Privacy Policy

This Privacy Policy explains how [Company Legal Name] ("Ovea", "we", "us") collects, uses, shares and protects your personal information when you use our website, chat assistant and related services (the "Service"). By using Ovea, you agree to the practices described here.

Ovea supports women through perimenopause and menopause. Because the Service involves information about your health, we treat your data with extra care, as described below.

1. Information we collect

Information you give us

• Account & contact details — name, email address, phone number and the messaging handle you chat from (e.g. iMessage/WhatsApp).
• Health & wellbeing information — symptoms, sleep, mood, cycle, lifestyle, supplements and anything else you choose to share with the assistant.
• Payment information — processed by our payment provider; we receive limited billing details (e.g. last four digits, billing country) but never your full card number.
• Support & communications — messages you send us.

Information collected automatically

• Usage data — pages visited, features used, time and date of activity.
• Device & technical data — IP address, browser, device type, operating system.
• Cookies and similar technologies — see "Cookies" below.

2. How we use your information

• Provide, personalise and improve the Service, including building and adjusting your plan.
• Respond to your messages and provide support.
• Process payments and manage your subscription.
• Keep the Service secure and prevent fraud or abuse.
• Send service-related and, where permitted, marketing communications (you can opt out at any time).
• Comply with legal obligations.

3. Health information

Information about your symptoms and health is sensitive ("special category") data. We only process it to provide the Service to you and, where required by law, on the basis of your explicit consent. You can withdraw consent and request deletion at any time (see "Your rights"). Ovea is a wellness assistant and is not a healthcare provider; see our Terms of Service for the full medical disclaimer.

4. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you; your consent (for health data and marketing); our legitimate interests (to operate, secure and improve the Service); and compliance with legal obligations.

5. How we share information

We do not sell your personal information. We share it only with:

• Service providers who help us run Ovea (hosting, analytics, customer support, email, AI infrastructure), under contracts that limit their use of your data.
• Messaging platforms (e.g. Apple iMessage, WhatsApp) used to deliver the conversation; their handling of messages is governed by their own privacy policies.
• Payment processors to take payment securely.
• Legal & safety — where required by law, or to protect the rights, safety and property of you, us or others.
• Business transfers — in connection with a merger, acquisition or sale of assets, with notice to you.

6. Cookies and tracking

We use necessary cookies to run the site and, with your consent where required, analytics cookies to understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the Service, then for as long as necessary to meet legal, accounting or reporting requirements. You can ask us to delete your data at any time.

8. Security

We use technical and organisational measures — including encryption in transit and access controls — to protect your information. No method of transmission or storage is completely secure, but we work hard to safeguard your data.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict or object to the processing of your personal information, and to withdraw consent. If you are in California, you have the right to know, delete and opt out of any "sale" or "sharing" of personal information (we do not sell or share it for cross-context advertising). To exercise any right, contact us at [support email]. We will not discriminate against you for exercising your rights.

10. International transfers

We may process and store information in countries other than your own. Where we transfer data internationally, we use appropriate safeguards (such as Standard Contractual Clauses) as required by law.

11. Children's privacy

Ovea is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes will be communicated where appropriate.

13. Contact us

Questions about this policy or your data? Contact [Company Legal Name], [registered address], email [support email].