Privacy policy

The short version

• We use your data to run OVOA for you. We don’t sell it or use it for ads.
• OVOA never records your day in the background. The microphone is on when you ask it to be: a Band press, a note, the record button, or Pro’s hands-free wake word, which is off until you turn it on.
• On the free plan, your spoken notes are written out on your iPhone, not by us.
• Transcripts of what you say are deleted after 14 days.
• You can delete your account from the app at any time.

What we collect, and why

Your account

Your email, your name if you give it, and your password, which we store only as a salted hash. Signed-in devices are tracked by a hashed token so you stay signed in. We also keep a few facts you tell OVOA during setup, like when you usually wake and sleep, so reminders and the morning brief land at the right time.

Health and activity

Heart rate from Apple Health and from the Band, the workouts found in it, and daily step counts, if you allow them. Heart rate samples are kept for 30 days. This is for your own picture of how you’re doing, not a medical record, and OVOA is not a medical device. If you use fall or SOS alerts, we keep those events and the emergency contacts you add, and message those contacts when an alert goes off.

Notes and what you say to OVOA

Notes you type or record, word for word, until you delete them. On the free plan, Band recordings are turned into text on your iPhone with Apple’s speech recognition, and only the text reaches us.

On Base and Pro, what you say to OVOA is sent to our speech-to-text provider to be written out, and OVOA keeps the words with a short title and summary so you can find them later. The words themselves are deleted after 14 days; the short summaries, and the people, promises and places OVOA noted from them, stay until you delete them. With Pro’s hands-free wake word turned on, audio from the microphone is streamed to that provider while it listens for you; only what you say to OVOA is kept.

Chats and memory

Your conversations with OVOA and the facts it saves to remember you (“Jake’s birthday is in March”), plus reminders, to-dos, alarms, routines and background jobs you set up. A log of what OVOA did for you (for example, “sent an email”) is kept for a year so you can check it.

Money

Only what you choose to tell OVOA: rough balances, paydays, bills and plans. OVOA does not connect to your bank.

Location

Off unless you turn on the timeline and allow “Always” location. Then your phone sends a point every few hundred metres; points and visits are kept for 14 days, and places you name (home, work) stay until you remove them.

Google, if you connect it

If you sign in or create your account with Google, we get only your name and email address from Google.

If you connect a Google account, OVOA can read and act on your Gmail, Calendar, Contacts, Tasks, Docs and Sheets when you ask it to. The access tokens are stored encrypted. Risky actions, like sending an email, wait for your OK unless you turn that off. You can disconnect at any time, and we then revoke the tokens. OVOA’s use of data from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

Your phone and the app

The phone’s time zone, which permissions are on, whether a Band is paired, and a push notification token. The app also uploads diagnostic logs so we can fix problems; they’re kept for 7 days. We count how much each person uses (replies, seconds of audio, searches) to run fair daily limits and understand costs; those counts are kept for 90 days.

Buying on ovoa.ai

Stripe handles payment. We never see your card number. We keep your email, name, plan and its status, and for a Band order the shipping address and phone number so we can send it. If you came through a partner’s link, we note their code so they can be paid.

Who helps us run OVOA

We share data only with the services that run OVOA for us, only what each one needs, and never for their own advertising:

• Cloudflare: hosting (the app and ovoa.ai), our databases, member records, and some AI models.
• AI model providers: currently Google (Gemini), DeepSeek and Zhipu AI (GLM). Your message and the context needed to answer it are sent to write OVOA’s reply.
• Deepgram: speech to text, and OVOA’s voice.
• Apple: TestFlight, Apple Health, on-device speech recognition and push notifications.
• Google: your Google account, only if you connect it. Google and DuckDuckGo: web searches OVOA runs to answer a question.
• Stripe: payments.

Some of these providers process data outside your country, including in the United States and China. We may also share data if the law requires it, or to protect someone from serious harm.

Deleting your data

Delete your account in the app, and your account and everything tied to it is removed right away. Diagnostic logs and usage counts expire on their own within 7 and 90 days. You can also delete single notes, transcripts and places, or email support@ovoa.ai and we’ll do it for you. To get a copy of your data, email us.

Payment records stay with Stripe as the law requires. Cancelling a plan doesn’t delete your account; deleting your account doesn’t cancel a plan bought on ovoa.ai, so cancel that from Manage billing first.

Children

OVOA is not meant for children under 13, and we don’t knowingly collect their data.

Changes

When this policy changes in a way that matters, we’ll say so in the app or by email before it takes effect. See also the terms.