Privacy Policy

Who we are

Ovylia ("we", "us") provides the Ovylia web application. You can reach us about anything on this page at privacy@ovylia.app.

What we collect

Account details: your email address, and your name or profile picture if you sign in with Google.

A phone number, if you choose to add one in settings for reminders.

Notification details: if you turn on push notifications, we store the browser or device notification registration and your reminder preferences, so reminders can be sent. Turning notifications off removes that registration.

Content you add: medications, appointments, monitoring records, tests, visit summaries, free text notes and any files or PDFs you upload.

Basic technical data needed to run the service, such as log and error information.

We do not ask for, and you should not upload, information about anyone other than yourself.

Why we use it

To show your dashboard, calendar, medications, monitoring and tests.

To let Ovylia's assistant read the text or files you submit and turn them into structured entries, and to answer your questions about your own saved information. This processing is done by an AI provider on our behalf and only on the content you send.

To keep your account secure and to fix problems with the service.

We do not sell your information and we do not use it for advertising.

Where it is stored

Your data is stored in our managed cloud database. Each record is tied to your account, and database access rules are configured so that one account cannot read another account's rows.

A partner never gets access automatically: access exists only if you create a partner access link and share it, it is read-only, and you can delete the link at any time from settings to remove their access.

Data is encrypted in transit over HTTPS and encrypted at rest by our hosting provider.

Services we rely on

Hosting, database and authentication: our cloud infrastructure provider.

Sign-in with Google: Google, if you choose that option.

Payments and subscriptions are processed by Polar. Ovylia receives only the subscription and billing status needed to manage your access, such as the plan state, renewal date and billed amount. We do not store your full payment card details.

AI processing of the text and files you submit: our AI model provider.

Calendar export or connection: Google Calendar, only if you choose to use it.

Keeping and deleting your data

We keep your information for as long as your account exists. You can delete individual medications, tests, monitoring records and appointments at any time from inside the app.

If you want your whole account and all its data deleted, write to privacy@ovylia.app and we will remove it.

Google Calendar data

Connecting Google Calendar is optional. If you choose to connect it, Ovylia uses the Google Calendar permission you grant to read events from your primary Google Calendar and to create and update calendar events for the appointments you manage in Ovylia.

Existing Google Calendar events are read so that they can be displayed next to your treatment schedule inside Ovylia. These events are shown to you only, are not written to Ovylia's database, and are fetched again each time you open the calendar. When you sync, Ovylia creates or updates events it owns in your calendar; it does not modify or delete unrelated events.

The only Google-related information stored with your Ovylia account is the encrypted authorization token that keeps the connection working. Ovylia does not store Google calendar events, event identifiers or any other calendar content in its database. The identifier of each event Ovylia creates is derived from your own appointment at the moment you sync, which is how repeated syncing updates the same event instead of creating duplicates.

Google Calendar information is not sold, used for advertising or shared with third parties except as necessary to provide the calendar synchronization feature. Ovylia's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

You may disconnect Google Calendar at any time from Ovylia's calendar page, or revoke access from your Google Account settings. Disconnecting deletes the stored authorization token and prevents any further access or synchronization. Events Ovylia previously created stay in your Google Calendar until you delete them there, and you can delete the matching appointments inside Ovylia at any time. To request deletion of your account and all associated synchronization data, contact privacy@ovylia.app.

Google API Data and Limited Use

Ovylia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Calendar data accessed by Ovylia is used solely to provide calendar synchronization functionality requested by the user. Google Calendar data—including raw, aggregated, anonymized, or derived data—is not transferred to any artificial intelligence or machine-learning provider and is not used to develop, train, or improve generalized or foundational AI/ML models.

Ovylia uses AI services for separate application features, but those services do not receive data obtained from Google Workspace or Google Photos APIs.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by contacting privacy@ovylia.app. Depending on where you live, you may have additional rights under local privacy law.

Children

Ovylia is intended for adults and is not directed at children under 18.

Changes

If we change this policy we will update the date at the top of this page, and tell you in the app if the change is significant.