies, tags, pixels and other tracking technologies (“tracking technologies”) that will be stored on your device, and also collect indirect identifiers such as your device AdID and IP address. These technologies are used to manage access to and use of the Services, recognize you and provide personalization and advertising, and develop analytic and demographic data to understand how people use the Services. Ovia also advertises the Ovia services on third party platforms, and this advertising may also involve the use of tracking technologies and indirect identifiers, for example to measure advertising effectiveness. Ovia, its analytics and advertising technology partners, and third party platforms and affiliate marketing networks, may use these tracking technologies and device data to track the ads shown to you and the links you click on and to create aggregated data about users. An ad network, third party platform or advertising technology partner may reuse that information to make inferences about your interests and to show you other advertising outside the Services. If you click on a link within an ad or sponsored content, you will be transmitting information about your device and your interaction with the ad or link to third party ad networks and affiliate marketing networks. We do not control the use of tracking technologies or your personal data by these third parties; the use of tracking technologies by these third parties is governed by each third party's specific privacy policy, not this one.

For more information, including information on opting out of third party personalized advertising, click here.

You can opt out of third party personalized advertising by going to the Settings menu of your Ovia app and selecting “Do Not Sell My Info” (for California users) or “Manage My Privacy Settings” (for non-US users).

For all other users to opt out of third party personalized advertising:

You can use your device’s “Limit Ad Tracking” settings. The Network Advertising Initiative provides useful information here.
You can download and use the AppChoices app at https://youradchoices.com/.

To opt out in your mobile browser, please visit https://optout.aboutads.info/#/ or https://optout.networkadvertising.org/# on each of your devices and browsers.

Where Do We Get Personal Data?

We collect most personal data about you directly from you, such as when you put data into our apps, synch data from Apple Health, Google Fit or a wearable device, answer our surveys or participate in promotions. We collect some personal data about you indirectly as follows:

if you log in through Facebook we collect your email address from Facebook.
if you use the Services through your Health Plan, Provider or Employer, your Health Plan, Provider or Employer (or their vendor) provides us with information about you, such as your name, email and health insurance plan. For some employers we may also help administer fertility and other employer health benefits, and your employer may provide us with personal data to allow us to perform those services.
We collect device data automatically from your devices.
For marketing purposes, we may collect personal data about you through social media or from third parties who provide marketing services to us.

How and Why Do We Use Personal Data?

We use your personal data to:

Provide the Services to you
Personalize the Services by showing you content relevant to your fertility, pregnancy and parenting journey - for example, if you provide us with personal data indicating you have a certain health condition, we may provide you with editorial content relevant to that condition
Show you relevant ads and sponsored content, only in the free Consumer version of the Services, using an advertising profile we create based on a limited selection of your personal data
Send you advertising and marketing communications, subject to your opt-in consent if you are a non-US user
Provide support and troubleshooting
Provide you with health coaching
Send you email communications about the Services
Provide security for the Services and obtain analytics about app and ad performance
Market, develop and improve our products and services
Conduct clinical and scientific research, subject to your informed consent where required by law
Create deidentified data and aggregated data and statistics

More about data usage.

Location Data. Periodically, we use your IP address to understand your location by country, state, city, zipcode and regional area. We do not continuously track your location while you are using Ovia apps.

Google Fit. Ovia’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Customer Support. If you contact us with a question, our support team may view your data to solve your problem. We may also ask you follow-up questions requiring additional information.

Health Coaching. If you participate in our health coaching services, your health coach and managers will access your personal data to help you. If you receive Ovia as a benefit from your health insurer or employer health plan, nurse care managers from your health plan (and your employer, if you opt-in to such data sharing) may also have access to your personal data.

Customer Surveys. We will, from time to time, contact Ovia users to obtain their input on how we can improve the Ovia products and services. We may also run surveys for our sponsors. We may collect personal data as part of survey responses. Participation in surveys is voluntary.

Product development. To improve and develop our products and services, we need to understand how our Services are used and analyze personal data. We may use personal data to provide different app experiences to different users in order to improve our Services.

Scientific research. At Ovia Health, we're looking for breakthroughs in reproductive health that will make people's lives better as they build their families. Ovia and its research partners use the personal data collected by Ovia to conduct research and development and develop scientific findings. For example, we might analyze our data to determine whether females aged 32-34 ovulate and become pregnant more quickly than females aged 38-40. We may vary your user experience in the Ovia apps as part of research projects. We may also offer users the opportunity to participate in research studies and surveys; data collected through studies and surveys is governed by this Privacy Policy.

Lawful Processing. We collect, use and otherwise process personal data as allowed under applicable law, including where based on one or more of the following:

The consent you provide to us at the point of collection of your personal information;
The performance of the contract we have with you;
The compliance of a legal obligation to which we are subject;
The performance of scientific research, preparation of statistics or public health activities;
The legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms. Ovia’s legitimate interests include the lawful conduct of its business.

Ovia treats your personal data as confidential, and only shares it in limited circumstances as described in this Policy. We share personal data with vendors and contractors who provide services to us; our principal vendors are listed here. If you invite others to view your account, we share the content of your account with them. To show you advertising and to advertise Ovia on third party platforms, we share indirect identifiers, such as the Advertising ID of your device, with advertising networks and platforms, and advertising technology providers. We also share indirect identifiers with companies that provide us data analytics services. The Services may contain links or interfaces to third party services; we may share personal data with third parties named in links and interfaces to fulfil the purpose of that interaction. If you click on a link in sponsored content, you are choosing to share indirect identifiers of your device and your interaction with the sponsored content with the sponsor and/or their affiliate marketing network.

If you opt in to share data with Apple Health to show Ovia data on your Apple Watch, we will send the data fields you select to Apple Health.

If you opt in to share data with an advertiser and sponsor, we will send the data fields you consent to share with the advertiser or sponsor.

If you receive Ovia as a benefit from your health plan or health care provider, Ovia is part of your care package and so we may share your personal data with your health plan or provider, or their business associates, under HIPAA. If you receive Ovia as a benefit from your employer, we do not share your health data with your employer unless you expressly opt-in for a specific purpose; this may occur, for example, if your employer offers you access to an in-house care management team. If this occurs, we limit the sharing as necessary for the specific purpose to which you have given consent. However, we may share personal data with your employer health plan and their business associates, and with employee benefits management vendors, consistent with HIPAA or other privacy laws. If you seek to register for Ovia premium services provided by a health plan or employer, we may share limited identity information (such as name and date of birth) with the health plan or employer to confirm your eligibility for premium benefits.

We use Google technology and services to obtain analytics and provide you with ads and tailored Ovia content. As a result of this, Google obtains and uses certain of your personal data as described here.

We use Facebook technology in our apps so that users can log on via Facebook. This allows Facebook to collect device information, and data relating to your engagement with our apps, whether or not you use the Facebook login feature. Facebook may use that data to personalize advertising to you, both on and off Facebook as described in the Facebook Data Policy.

More about sharing.

Consumer Users: Ovia does not share personal data that directly identifies you, such as your name or email address, with anyone except people you invite (described below), with vendors and contractors working for Ovia, who agree to keep the data confidential and use it only to provide the Services, and with any advertisers or sponsors for which you expressly opt-in to share personal data. We share indirect identifiers, such as the Advertising ID of your mobile device, with advertising networks and platforms, with third party platforms on which we advertise Ovia, and with companies that provide us with data analytics services. We do not share your personal data with the sponsors of sponsored content, but if you click on a link within sponsored content, you are sharing indirect identifiers of your device and your interaction with the sponsored content with the sponsor and/or their affiliate marketing network. Please see Cookies and Tracking Technologies above for more information on this subject.

People You Invite: The Ovia apps may allow you to invite others, such as your partner, to share your Ovia fertility, pregnancy and parenting journey. If you invite someone, they will be able to see all of your personal data in the Ovia apps. The people you invite are also able to add others to your account. If you add personal data or other content to an Ovia account, everyone who is following that Ovia account will see it.

Employer Users: If you receive Ovia as a benefit from your employer, we do not share your health data with your employer unless you expressly opt-in for a specific purpose; this may occur, for example, if your employer offers you access to an in-house care management team. We may share limited identity information (such as name and date of birth) with your employer to confirm your eligibility for Ovia benefits, and we may, consistent with HIPAA, share data with an employer health plan. Ovia may also share personal data with a third party business associate, including for care management and to allow you to receive health incentives and rewards. An incentive provider or care management provider may reach out to you as a result of this data sharing.

Health Plan and Health Care Provider Users: If you receive Ovia as a benefit through your health plan or health care provider, Ovia is part of your care package and your health plan or provider, or their business associates, receive your personal data as permitted under HIPAA and may reach out to you as a result of this data sharing. In this scenario, your health plan or health care provider is a covered entity under HIPAA and Ovia is a business associate.

Names and Images. If you include a profile image or name for yourself or a child in your care, this profile image and name will be shared in emails to you and everyone who has been invited to follow your account. The name and image will be visible even before the invitation is accepted. If you do not want the image or name to be shared, you should not enter a profile picture or a profile name.

Vendors and Contractors. Like most companies, Ovia uses vendors and contractors to help us provide the Services to you. We share personal data with these vendors and contractors, such as with the cloud computing provider that hosts Ovia’s apps and with vendors who provide our support ticketing and user survey systems. We enter into agreements with our service providers that require them to keep all personal data confidential and use it only to provide services to Ovia.

Advertisers and Advertising Partners (Consumer Version Only). To provide the Consumer version of the Services for free, we sell advertising. To do that, we share indirect identifiers such as the Advertising ID of your device and the advertising targeting criteria relevant to you with our advertising management platform. We also share the Advertising ID of your device with advertisers, advertising platforms and advertising technology providers to allow them to measure and track ad performance. Please see Cookies and Tracking Technologies above for more information on this. If you are a California resident, please see our CCPA Privacy Policy.

Data Analytics Providers. We share indirect identifiers, such as the Advertising ID of your device, with data analytics providers who help us understand how the Ovia apps are performing.

Refer a Friend. If you send a link to download the Ovia apps to a friend, your friend will receive an email from your email address. If you do not want your friends to know your email address or potentially that you are trying to conceive, are pregnant, or are a parent, you should not send such a link.

Third Party Websites or Apps: Some ads or links within the Services may interface with or take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of its advertisers or others. You should review the privacy policies of those sites and apps.

California Shine the Light Law (California Residents Only): Ovia does not disclose your personal data to third parties for the third parties’ direct marketing purposes unless you have expressly opted-in to the sharing. You may opt-out of such sharing by not enrolling for any promotions where an opt-in for data sharing is included.

What Are Your Choices?

We give you the right to:

Correct your data
Opt-out of marketing emails and push-notifications
Opt-out of third party personalized advertising
Delete your data and account
Obtain a copy of your data
Obtain a summary statement of Ovia’s data processing
Withdraw your consent to Ovia’s data processing by deleting your data

To correct your data, go to the “More” page of your Ovia app, where you can modify your profile and your health information. To exercise any other choices, go to the “Settings” page of your Ovia app, where you can choose options including “export my data”, “reset or delete my account”, “delete my account and data”, “how is my data used?” and “do not sell my info” (for California users) and “manage my privacy settings” for non-US users, to opt out of third party personalized advertising. US users outside California may follow the instructions under the heading “Cookies and Tracking Technologies” above to opt out of third party personalized advertising.

If you log into your Ovia account through Facebook, Facebook gives you the option to remove your Ovia account within Facebook. Please note that this action within Facebook does not delete your Ovia account, only your Facebook/Ovia account integration. If you want to delete your Ovia account, please request deletion by following the instructions outlined in this section above.

More about this.

You can also email Ovia at support@oviahealth.com to exercise these rights and any other data subject rights provided by law. Ovia may require you to verify your identity by entering your username and password in order to exercise these rights. If you opt-out of marketing emails and push notifications, you will still receive account management notices. To stop all emails and push notifications, you must delete your account and data. If we delete your data, we will not delete the posts or comments you have shared publicly on Ovia’s social media, community or chat features. If you have consented to participate in a research study and subsequently request deletion of your data, we may delay deletion until completion of the study. Even if you exercise your rights described above, Ovia may retain personal data as permitted by applicable law and to maintain proper business records.

Different Product Versions

This is a summary of the differences in processing of personal data between the Consumer, Employer and Health Plan/Provider versions of the Services.

Only the Consumer version has advertising. Please refer to the section on Cookies and Tracking Technologies above for a description of how indirect identifiers are collected, used and shared in the context of advertising.
If you are a Health Plan/Provider user, the Ovia Services are part of your care package. Your health data is Protected Health Information protected by HIPAA, the US medical information privacy law, and your personal health data will be shared by Ovia with your health plan or provider and/or their business associates.
If you are an Employer user, Ovia does not share your personal health data with your employer unless you expressly opt-in for a specific purpose. We may, in some circumstances consistent with HIPAA and other privacy laws, share personal data with your employer health plan, or with a third party business associate or vendor, and we may share limited identity information (such as name and date of birth) with your employer to verify your eligibility for Ovia benefits.
If you are a Consumer user, Ovia does not share your personal health data with your health plan or your employer, unless required to do so by law.

Data Security

Ovia protects personal data with security measures that are consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. Ovia’s Enterprise product has achieved certification to the Hitrust Common Security Framework. Our data is hosted by Amazon Web Services, which maintains multiple security certifications. We will notify you of security incidents as required by law.

Data Retention

If you are a Consumer user, we store your data for the period that your account is active and then for a further period in case you return to use the Services again. After this retention period ends, we will delete your data.

If you are an Enterprise user, Ovia may be required to delete your data after your Enterprise benefits end. We will notify you before your data is deleted and, where possible, offer you the opportunity to convert your account to a Consumer account and retain your data.

How to Contact Ovia with Comments or Complaints?

To contact Ovia to exercise your privacy choices, please see “What Are My Choices?” above.

Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at:

Data Protection Officer
Ovuline, Inc., dba Ovia Health
308 Congress Street, Floor 6,
Boston, MA 02210
legal@oviahealth.com

Data subjects located in the EEA may contact the Data Protection Officer at the address above or Ovia’s EU representative at the address below:

DP-Dock GmbH
Ovuline, Inc., doing business as Ovia Health
Ballindamm 39
20095 Hamburg, Germany
E-Mail: oviahealth@gdpr-rep.com

Data Subjects located in the UK may contact the Data Protection Officer at the address above or Ovia’s UK representative at the address below:

DP Data Protection Services UK Ltd.
Attn: Ovia Health
16 Great Queen Street
Covent Garden, London, WC2B 5AH
United Kingdom
Email: oviahealth@gdpr-rep.com

You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority.

Other Issues

Children: The Services are not available to children under 13 or who otherwise require parental consent under applicable law to use the Services or provide personal information to Ovia. Ovia does not collect personal data from children under 13. Ovia does not show advertising to any user under the age of 16. Parents and guardians may include personal data about their baby or child in their Ovia account; the parent or guardian is responsible for ensuring they have the legal right to do so.

Deidentified Data and Aggregated Data: Ovia may use personal data to create deidentified data for research and development purposes. Deidentified data is data that is no longer linked or linkable to you. We may provide deidentified data to our research partners, such as universities and medical research institutions for research, and to other businesses who have engaged us to provide research services on deidentified or aggregated data. Ovia may disclose or sell deidentified data derived from patient information (as defined by the California Consumer Privacy Act); if so, such patient information is deidentified in accordance with HIPAA safe harbor or expert determination deidentification requirements. We may use personal data to create aggregated analytic data and statistics, which we may use for Ovia’s internal purposes or share with third parties. Ovia may receive compensation for sharing deidentified or aggregate data.

Legal requirements: Ovia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties. Ovia may access, use and preserve data to comply with law, in anticipation of litigation, for security management and investigation, or to protect the rights or property of Ovia or third parties, even if the data is subject to a deletion request from you. We may also provide information to law enforcement or authorities to protect the safety of users of the apps or others.

Sale, merger, or change of ownership: If Ovia merges with another company, or its equity securities or all or a part of its assets are sold to a third party, your personal data may be transferred to the buyer or successor entity. We will notify all users of any transfer to a different legal entity.

Changes to this Policy

Ovia may modify this Policy from time to time by posting an updated version of the Policy. When we make material changes this Policy, we will notify users by email or in-app notification.

Last updated: December 21, 2021

The principal changes in this update were:

Describing Ovia’s new feature that will allow users to synch blood pressure data from Apple Health or Google Fit.
Describing how your deletion of your Ovia account integration on Facebook will only delete your Facebook/Ovia integration, not your actual Ovia account (for which you need to contact Ovia directly).

Privacy Notice for California Residents

Last updated: December 21, 2021

This Privacy Notice for California Residents supplements the information contained in Ovia Health's Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California ("consumers", “users” or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018, as amended (CCPA) and any terms defined in the CCPA have the same meaning when used in this notice.

Right to Know About Personal Information Collected, Disclosed, or Sold

Export Your Data - Data Portability

You have the right to request that Ovia provide you with a copy of the personal information Ovia has collected or obtained about you over the past 12 months. (For more on what we mean by “personal Information”, please see What is Personal Information?). To obtain this information:

go to the “Settings” page of your Ovia app
select the option “export my data”.

You will be required to re-enter your username and password to verify your identity in order to complete the data export.

You may also submit a request by email to support@oviahealth.com. Ovia will require you to provide identifying information to verify your identity. If you have an Ovia account, Ovia may require you to verify your identity by providing your username and password.

Right to Know Summary Statement

You have the right to request that Ovia disclose what personal information it collects, uses, discloses and sells about you. We will provide this information in a summary statement sent to you. (We also provide a general description of this in our Privacy Policy.)

To obtain this summary statement:

go to the “Settings” page of your Ovia app
select the option “How is my data used?”.

You will be required to re-enter your username and password to verify your identity in order to obtain the summary statement.

Once we receive and confirm your request, we will disclose to you:

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
Our business or commercial purpose for collecting or selling that personal information.
The categories of third parties with whom we share that personal information.
If we sold or disclosed your personal information for a business or commercial purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Personal Information We Collect - Our Notice at Collection

Ovia Health’s applications collect personal information. Listed below are the categories of personal information we may collect from you, and for each category of personal information, the business or commercial purposes for which it may be used. The reason we classify by these categories is because the CCPA requires it.

Category A: Identifiers.

This category includes personal information such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

Does Ovia Collect Personal Information in Category A?: Yes. For example, we collect your name, email address, and online identifiers such as the Advertising ID associated with your device. We collect your IP address.
How Does Ovia Use Category A Information?: We use Category A information to provide and improve the Ovia apps, to contact you with email notifications and marketing, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration. (For more information on what we mean by these terms, see here.)

Category B: Personal Information defined in California Personal Records Law.

This category includes personal information such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

Does Ovia Collect Personal Information in Category B?: Yes. For example, we collect your name, and we may collect health, medical information and health insurance information.
How Does Ovia Use Category B Information?: We use Category B information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Category C. Protected classification characteristics under California or federal law.

This includes personal information such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

Does Ovia Collect Personal Information in Category C?: Yes. For example, we may collect age, marital status, medical condition, gender identity, sexual orientation, race, and pregnancy and childbirth.
How Does Ovia Use Category C Information?: We use Category C information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Category D. Commercial information.

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Does Ovia Collect Personal Information in Category D?: Yes. For example, we may ask you about your income, if you are an alcohol or caffeine user, or whether you are a smoker. We also collect information about your interests based on articles you have viewed in the Ovia apps.
How Does Ovia Use Category D Information?: We use Category D information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Category E. Biometric information.

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

Does Ovia Collect Personal Information in Category E?: Yes. We do not collect biometric identifiers such as voiceprint or fingerprint. We do give you the opportunity to synch your fitness tracker or Apple Health/Google Fit data to Ovia, and if you do that, we collect the sleep, health and exercise data that you synch.
How Does Ovia Use Category E Information?: We use Category E information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, and for Ovia’s operational purposes, management and administration.

Category F. Internet or other similar network activity.

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Does Ovia Collect Personal Information in Category F?: Yes. For example, we collect information showing which articles in the Ovia apps you have read, which advertisements you have clicked on, and whether you opened email communications we sent.
How Does Ovia Use Personal Information in Category F?: We use Category F information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Category G. Geolocation data.

Physical location or movements.

Does Ovia Collect Personal Information in Category G?: Yes. Periodically, we use your IP address to understand your location by country, state, city, zipcode and regional area. We do not continuously track your location while you are using Ovia apps.
How Does Ovia Use Personal Information in Category G?: We use Category G information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Category H. Sensory Data.

Audio, electronic, visual, thermal, olfactory, or similar information.

Does Ovia Collect Personal Information in Category H?: Yes. For example, we allow you to upload photographs and video to the Ovia apps.
How Does Ovia Use Personal Information in Category H?: We use Category H information to provide and improve the Ovia apps and for Ovia’s operational purposes, management and administration.

Category I. Professional or employment-related information.

Current or past job history or performance evaluations.

Does Ovia Collect Personal Information in Category I?: Yes. For example, we may ask you whether or not you are employed or a stay-at-home mom. We do not collect job history or performance evaluations.
How Does Ovia Use Personal Information in Category I?: We use Category I information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Category J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

Does Ovia Collect Personal Information in Category J?: No.

Category K. Inferences drawn from other personal information.

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Does Ovia Collect Personal Information in Category K?: Yes. For example, we may calculate, based on the data you have provided to us, the trimester of your pregnancy or that certain medical issues may be relevant to you.
How Does Ovia Use Personal Information in Category K?: We use Category K information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.

Does Ovia Sell Your Personal Information?

In order to sell advertising in the Ovia apps and to advertise Ovia on advertising platforms, Ovia discloses or allows the collection of online identifiers associated with your mobile device, such as the Advertising ID number, by advertisers, advertising technology providers and ad networks and by third party platforms on which we advertise. Ovia allows such third parties to place cookies and similar technologies on your device in order to enable advertising. (Please refer to the "Cookies and Tracking Technologies" section of our main Privacy Policy for more information.) While these online identifiers and technologies cannot be used to readily identify you in the same way as your name or email, they could be used to identify you indirectly, and so they may constitute “personal information” under the CCPA. Ovia’s disclosure of this information for advertising might constitute a “sale” of personal information under the CCPA.

We may ask if you would like to share your personal information, such as an email address, with Ovia advertisers or sponsors. We only share your personal information with advertisers or sponsors if you expressly opt-in. Ovia may receive payments from the advertiser or sponsor for this sharing.

Except for the sharing described in the above paragraphs, Ovia does not sell your personal information.

Where is Ovia’s Generally-Applicable Privacy Policy?

Click here for our Privacy Policy.

Personal Information We Have Collected In the Past 12 Months

Ovia Health's applications have collected the following categories of consumer personal information within the last twelve (12) months. The reason we classify by these categories is because the CCPA requires it.

Category A: Identifiers

Has Ovia Collected Personal Information in Category A?: Yes. For example, we collected your name, email address, and online identifiers such as the Advertising ID associated with your device. We collected your IP address.
From Whom Did Ovia Collect This Information?: We collected device identifiers such as your device’s Advertising ID number and IP address automatically from your device. If you logged into Ovia via Facebook or Sign in with Apple, we may have collected your email address from Facebook or Apple. If you used the Ovia applications through your employer or insurer, your employer or insurer provided us with your identifying information, such as name, address, date of birth and health insurance information, so that we could authenticate you and provide you the Enterprise version of the Ovia apps. We collected email addresses from other companies through marketing activities. We collected all other information directly from you, when you entered answers into fields in the Ovia apps or answered questions in the apps.
What Was the Purpose of Collecting Category A Information?: We collected Category A information to provide and improve the Ovia apps, to contact you with email notifications and marketing, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration. (For more on what we mean by these terms, see here.)
With What Categories of Third Parties Does Ovia Share Category A Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to data analytics providers that provide us with aggregated data about how the Ovia applications perform, to vendors who provide email, support, marketing, survey and scheduling systems, to third party platforms on which we advertise, and to our advertising sales platform, advertising technology providers, advertising networks and advertisers who sell, administer, serve and purchase ads. If you click on a link in sponsored content, you are choosing to share indirect identifiers and your interaction with the sponsored content with the sponsor and/or their affiliate marketing network affiliate marketing network. If you expressly opt-in to share your name, email or other data with an advertiser or sponsor, we share the information you agree to share.

Category B: Personal Information defined in California Personal Records Law.

Has Ovia Collected Personal Information in Category B?: Yes. For example, we collected your name, and we may have collected health, medical information, health insurance information and employment information.
From Whom Did Ovia Collect This Information?: From you. However, if you were using the Ovia applications as an Enterprise user, your employer or insurer provided us with your identifying information, such as name, address, date of birth and health insurance information, so that we could authenticate you and provide you the Enterprise version of the Ovia apps. We also collected names and email addresses from other companies for marketing purposes.
What Was the Purpose of Collecting Category B Information?: We used Category B information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category B Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to vendors who provide email, support, marketing, survey and scheduling systems, and to our advertising sales platform. We did not disclose Category B information to advertisers, advertising technology providers, or advertising networks or platforms, but those third parties may have been able to attribute certain characteristics to you based on the context of advertising, and if you expressly opt-in to share your name, email or other data with an advertiser or sponsor, we share the information you agree to share.

Category C. Protected classification characteristics under California or federal law.

Has Ovia Collected Personal Information in Category C?: Yes. For example, we may have collected age, medical condition, marital status, gender identity, sexual orientation, race, and pregnancy and childbirth.
From Whom Did Ovia Collect This Information?: From you.
What Was the Purpose of Collecting Category C Information?: We used Category C information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category C Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to vendors who provide email, support, marketing, survey and scheduling systems, and to our advertising sales platform. We did not disclose Category C information to advertisers, advertising technology providers or advertising networks or platforms, but those third parties may have been able to attribute certain characteristics to you based on the context of advertising, and if you expressly opt-in to share your name, email or other data with an advertiser or sponsor, we share the information you agree to share.

Category D. Commercial information.

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Has Ovia Collected Personal Information in Category D?: Yes. For example, we may ask you about your income, if you are an alcohol or caffeine user, or whether you are a smoker. We also collect information about your interests based on articles you have viewed in the Ovia apps.
From Whom Did Ovia Collect This Information?: From you.
What Was the Purpose of Collecting Category D Information?: We used Category D information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category D Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to vendors who provide email, support, marketing, survey and scheduling systems, and to our advertising sales platform. We did not disclose Category D information to advertisers, advertising technology providers or advertising networks or platforms, but those third parties may have been able to attribute certain characteristics to you based on the context of advertising.

Category E. Biometric information.

Has Ovia Collected Personal Information in Category E?: Yes. We did not collect biometric identifiers such as voiceprint or fingerprint. We give you the opportunity to synch your fitness tracker or Apple Health/Google Fit data to Ovia, and if you did that, we collected the sleep, health or exercise data that you synched.
From Whom Did Ovia Collect This Information?: From the data source you connected to Ovia.
What Was the Purpose of Collecting Category E Information?: We used Category E information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category E Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, and to vendors who provide email, support, marketing, survey and scheduling systems.

Category F. Internet or other similar network activity.

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Has Ovia Collected Personal Information in Category F?: Yes. For example, we collected information showing which articles in the Ovia apps you have read, which advertisements you have clicked on and whether you have opened email communications from us.
From Whom Did Ovia Collect This Information?: From your device.
What Was the Purpose of Collecting Category F Information?: We used Category F information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category F Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to data analytics providers that provide us with aggregated data about how the Ovia applications perform, to vendors who provide email, support, marketing, survey and scheduling systems, to third party platforms on which we advertise, and to our advertising sales platform, advertising technology providers, advertising networks and advertisers who sell, administer, serve and purchase ads. If you click on a link in sponsored content, you are choosing to share indirect identifiers of your device and your interaction with the sponsored content with the sponsor and/or their affiliate marketing network.

Category G. Geolocation data.

Physical location or movements.

Has Ovia Collected Personal Information in Category G?: Yes. Periodically, we use your IP address to understand your location by country, state, city, zipcode and regional area. We do not continuously track your location while you are using Ovia apps.
From Whom Did Ovia Collect This Information?: From your device.
What Was the Purpose of Collecting Personal Information in Category G?: We used Category G information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising in the Ovia apps and email, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category G Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to vendors who provide email, support, marketing, survey and scheduling systems, and to our advertising sales platform. We did not disclose Category G information to advertisers, advertising technology providers or advertising networks or platforms, but those third parties may have been able to attribute certain characteristics to you based on the context of advertising or to determine your location based on the Category F information described above.

Category H. Sensory Data.

Audio, electronic, visual, thermal, olfactory, or similar information.

Has Ovia Collected Personal Information in Category H?: Yes. For example, we allow you to upload photographs and video to the Ovia apps.
From Whom Did Ovia Collect This Information?: From you.
What Was the Purpose of Collecting Personal Information in Category H?: We use Category H information to provide and improve the Ovia apps and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category H Information?: To the cloud computing vendor who hosts the Ovia apps.

Category I. Professional or employment-related information.

Current or past job history or performance evaluations.

Has Ovia Collected Personal Information in Category I?: Yes. For example, we may ask you whether or not you are employed or a stay-at-home mom. We did not collect job history or performance evaluations.
From Whom Did Ovia Collect This Information?: From you.
What Was the Purpose of Collecting Personal Information in Category I?: We used Category I information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising in the Ovia apps and email, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category I Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to vendors who provide email, support, marketing, survey and scheduling systems, and to our advertising sales platform. We did not disclose Category I information to advertisers, advertising technology providers or advertising networks or platforms, but those third parties may have been able to attribute certain characteristics to you based on the context of advertising.

Category J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Does Ovia Collect Personal Information in Category J?: No.

Category K. Inferences drawn from other personal information.

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Has Ovia Collected Personal Information in Category K?: Yes. For example, we may calculate, based on the data you have provided to us, the trimester of your pregnancy or that certain medical issues may be relevant to you.
From Whom Did Ovia Collect This Information?: This data was inferred by Ovia based on data you provided to us.
What Was the Purpose of Collecting Personal Information in Category K?: We used Category K information to provide and improve the Ovia apps, to conduct research related to fertility, pregnancy and parenting, to buy, sell, display and measure advertising in the Ovia apps and email, and for Ovia’s operational purposes, management and administration.
With What Categories of Third Parties Does Ovia Share Category K Information?: We disclosed this information to the cloud computing provider who hosts the Ovia applications, to vendors who provide email, support, marketing, survey and scheduling systems, and to our advertising sales platform. We did not disclose Category K information to advertisers, advertising technology providers or advertising networks or platforms, but those third parties may have been able to attribute certain characteristics to you based on the context of advertising.

Disclosure of Personal Information To Third Party Service Providers For Business Purposes

Ovia has disclosed personal information to third party service providers for business purposes in the past 12 months. The categories of personal information that Ovia disclosed to third parties for a business purpose in the past 12 months are set out below. The reason we classify by these categories is because the CCPA requires it.

For more information on why we disclose information to third parties for business purposes, please see the section “Personal Information We Have Collected in the Past 12 Months” above.

Category A: Identifiers.: This category includes personal information such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
Category B: Personal Information defined in California Personal Records Law.: This category includes personal information such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Category C. Protected classification characteristics under California or federal law.: This includes personal information such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Category D. Commercial information.: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Category E. Biometric information.: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Category F. Internet or other similar network activity.: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Category G. Geolocation data.: Physical location or movements.
Category H. Sensory Data.: Audio, electronic, visual, thermal, olfactory, or similar information.
Category I. Professional or employment-related information.: Current or past job history or performance evaluations.
Category K. Inferences drawn from other personal information.: Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sale of Personal Information

Ovia has not sold and will not sell your name, email address, telephone number or the detailed health information you provided to us when using the Services, unless you have expressly opted-in as described in the paragraph below.

We may sometimes ask if you would like to share limited personal information, such as an email address and the month and year of your pregnancy due date, with an Ovia advertiser or sponsor. We only share limited personal information with advertisers or sponsors if you expressly opt-in. This sharing constitutes a sale of personal information, as Ovia may receive payments from the advertiser or sponsor for this sharing.

In order to sell advertising in the Ovia apps and to advertise Ovia on advertising platforms, Ovia discloses or allows the collection of online identifiers associated with your mobile device such as the Advertising ID number by advertisers, advertising technology providers and ad networks and by third party platforms on which we advertise. Ovia allows such third parties to place cookies and similar technologies on your device in order to enable advertising. (Please refer to the "Cookies and Tracking Technologies" section of our main Privacy Policy for more information.) While these online identifiers and technologies cannot be used to readily identify you in the same way as your name or email, they could be used to identify you indirectly, and so they may constitute “personal information” under the CCPA. Ovia’s disclosure of this information for advertising might constitute a “sale” of personal information under the CCPA.

The categories of personal information that Ovia disclosed to third parties for a commercial purpose in the past 12 months, in connection with the advertising activities described in the above paragraphs, are set out below. Ovia’s advertisers, advertising technology providers and ad networks, and third party advertising platforms, receive only information in categories A and F, but they may have the ability to attribute information in other categories to you based on advertising purchased or sold. If you opted in to share personal information with an advertiser or sponsor, Ovia shared the Category A, B and C identifiers that you elected to share. The reason we classify by these categories is because the CCPA requires it.

Category A: Identifiers.: This category includes personal information such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
Category B: Personal Information defined in California Personal Records Law.: This category includes personal information such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Category C. Protected classification characteristics under California or federal law.: This includes personal information such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Category D. Commercial information.: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Category E. Biometric information.: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Category F. Internet or other similar network activity.: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Category G. Geolocation data.: Physical location or movements.
Category I. Professional or employment-related information.: Current or past job history or performance evaluations.
Category K. Inferences drawn from other personal information.: Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Personal Information of Minors Under 16 Years of Age

Ovia does not sell the personal information of minors under 16 years of age. Ovia automatically opts all users under 16 years of age out of advertising on the Ovia apps.

Right to Request Deletion of Personal Information

You have the right to request that Ovia delete any of your personal information that we collected or maintained. To delete your personal information:

go to the “Settings” page of your Ovia app
select the option “Reset or delete my account”
then select the option “Delete my account and data”.

To complete the deletion, we will require you to re-enter your username and password. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records.

We have the legal right to deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

If you have consented to participate in a research study and subsequently request deletion of your personal data, Ovia may delay deletion until the research study is completed.

Right to Opt-Out of Sale of Personal Information

You can opt out of the sharing of your personal information for third party personalized advertising.

For California users, you can opt out of third party personalized advertising by going to the Settings menu of your Ovia app and selecting “Do Not Sell My Info”. Non-US users can go to “Manage My Privacy Settings”.

For all other US users, to opt out:

You can use your device’s “Limit Ad Tracking” settings. The Network Advertising Initiative provides useful information here.
You can download and use the AppChoices app at https://youradchoices.com/.

To opt out in your mobile browser, please visit https://optout.aboutads.info/#/ or https://optout.networkadvertising.org/# on each of your devices and browsers.

You may still see non-personalized advertising after you opt-out. These opt outs operate on a per-device basis, so if you use multiple devices you will need to opt out on each device.

If you have previously opted in for us to share your personal information (such as your email address) with our advertising partners, you may opt-out of such sharing at any time by contacting us at legal@oviahealth.com or Legal Department, Ovia Health, 308 Congress Street, Floor 6, Boston, MA 02210.

Non-Discrimination

We have a legal obligation not to discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

Response Timing For Consumer Requests

If you make a request to exercise a consumer right, such as to obtain a data export or delete your data, we will respond within a reasonable timeframe. Many requests are processed automatically by the Ovia apps and so will be fulfilled almost immediately. If that is not practical, at a minimum we will acknowledge your request no later than 10 days after it is made, and will fulfill it within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.

If we cannot comply with a request, we will explain the reasons.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Authorized Agent

Under the CCPA, you have the right to appoint an authorized agent to exercise your consumer rights to data portability, data deletion and to obtain a summary statement of personal information collected and shared.

If you wish to exercise your rights by using an authorized agent, you must submit your request by email to support@oviahealth.com. You will need to establish that the agent has been duly authorized by you, either by sending us a Power of Attorney showing the appointment of the agent or by entering your username and password to confirm the appointment.

Contact Information

If you have any questions or comments about this notice, the ways in which Ovia Health collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at legal@oviahealth.com or Legal Department, Ovia Health, 308 Congress Street, Floor 6, Boston, MA 02210.

Changes to Our Privacy Notice

The date that this Policy was last updated was: December 21, 2021

Ovia Health reserves the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice in our apps and on our website and update the notice's last updated date. Your continued use of our apps following the posting of changes constitutes your acceptance of such changes.

More Information on How We Use Personal Information

In this Policy, the term “to provide and improve the Ovia apps” includes the following purposes:

To provide, support, and develop our applications, products, and services.
To create, maintain, customize, and secure your account with us.
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
To personalize your app experience and to deliver content and product and service offerings relevant to your interests.
To help maintain the safety, security, and integrity of our apps, products and services, databases and other technology assets, and business.
For testing, research, analysis, and product development.

In this Policy, the term “for Ovia’s operational management and administration” includes the following purposes:

Internal administration of Ovia by our finance, accounting and legal personnel.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ovia's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ovia about our users is among the assets transferred.

What is Personal Information?

Personal information under the CCPA is information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. Personal information includes online identifiers.

Personal information does not include:

Publicly available information from government records.
Deidentified or aggregated consumer information.
Information excluded from the CCPA's scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Ovia Health Apps Privacy Policy

Introduction and scope

Personal Data We Collect

Cookies and Tracking Technologies

Where Do We Get Personal Data?

How and Why Do We Use Personal Data?

When Do We Share Personal Data?

What Are Your Choices?

Different Product Versions

Data Security

Data Retention

How to Contact Ovia with Comments or Complaints?

Other Issues

Changes to this Policy

Privacy Notice for California Residents

Right to Know About Personal Information Collected, Disclosed, or Sold

Export Your Data - Data Portability

Right to Know Summary Statement

Personal Information We Collect - Our Notice at Collection

Category A: Identifiers.

Category B: Personal Information defined in California Personal Records Law.

Category C. Protected classification characteristics under California or federal law.

Category D. Commercial information.

Category E. Biometric information.

Category F. Internet or other similar network activity.

Category G. Geolocation data.

Category H. Sensory Data.

Category I. Professional or employment-related information.

Category J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Category K. Inferences drawn from other personal information.

Does Ovia Sell Your Personal Information?

Where is Ovia’s Generally-Applicable Privacy Policy?

Personal Information We Have Collected In the Past 12 Months

Category A: Identifiers

Category B: Personal Information defined in California Personal Records Law.

Category C. Protected classification characteristics under California or federal law.

Category D. Commercial information.

Category E. Biometric information.

Category F. Internet or other similar network activity.

Category G. Geolocation data.

Category H. Sensory Data.

Category I. Professional or employment-related information.

Category J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Category K. Inferences drawn from other personal information.

Disclosure of Personal Information To Third Party Service Providers For Business Purposes

Sale of Personal Information

Personal Information of Minors Under 16 Years of Age

Right to Request Deletion of Personal Information

Right to Opt-Out of Sale of Personal Information

Non-Discrimination

Response Timing For Consumer Requests

Authorized Agent

Contact Information

Changes to Our Privacy Notice

More Information on How We Use Personal Information

What is Personal Information?