Two versions of the Services: free Consumer and paid Ovia+ (employer, health plan, provider benefit), applied separately
Different sections of this Policy apply only to Ovia’s free Consumer version and only to the enhanced paid Ovia+ versions, which are provided by employers, health plans and health care providers as a benefit. The full version of the Policy is reached with “Full Privacy Policy”, and the “Notice of Collection” is a shorter version required for California law. Combining provisions across versions without this qualifier would overstate what applies to each member.
Details not recorded for this card
Supporting quotations
Some parts of this Policy only apply to Ovia’s free consumer version of the Services, while others only apply to the enhanced paid versions provided as a benefit by employers, health plans and health care providers.
we refer to these different versions as the “Consumer” and “Ovia+” versions of the Services.
Account & Service Control · Restriction or exception
Policy does not apply to personal data collected outside the Services; business contacts covered by the Non-App Policy
The Policy is limited to personal data collected through the Services. Ovia’s Non-App Privacy Policy governs personal data collected outside that scope, such as from business contacts or through Ovia’s corporate website. Text of that linked policy was not supplied, so nothing from it is inferred here.
Details not recorded for this card
Supporting quotations
This Policy does not apply to personal data collected outside the scope of the Services.
For Ovia’s non-app Privacy Policy, which covers personal data collected by Ovia from business contacts or through our corporate website
Not stated here
The text of the linked Non-App Privacy Policy (https://connect.oviahealth.com/non-app-privacy-policy.html) is not supplied by this source; this card cannot say what that policy contains, only that it is where outside-the-Services data collection is covered.
The choices section opens with in-app self-service controls covering the listed rights: correcting data, opting out of marketing emails and push notifications, deleting data and account (subject to certain exceptions), obtaining a data copy, obtaining a summary statement of processing, withdrawing consent by deleting data, and — for non-US users — managing cookies. Menu navigation for each is carded separately.
Details not recorded for this card
Supporting quotations
What Are Your Choices?
Within the Ovia Apps
You can use self-service controls within the Ovia apps to exercise your data subject rights to:
Correct your data:
Opt-out of marketing emails and push-notifications
Delete your data and account, subject to certain exceptions
Obtain a copy of your data
Obtain a summary statement of Ovia’s data processing
Withdraw your consent to Ovia’s data processing by deleting your data
For non-US users, manage your cookies
Qualifications & exceptions
Deletion is “subject to certain exceptions” (see the deletion-exceptions cards).
Cookie management applies to non-US users only.
Not stated here
The summary statement of Ovia’s data processing is reached through an in-app choice that the block marks as a link to a separate document; that document’s text is not supplied by this source, so the card cannot say what the summary contains.
Account & Service Control · Procedure
Menu paths: correction under More > Account; export and processing summary under More > Settings
The correction control lives under More > Account (profile and health information). Data export (“export my data”) and the processing summary (“how is my data used?”) live under More > Settings.
Details not recorded for this card
Supporting quotations
Go to the “More” page of your Ovia app to the “Account” section to modify your profile and health information
Go to “More” then “Settings” and then “export my data”
Go to “More” then “Settings” and choose “how is my data used?”
Account & Service Control · User right or choice
Marketing opt-out via app Settings (email and push) or the unsubscribe link in marketing emails
Two opt-out channels are stated: the app’s Settings page for email subscriptions and push notifications, and the unsubscribe link inside marketing emails.
Details not recorded for this card
Supporting quotations
Go to the “More” page of your Ovia app, then choose “Settings”, to edit email subscriptions and opt out of email and push notifications
You can also opt out of marketing emails by using the unsubscribe link in the emails
Qualifications & exceptions
Opting out leaves account-management notices; see the other-relevant-information card.
Account & Service Control · Procedure
Deletion via More > Settings; withdrawing consent to processing is done by deleting your data
Deletion uses the two-step “reset or delete my account” → “delete my account” path in Settings. The same act is also the stated mechanism for withdrawing consent to Ovia’s data processing — no separate consent-withdrawal channel is described.
Details not recorded for this card
Supporting quotations
Go to “More” then “Settings” and choose “reset or delete my account”, and then “delete my account”
Go to “More” then “Settings” and choose “reset or delete my account”, and then “delete my account”
Qualifications & exceptions
The same deletion step serves withdrawal of consent.
Deletion is subject to certain exceptions carded elsewhere.
Account & Service Control · Procedure
Cookie management control exists for non-US users under More > Settings > Manage My Privacy Settings
The manage-cookies choice applies to non-US users via Settings → “Manage My Privacy Settings”.
Details not recorded for this card
Supporting quotations
Go to “More”, “Settings”, then “Manage My Privacy Settings”
Qualifications & exceptions
Stated for non-US users.
Account & Service Control · Company practice
No GPC “do not sell” signal inside the apps or in-app webviews; respected only on the corporate website
Browser-based Global Privacy Control signals are not received in the apps or in-app webviews, so a GPC opt-out does not take effect there. GPC signals are respected on the Ovia Health corporate website, which the policy states is governed by the Non-App Privacy Policy.
Details not recorded for this card
Supporting quotations
Opting Out Through Browser-Based Global Privacy Controls
Ovia does not receive a “do not sell” Global Privacy Control (GPC) signal when you are using Ovia’s mobile applications or viewing content through in-app webviews.
Ovia respects “do not sell” GPC signals that we receive on the Ovia Health corporate website at
Not stated here
The linked Non-App Privacy Policy’s text is not supplied by this source; this card cannot say how that policy handles GPC on the corporate website.
Account & Service Control · User right or choice
Email support to exercise listed and other legal rights; agents likewise; password verification may apply
Rights can also be exercised by emailing support@oviahealth.com — both for the listed rights and other rights provided by law. Authorized agents exercising rights on users’ behalf use the same contact. Ovia “may” require the user to verify identity by entering username and password.
Details not recorded for this card
Supporting quotations
Contacting Our Helpdesk, and Use of Authorized Agents
You may email Ovia at
Any authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact
Ovia may require you to verify your identity by entering your username and password in order to exercise data subject rights.
Qualifications & exceptions
Identity verification is stated as “may require”.
Account & Service Control · User right or choice
Users have the right not to be discriminated against for exercising privacy rights; contact the helpdesk if concerned
A non-discrimination right accompanies the privacy rights, with the helpdesk as the stated recourse.
Details not recorded for this card
Supporting quotations
You have the right not to be discriminated against for exercising your privacy rights. Contact our helpdesk if you are concerned that this has happened to you.
Account & Service Control · User right or choice
Refused requests: appeal by email to Ovia’s Legal Department, resolved within 30 days of receipt
Refused requests carry an appeal route to Ovia’s Legal Department by email, with a stated 30-day resolution deadline from receipt of the appeal email.
Details not recorded for this card
Supporting quotations
Appeal Rights
If your request to exercise any of your rights is refused, you may send your notice of appeal by email to
We will resolve your appeal within 30 days of the date of receipt of your email.
Account & Service Control · Procedure
Contact: privacy choices via in-app controls; designated DPO at the Westborough, MA address and legal@oviahealth.com
Exercising privacy choices routes back to in-app controls in the choices section. Ovia designates a Data Protection Officer, contactable for questions or complaints about processing at Ovuline, Inc. dba Ovia Health by Labcorp, 3400 Computer Drive, Westborough, MA 01581, and by email at legal@oviahealth.com.
Details not recorded for this card
Supporting quotations
How to Contact Ovia with Comments or Complaints?
To contact Ovia to exercise your privacy choices, please see “What Are Your Choices?” above.
Ovia has designated a Data Protection Officer.
Data Protection Officer Ovuline, Inc., dba Ovia Health by Labcorp 3400 Computer Drive Westborough, MA 01581
Account & Service Control · Procedure
EEA/UK data subjects may contact the DPO or Ovia’s EU and UK representative (dpo@labcorp.com)
Besides the DPO route, users located in the EEA or UK may contact Ovia’s EU and UK representative at dpo@labcorp.com.
Details not recorded for this card
Supporting quotations
Data subjects located in the EEA or UK may contact the Data Protection Officer at the address above or Ovia’s EU and UK representative at
Qualifications & exceptions
Applies to data subjects located in the EEA or UK.
Account & Service Control · User right or choice
Users may complain to a local consumer-protection or data-protection authority; Washington AG site linked
The right to complain externally is qualified: users “may also have” the legal right to lodge a complaint with a local consumer-protection or data-protection authority. For Washington State (US) residents the policy links the Attorney-General’s complaint website.
Details not recorded for this card
Supporting quotations
You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority.
Qualifications & exceptions
Right stated conditionally: “may also have the legal right”.
The Washington example is specific to residents of Washington state.
Not stated here
The linked Washington Attorney-General complaint page is an external site not supplied by this source; the card cannot describe its contents.
Account & Service Control · Restriction or exception
Not responsible for third-party sites/apps’ privacy practices; users should review their policies
Links may lead to sites or apps operated by other companies; Ovia disclaims responsibility for those parties’ privacy practices and directs users to review their policies. The other companies’ policy texts are not part of this source.
Details not recorded for this card
Supporting quotations
Additional Information
Some links within the Services may interface with or take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of others. You should review the privacy policies of those sites and apps.