Ovia Health by Labcorp Apps Privacy Policy
Ovia Health by Labcorp Apps Privacy Policy
- Apps Privacy Policy identity: how Ovia collects, uses and shares personal data through the Ovia Services Data Access & Collection
Introduction and scope
- Apps Privacy Policy identity: how Ovia collects, uses and shares personal data through the Ovia Services Data Access & Collection
This Ovia Health by Labcorp Apps Privacy Policy (“Policy”) describes how Ovuline, Inc., doing business as Ovia Health by Labcorp (“Ovia”) collects, uses and shares personal data collected through the Ovia apps, health coaching, surveys, and related social media and marketing activities (the “Services”). Ovia Health by Labcorp is a subsidiary of Labcorp, a global life-sciences leader.
- Apps Privacy Policy identity: how Ovia collects, uses and shares personal data through the Ovia Services Data Access & Collection
Some parts of this Policy only apply to Ovia’s free consumer version of the Services, while others only apply to the enhanced paid versions provided as a benefit by employers, health plans and health care providers. In this Policy, we refer to these different versions as the “Consumer” and “Ovia+” versions of the Services. To view the full version of this Policy, click “Full Privacy Policy” above; the “Notice of Collection” is a shorter version required for California law.
- Two versions of the Services: free Consumer and paid Ovia+ (employer, health plan, provider benefit), applied separately Account & Service Control
This Policy does not apply to personal data collected outside the scope of the Services. For Ovia’s non-app Privacy Policy, which covers personal data collected by Ovia from business contacts or through our corporate website, please see our Non-App Privacy Policy.
- Policy does not apply to personal data collected outside the Services; business contacts covered by the Non-App Policy Account & Service Control
“Personal data” means information about you that identifies you, like a name, telephone number or other bit of information that is used to tell us who you are. Personal data includes “direct identifiers” such as your email address and also “indirect identifiers” that could be used to identify you such as the IP address and the Advertising ID of your mobile device.
- “Personal data” defined: information that identifies you, including indirect identifiers such as IP address Data Access & Collection
Personal Data We Collect
- Collects identifiers: contact details, device IDs (IP address, AdID, IDFA); Ovia+ also employer and employee ID Data Access & Collection
We collect the following categories of personal data in connection with our Services:
- Collects identifiers: contact details, device IDs (IP address, AdID, IDFA); Ovia+ also employer and employee ID Data Access & Collection
Category Examples of Data We Collect In this Category
Identifiers Name, email address, street address, postal address, mobile phone number Device identifiers such as IP address, AdID, IDFA For Ovia+ members, employer ID, employee ID
- Collects identifiers: contact details, device IDs (IP address, AdID, IDFA); Ovia+ also employer and employee ID Data Access & Collection
General personal information including health information Date of birth, date of last period, due date, and other fertility, pregnancy, health, sex life and life circumstances information you input into the apps or discuss as part of health coaching services In the Parenting app, health and milestone information for your child For Ovia+ members, health insurance information
- Collects health data: fertility, pregnancy, sex-life and life-circumstance info in apps or coaching; child data Data Access & Collection
Legally protected classifications such as race, gender, disability or pregnancy status Race, gender, gender identity, age, ethnic group, nationality, sexual orientation, pregnancy status, disability, medical condition
- Collects protected classifications: race, gender, sexual orientation, pregnancy status, disability, medical condition Data Access & Collection
Biometric information Sleep, health and exercise data that you sync from a wearable device, AppleApple
Health or GoogleGoogle Health Connect to your Ovia account. Ovia does not collect biometric identifiers such as fingerprints or voiceprints.
- Treats synced wearable data as “biometric information”; states no biometric identifiers are collected Data Access & Collection
Internet and app activity information App usage, browsing history, email opens and views Device type, operating system, other device parameters
- Collects internet and app activity information and approximate geolocation (country, state, city, zipcode) Data Access & Collection
Geolocation Approximate location by country, state, city, zipcode and regional area
- Collects internet and app activity information and approximate geolocation (country, state, city, zipcode) Data Access & Collection
Audio and visual information Photos and videos that you upload to your Ovia account
- Collects photos and videos that the user uploads to their Ovia account Data Access & Collection
Professional and employment related Employment status, name of employer (for Ovia+ membership)
- Collects professional and employment-related data: employment status, and name of employer for Ovia+ membership Data Access & Collection
Inferences Pregnancy trimester, fertile window, health issues that may be relevant to you
- Derives inferences about the user: pregnancy trimester, fertile window, and health issues that may be relevant Inference & Profiling
Sensitive information racial or ethnic origin, health information, sex life and sexual orientation information
- Collects sensitive information: racial or ethnic origin, health information, sex life and sexual orientation information Data Access & Collection
Where Do We Get the Information We Collect?
- Where data comes from: direct input into the apps and Services, stored in Ovia’s cloud computing environment Data Access & Collection
Categories of Sources Examples of Our Use of These Sources
From direct input into our apps and Services We collect the data you input into Ovia apps and Services and store it in our cloud computing environment
- Where data comes from: direct input into the apps and Services, stored in Ovia’s cloud computing environment Data Access & Collection
From wearable devices, Apple Health and Google Health Connect If you sync a device, Apple Health or Google Health Connect with Ovia, we collect the data you choose to share Ovia’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
- Wearable/Apple Health/Google Health Connect sync collects only shared data; Google API Limited Use commitment Data Access & Collection
From our coaching services and communications We collect your communications with our care advocates, health coaches and in our Community feature
- Receives identity data (name, DOB, employee IDs) from Ovia+ customers to verify Ovia+ service eligibility Data Access & Collection
From our Ovia+ customers – employers, employer health plans, health insurers, providers To verify your eligibility for Ovia+ services, we receive identity information (such as name, date of birth, employee ID numbers) from your organization
- Receives identity data (name, DOB, employee IDs) from Ovia+ customers to verify eligibility for Ovia+ Data Access & Collection
From your mobile device or computer and through tracking technologies We automatically collect from your device information such as IP address and technical identifiers We also use cookies, tags, pixels and other tracking technologies to collect information about your interaction with content and the Services generally
- May receive email addresses and contact information from referrals, co-promotions and list purchases Data Access & Collection
From surveys We collect data you submit to us through surveys
- Receives data the user submits through surveys Data Access & Collection
From friends referrals and lists purchases We may receive email addresses and contact information from referrals, co-promotions and list purchases
- May receive email addresses and contact information from referrals, co-promotions and list purchases Data Access & Collection
Purpose of Collection and Use of Personal Data
- Uses personal data to provide, personalize and understand the Services; support, coaching, service emails and surveys Use & Processing
We use your personal data to:
- Uses personal data to provide, personalize and understand the Services; support, coaching, service emails and surveys Use & Processing
- Provide the Services to you
- Understand how you use the Services, including what content and ads you view
- Personalize the Services by showing you content relevant to your health, interests and fertility, pregnancy and parenting journey – for example, if you provide us with personal data indicating you have a certain health condition, we may provide you with editorial content relevant to that condition
- Send you personalized emails showing relevant data points derived from the personal data you input to our Services, unless you opt-out of such communications in the Settings page of the app. Despite precautions, email communications may be intercepted; you should opt-out if you do not wish to accept this risk.
- Send you marketing communications for Ovia and its affiliates, subject to your opt-in consent when required by law
- Provide support and troubleshooting
- Provide you with health coaching if you are an Ovia+ member
- Send you email communications about the Services
- Solicit your participation in surveys and run surveys
- Provide security for the Services and obtain analytics about app performance
- Market, develop and improve Ovia’s and its affiliates’ products and services, including development and improvement of machine learning algorithms, large language models and other AI technologies (“AI”)
- Conduct clinical and scientific research, subject to your informed consent where required by law
- Create deidentified data and aggregated data and statistics, as described further here
- Comply with law, for security management and investigation, in connection with litigation, or to protect the rights or property of Ovia or third parties
- Uses personal data to comply with law, for security/investigation, litigation, or to protect rights or property Legal Rights & Agreement Rules
Lawful Processing. Our processing of your personal data is based on one or more of the following:
- Lawful bases: collection consent, contract, legal obligation, research/statistics/public health, legitimate interests Legal Rights & Agreement Rules
- The consent you provide to us at the point of collection of your personal information;
- Lawful bases: collection consent, contract, legal obligation, research/statistics/public health, legitimate interests Legal Rights & Agreement Rules
- The performance of the contract we have with you;
- Lawful bases: collection consent, contract, legal obligation, research/statistics/public health, legitimate interests Legal Rights & Agreement Rules
- The compliance of a legal obligation to which we are subject;
- Lawful bases: collection consent, contract, legal obligation, research/statistics/public health, legitimate interests Legal Rights & Agreement Rules
- The performance of scientific research, preparation of statistics or public health activities;
- Lawful bases: collection consent, contract, legal obligation, research/statistics/public health, legitimate interests Legal Rights & Agreement Rules
- The legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms. Ovia’s legitimate interests include the lawful conduct of its business.
- Lawful bases: collection consent, contract, legal obligation, research/statistics/public health, legitimate interests Legal Rights & Agreement Rules
The table below describes the purposes for our use and collection by category.
- Purposes table: identifiers get all listed purposes except deidentified-data creation; health rows law-limited Use & Processing
Category Purpose of Collection and Use
Identifiers All purposes listed under “Purpose of Collection and Use of Personal Data” above (“Comprehensive Use”), other than creation of deidentified data
- Purposes table: identifiers get all listed purposes except deidentified-data creation; health rows law-limited Use & Processing
General personal information including health information Comprehensive Use, other than uses not permitted by law.
- Purposes table: identifiers get all listed purposes except deidentified-data creation; health rows law-limited Use & Processing
Legally protected classifications such as race, gender, disability or pregnancy status Comprehensive Use, other than uses not permitted by law
- Purposes table: identifiers get all listed purposes except deidentified-data creation; health rows law-limited Use & Processing
Biometric information Comprehensive Use
- Inferences except unlawful uses, primary use health content; biometric, activity and geolocation “Comprehensive Use” Inference & Profiling
Internet and app activity information Comprehensive Use
- Inferences except unlawful uses, primary use health content; biometric, activity and geolocation “Comprehensive Use” Inference & Profiling
Geolocation Comprehensive Use
- Inferences except unlawful uses, primary use health content; biometric, activity and geolocation “Comprehensive Use” Inference & Profiling
Audio and visual information Store and display the photos and videos you upload to your Ovia account
- Uploaded photos/videos stored and displayed; sensitive information comprehensive except uses not permitted by law Use & Processing
Professional and employment related To provide you with Ovia+ services
- Purposes table: identifiers get all listed purposes except deidentified-data creation; health rows law-limited Use & Processing
Inferences Comprehensive Use, other than uses not permitted by law. Our primary use of inferences is to provide you with content relevant to your health.
- Inferences except unlawful uses, primary use health content; biometric, activity and geolocation “Comprehensive Use” Inference & Profiling
Sensitive information Comprehensive Use, other than uses not permitted by law.
- Uploaded photos/videos stored and displayed; sensitive information comprehensive except uses not permitted by law Use & Processing
When We Share Personal Information, What Categories of Recipients Do We Share With?
- Shares with service providers and contractors working on Ovia’s behalf: AWS, Helpshift, Salesforce.com, Alchemer, Zoom Sharing & Disclosure
Categories of Recipients Examples of Recipients We Share With
- Shares with service providers and contractors working on Ovia’s behalf: AWS, Helpshift, Salesforce.com, Alchemer, Zoom Sharing & Disclosure
Service Providers and Contractors Ovia’s data is processed and stored by service providers and contractors working on Ovia’s behalf, including our cloud services provider AmazonAmazon Web Services, Helpshift (support services platform), Salesforce.com (coaching platform), Alchemer (survey platform) and Zoom Video Communications (coaching communications).
- Shares with service providers and contractors working on Ovia’s behalf: AWS, Helpshift, Salesforce.com, Alchemer, Zoom Sharing & Disclosure
Ovia+ Customers and their Business Associates and Health Benefit Providers If you are an Ovia+ user, we may share data with your health insurer, health plan, employer, or their business associates and benefits management providers, as described below under the heading “Ovia+ Data Sharing”, provided that we share information with your employer only for specific uses and only if you expressly consent.
- Ovia+ sharing: may share with insurer, plan, employer, or their business associates; employer with express consent Sharing & Disclosure
From your other devices If you opt-in to share your Ovia data with Apple Health, Google Health Connect or your other devices, we share the information you select to share.
- Shares Ovia data with Apple Health, Google Health Connect or other devices only if you opt in, and only what you select Sharing & Disclosure
From surveys We collect data you submit to us through surveys
- The recipients table’s “From surveys” row repeats the collection-source wording, not a sharing provision Use & Processing
People You Invite The Ovia apps may allow you to invite others, such as your partner, to share your Ovia journey. If you invite someone, they will be able to see all of your personal data in the Ovia apps. The people you invite are also able to add others to your account. If you add personal data or other content to an Ovia account, everyone who is following that Ovia account will see it.
- People you invite see all of your personal data and can add others; every follower sees added content Sharing & Disclosure
You and Your Requested Followers If you enroll in Ovia, Ovia may send you regular email updates relevant to your Ovia journey. These emails are subject to opt-in consent where required by law. If you include a profile image or name for yourself or a child in your care, this profile image and name will be shared in emails to you and everyone who has been invited to follow your account. The name and image will be visible even before the invitation is accepted. If you do not want the image or name to be shared, you should not enter a profile picture or a profile name.
- Profile image and name go in emails to invited followers, visible before acceptance; opt-in emails by law Sharing & Disclosure
Affiliates and Successors We may share data with our parent company Labcorp and with companies under common control, and with any successors in the event of merger, acquisition, asset sale, or similar transaction.
- May share data with parent Labcorp, common-control companies, and successors in merger/acquisition/asset sale Sharing & Disclosure
Government Authorities and Recipients of Compelled Disclosures Ovia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties. Please also see How Does Ovia Respond to Data Requests
- May provide personal data to courts, law enforcement, government authorities if required by law or to protect rights Legal Rights & Agreement Rules
Ovia+ Data Sharing
- Ovia+ via insurer/employer/plan includes data sharing with insurer, plan, employer, or their vendors per HIPAA Sharing & Disclosure
If you receive the premium “Ovia+” version of Ovia through your health insurer, employer or employer health plan, your Ovia+ services include data sharing with your insurer, employer health plan, employer, or vendors working on their behalf in accordance with HIPAA and other privacy laws.
- Ovia+ via insurer/employer/plan includes data sharing with insurer, plan, employer, or their vendors per HIPAA Sharing & Disclosure
Data sharing does not occur for all Ovia+ clients. If you would like definitive information on the data sharing for your account, please contact support@oviahealth.com. Our Ovia+ data sharing policy is as follows:
- Data sharing does not occur for all Ovia+ clients; definitive account-level information via support email Sharing & Disclosure
- If you receive Ovia as a benefit from your health insurer or health care provider, Ovia is part of your care package and we share your personal data with your health insurer or provider, or their business associates, under HIPAA, for care and benefits management.
- If you receive Ovia as a benefit from your employer or your employer health plan:
- we do not share your health data with your employer unless you expressly consent for a specific purpose; this may occur, for example, if your employer offers you access to an in-house care management team. If this occurs, we limit the sharing as necessary for the specific purpose to which you have given consent. To understand more about the consent we request, see Why do we ask for this?
- However, we may share personal data with your employer health plan and their business associates (including your health insurer), and with employee benefits management vendors, consistent with HIPAA or other privacy laws.
- When we share your data with your health insurer, nurse care managers from your health plan may also have access to your personal data and may contact you as a result for care management purposes.
- If you seek to register for Ovia+ premium services provided by a health plan or employer, we may share limited identity information (such as name and date of birth) with the health plan or employer to confirm your eligibility for Ovia+ benefits.
- When we share health data for care and benefits management as described in this section, we share a summary snapshot of your health data. We do not share any information you have recorded in the Ovia apps about sexual activity, any answers you have given to MyQ questions, or any submissions you make to our Community feature.
What Categories of Personal Information Do We Sell or Share for Advertising or AI Training?
- As of June 2025: no advertising shown to Consumer users and no selling or sharing of personal data for advertising Sharing & Disclosure
As of June 2025, Ovia no longer shows advertising to our Consumer users and does not sell or share any personal data for advertising. Ovia does not sell personal data to third parties for the purpose of training AI. We may, to the extent permitted by law, allow vendors who provide us with AI tools to use personal data to improve the services they provide to us.
- As of June 2025: no advertising shown to Consumer users and no selling or sharing of personal data for advertising Sharing & Disclosure
- No sale of personal data to third parties for training AI; but AI-tool vendors may use personal data to improve services Sharing & Disclosure
No Selling or Sharing for Advertising of Personal Data of Consumers Under 16
- To its knowledge, Ovia does not sell or share personal data of users under 16 and no longer shows advertising Sharing & Disclosure
To its knowledge, Ovia does not sell or share any personal data of Ovia users under 16. Ovia no longer shows advertising.
- To its knowledge, Ovia does not sell or share personal data of users under 16 and no longer shows advertising Sharing & Disclosure
Categories of Personal Information Disclosed for Business Purposes
- Purposes table: identifiers, geolocation, employment to cloud/analytics/vendors; audio/visual cloud-only Sharing & Disclosure
Category Categories of Recipients Business Purpose for Sharing
- Purposes table: identifiers, geolocation, employment to cloud/analytics/vendors; audio/visual cloud-only Sharing & Disclosure
Identifiers Cloud computing providers, data analytics providers, vendors who provide email, support, admin, marketing, survey and scheduling systems. For internal operations (hosting, support, admin, marketing, analytics).
- Purposes table: identifiers, geolocation, employment to cloud/analytics/vendors; audio/visual cloud-only Sharing & Disclosure
General personal information including health information Cloud computing providers, data analytics providers, vendors who provide email, support, admin, marketing, survey and scheduling systems. Ovia+ customers and their vendors as described under the “Ovia+ Data Sharing” heading above. For internal operations (hosting, support, admin, marketing, analytics). To provide our digital health solutions to Ovia+ customers.
- Purposes table: health, protected-class, activity, inferences, sensitive rows also reach Ovia+ vendors Sharing & Disclosure
Legally protected classifications including race, gender, pregnancy status Cloud computing providers, data analytics providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. Ovia+ customers and their vendors as described under the “Ovia+ Data Sharing” heading above. For internal operations (hosting, support, admin, marketing, analytics). To provide our digital health solutions to Ovia+ customers.
- Purposes table: health, protected-class, activity, inferences, sensitive rows also reach Ovia+ vendors Sharing & Disclosure
Biometric information Cloud computing providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. If you elect to share your Ovia data with a device provider (such as Apple or Google), we share the data you elect to share. Ovia+ customers and their vendors as described under the “Ovia+ Data Sharing” heading above. For internal operations (hosting, support, admin, marketing, analytics) and to provide our digital health solutions to Ovia+ customers. If you elect to share your Ovia data with a device provider (such as Apple or Google), to provide that sharing service to you.
- Purposes table: health, protected-class, activity, inferences, sensitive rows also reach Ovia+ vendors Sharing & Disclosure
Internet and app activity information Cloud computing providers, data analytics providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. Ovia+ customers and their vendors as described under the “Ovia+ Data Sharing” heading above. For internal operations (hosting, support, admin, marketing, analytics), and to provide our digital health solutions to Ovia+ customers.
- Purposes table: health, protected-class, activity, inferences, sensitive rows also reach Ovia+ vendors Sharing & Disclosure
Geolocation Cloud computing providers, data analytics providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. For internal operations (hosting, support, admin, marketing, analytics).
- Purposes table: identifiers, geolocation, employment to cloud/analytics/vendors; audio/visual cloud-only Sharing & Disclosure
Audio and visual information Cloud computing providers. For internal operations (hosting and support).
- Purposes table: identifiers, geolocation, employment to cloud/analytics/vendors; audio/visual cloud-only Sharing & Disclosure
Professional and employment related Cloud computing providers, data analytics providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. For internal operations (hosting, support, admin, marketing, analytics).
- Purposes table: identifiers, geolocation, employment to cloud/analytics/vendors; audio/visual cloud-only Sharing & Disclosure
Inferences Cloud computing providers, data analytics providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. Ovia+ customers and their vendors as described under the “Ovia+ Data Sharing” heading above. For internal operations (hosting, support, admin, marketing, analytics), and to provide our digital health solutions to Ovia+ customers.
- Purposes table: health, protected-class, activity, inferences, sensitive rows also reach Ovia+ vendors Sharing & Disclosure
Sensitive information Cloud computing providers, data analytics providers, and vendors who provide email, support, admin, marketing, survey and scheduling systems. Ovia+ customers and their vendors as described under the “Ovia+ Data Sharing” heading above. For internal operations (hosting, support, admin, marketing, analytics). To provide our digital health solutions to Ovia+ customers.
- Purposes table: health, protected-class, activity, inferences, sensitive rows also reach Ovia+ vendors Sharing & Disclosure
Prior to the termination of our advertising business in June 2025, we shared identifiers, internet and app activity information and inferred purchase interests with our ad sales platform, advertising networks, advertising platforms or advertising technology providers to sell, administer, serve and purchase ads.
- Historical: pre-June 2025, shared identifiers, app-activity data and inferred purchase interests with ad platforms Sharing & Disclosure
Ovia may also share personal data for business purposes in all of the above categories, as described in the table “When We Share Personal Information, What Categories of Recipients Do We Share With?”, with the following categories listed in that table: People You Invite, You and Your Requested Followers, Affiliates and Successors, and Government Authorities and Recipients of Compelled Disclosures.
- May also share for business purposes with the recipients-table categories: invitees, followers, affiliates, authorities Sharing & Disclosure
Third Parties Receiving Personal Information for Their Own Business Purposes
- Discloses personal data to processors acting for Ovia; Appsflyer may act as controller for its own security/compliance Sharing & Disclosure
Ovia discloses personal data to processors who act on Ovia’s behalf (our principal processors are listed on our Subprocessors Page). Our analytics vendor Appsflyer provides its services to Ovia as a processor, but may act as a controller when using personal data for its internal security, error correction and compliance purposes.
- Discloses personal data to processors acting for Ovia; Appsflyer may act as controller for its own security/compliance Sharing & Disclosure
Data Security
- Industry-standard security: background checks and encryption; Ovia+ HITRUST certified; database on AWS Security & Safeguards
Ovia protects personal data with security measures that are consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. Ovia’s Ovia+ product has achieved certification to the HITRUST Common Security Framework. Our principal database is hosted by Amazon Web Services, which maintains multiple security certifications. We will notify you of security incidents as required by law, and you agree that, when permitted by law, such notices may be sent by email to the email address associated with your Ovia account.
- Industry-standard security: background checks and encryption; Ovia+ HITRUST certified; database on AWS Security & Safeguards
Data Retention
- Consumer retention: all data kept while account active plus 7 years, then automatically deleted Retention & Deletion
If you are a Consumer user, we store your data (all categories) for the period that your account is active and then for 7 years after that. After this period, we automatically delete your data.
- Consumer retention: all data kept while account active plus 7 years, then automatically deleted Retention & Deletion
If you are an Ovia+ user, we store your data (all categories) during the period that you are receiving Ovia+ benefits. Ovia is generally required to delete your data after your Ovia+ benefits end. We will notify you before your data is deleted and, where possible, offer you the opportunity to convert your account to a Consumer account and retain your data.
- Ovia+ retention: stored during benefits; generally deleted after benefits end, with notice/conversion offer Retention & Deletion
While these are our standard retention periods, you can delete your data at any time as described in the next section.
- Standard retention periods are stated, but the user can delete their data at any time Retention & Deletion
What Are Your Choices?
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
Within the Ovia Apps
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
You can use self-service controls within the Ovia apps to exercise your data subject rights to:
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Correct your data:
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to the “More” page of your Ovia app to the “Account” section to modify your profile and health information
- Menu paths: correction under More > Account; export and processing summary under More > Settings Account & Service Control
- Opt-out of marketing emails and push-notifications
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to the “More” page of your Ovia app, then choose “Settings”, to edit email subscriptions and opt out of email and push notifications
- Marketing opt-out via app Settings (email and push) or the unsubscribe link in marketing emails Account & Service Control
- You can also opt out of marketing emails by using the unsubscribe link in the emails
- Marketing opt-out via app Settings (email and push) or the unsubscribe link in marketing emails Account & Service Control
- Delete your data and account, subject to certain exceptions
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to “More” then “Settings” and choose “reset or delete my account”, and then “delete my account”
- Deletion via More > Settings; withdrawing consent to processing is done by deleting your data Account & Service Control
- Obtain a copy of your data
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to “More” then “Settings” and then “export my data”
- Menu paths: correction under More > Account; export and processing summary under More > Settings Account & Service Control
- Obtain a summary statement of Ovia’s data processing
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to “More” then “Settings” and choose “how is my data used?”
- Menu paths: correction under More > Account; export and processing summary under More > Settings Account & Service Control
- Withdraw your consent to Ovia’s data processing by deleting your data
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to “More” then “Settings” and choose “reset or delete my account”, and then “delete my account”
- Deletion via More > Settings; withdrawing consent to processing is done by deleting your data Account & Service Control
- For non-US users, manage your cookies
- In-app self-service controls: correct, opt out, delete, export, summary, withdraw consent, cookies Account & Service Control
- Go to “More”, “Settings”, then “Manage My Privacy Settings”
- Cookie management control exists for non-US users under More > Settings > Manage My Privacy Settings Account & Service Control
Opting Out Through Browser-Based Global Privacy Controls
- No GPC “do not sell” signal inside the apps or in-app webviews; respected only on the corporate website Account & Service Control
Ovia does not receive a “do not sell” Global Privacy Control (GPC) signal when you are using Ovia’s mobile applications or viewing content through in-app webviews. Ovia respects “do not sell” GPC signals that we receive on the Ovia Health corporate website at www.oviahealth.com, which is governed by Ovia’s Non-App Privacy Policy.
- No GPC “do not sell” signal inside the apps or in-app webviews; respected only on the corporate website Account & Service Control
Contacting Our Helpdesk, and Use of Authorized Agents
- Email support to exercise listed and other legal rights; agents likewise; password verification may apply Account & Service Control
You may email Ovia at support@oviahealth.com to exercise any of the rights listed above and any other data subject rights provided by law. Any authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact support@oviahealth.com with their request. Ovia may require you to verify your identity by entering your username and password in order to exercise data subject rights.
- Email support to exercise listed and other legal rights; agents likewise; password verification may apply Account & Service Control
You have the right not to be discriminated against for exercising your privacy rights. Contact our helpdesk if you are concerned that this has happened to you.
- Users have the right not to be discriminated against for exercising privacy rights; contact the helpdesk if concerned Account & Service Control
Appeal Rights
- Refused requests: appeal by email to Ovia’s Legal Department, resolved within 30 days of receipt Account & Service Control
If your request to exercise any of your rights is refused, you may send your notice of appeal by email to legal@oviahealth.com, for review by Ovia’s Legal Department. We will resolve your appeal within 30 days of the date of receipt of your email.
- Refused requests: appeal by email to Ovia’s Legal Department, resolved within 30 days of receipt Account & Service Control
Exceptions to Deletion
- Deletion exceptions: retention for records, law, security/investigation, litigation, protecting rights/property Retention & Deletion
Even if you exercise your rights described above, Ovia may retain personal data to maintain proper business records, to comply with and as permitted by law, for security management and investigation, in connection with litigation, or to protect the rights or property of Ovia or third parties. Please see also How Does Ovia Respond to Data Requests.
- Deletion exceptions: retention for records, law, security/investigation, litigation, protecting rights/property Retention & Deletion
Other Relevant Information
- Notices continue after opt-out; all email stops only with deletion; public posts stay; research may delay Retention & Deletion
If you opt-out of marketing emails and push notifications, you will still receive account management notices. To stop all emails and push notifications, you must delete your account and data. If we delete your data, we will not delete the posts or comments you have shared publicly on Ovia’s social media, community or chat features. If you have consented to participate in a research study and subsequently request deletion of your data, we may delay deletion until completion of the study. Even if you exercise your rights described above, Ovia may retain personal data to maintain proper business records, to comply with and as permitted by law, for security management and investigation, in connection with litigation, or to protect the rights or property of Ovia or third parties. Please see also How Does Ovia Respond to Data Requests.
- Notices continue after opt-out; all email stops only with deletion; public posts stay; research may delay Retention & Deletion
How to Contact Ovia with Comments or Complaints?
- Contact: privacy choices via in-app controls; designated DPO at the Westborough, MA address and legal@oviahealth.com Account & Service Control
To contact Ovia to exercise your privacy choices, please see “What Are Your Choices?” above.
- Contact: privacy choices via in-app controls; designated DPO at the Westborough, MA address and legal@oviahealth.com Account & Service Control
Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at:
- Contact: privacy choices via in-app controls; designated DPO at the Westborough, MA address and legal@oviahealth.com Account & Service Control
Data Protection Officer Ovuline, Inc., dba Ovia Health by Labcorp 3400 Computer Drive Westborough, MA 01581 legal@oviahealth.com
- Contact: privacy choices via in-app controls; designated DPO at the Westborough, MA address and legal@oviahealth.com Account & Service Control
Data subjects located in the EEA or UK may contact the Data Protection Officer at the address above or Ovia’s EU and UK representative at dpo@labcorp.com.
- EEA/UK data subjects may contact the DPO or Ovia’s EU and UK representative (dpo@labcorp.com) Account & Service Control
You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority. If you are a resident of Washington state in the US, the Washington Attorney-General’s complaint website is here.
- Users may complain to a local consumer-protection or data-protection authority; Washington AG site linked Account & Service Control
Additional Information
- Not responsible for third-party sites/apps’ privacy practices; users should review their policies Account & Service Control
Third Party Websites or Apps: Some links within the Services may interface with or take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of others. You should review the privacy policies of those sites and apps.
- Not responsible for third-party sites/apps’ privacy practices; users should review their policies Account & Service Control
US Location: The data we collect is transferred to servers located in the US of our cloud computing provider, Amazon Web Services (AWS); some personal data may be transferred to other US-based vendors who provide services to Ovia, including the principal vendors listed here. If you are resident outside the US, your data may as a result become subject to US jurisdiction which may provide you with weaker data protection safeguards and rights than you would enjoy in your home jurisdiction. By accepting this Privacy Policy, using the Services or providing us with your personal data you acknowledge and consent to your personal data being transferred and/or processed as described in this Policy.
- Data kept on US AWS servers and possibly other US vendors; non-US users may face weaker safeguards; use means consent Retention & Deletion
Children: The Services are not available to children under 13 or who otherwise require parental consent under applicable law to use the Services or provide personal information to Ovia. Ovia does not collect personal data from children under 13. Parents and guardians may include personal data about their baby or child in their Ovia account; the parent or guardian is responsible for ensuring they have the legal right to do so.
- No under-13 use or collection; parents may include child data at their responsibility for legal right Data Access & Collection
Deidentified Data and Aggregated Data: Ovia may use personal data to create deidentified data for research and development purposes. Deidentified data is not personal data as it is no longer linked or linkable to you. If we create a deidentified dataset we maintain it as such and will not re-identify it. We may provide deidentified data to our research partners, such as universities and medical research institutions for research, and to other businesses who have engaged us to provide research services on deidentified or aggregated data. Ovia may disclose or sell deidentified data derived from patient information (as defined by the California Consumer Privacy Act); if so, such patient information is deidentified in accordance with HIPAA safe harbor or expert determination deidentification requirements. We may use personal data to create aggregated analytic data and statistics, which we may use for Ovia’s internal purposes or share with third parties. Ovia may receive compensation for sharing deidentified or aggregate data.
- Uses personal data to create deidentified data, aggregated data and statistics (detail cross-referenced below) Inference & Profiling
- Deidentified data detail: unlinked, not re-identified, may reach research partners, CCPA-patient rule, compensation Sharing & Disclosure
Social Media: Some Ovia content may appear on Ovia’s social media channels. Ovia does not collect personal data through those channels, and the respective privacy policies of the social media provider will apply to your usage of those channels.
- No collection of personal data via Ovia’s social media channels; channel providers’ policies apply Data Access & Collection
Changes to this Policy
- Ovia may modify the Policy by posting an updated version; material changes are notified by email or in-app notification Content & IP Rights
Ovia may modify this Policy from time to time by posting an updated version of the Policy. When we make material changes this Policy, we will notify users by email or in-app notification.
- Ovia may modify the Policy by posting an updated version; material changes are notified by email or in-app notification Content & IP Rights
Last updated: June 26, 2026
- Last updated date: June 26, 2026 Content & IP Rights
The principal changes in this update were:
- June 26, 2026 update: added AI-development statement; removed historical pre-2025 advertising use Content & IP Rights
- Adding statement that our use of personal data to improve products may include development of AI
- Removing historical information on advertising data use that occurred before we terminated advertising in June 2025