Apps Privacy Policy identity: how Ovia collects, uses and shares personal data through the Ovia Services
This policy covers Ovuline, Inc., doing business as Ovia Health by Labcorp, a subsidiary of Labcorp, and the personal data collected through the Ovia apps, health coaching, surveys, and related social media and marketing activities, defined as the “Services”. It describes how that personal data is collected, used and shared. This is the Apps Privacy Policy, not the Non-App policy for the corporate website.
Details
Who
Ovuline, Inc., doing business as Ovia Health by Labcorp (“Ovia”), a Labcorp subsidiary
What it covers
personal data collected through the Ovia apps, health coaching, surveys, and related social media and marketing activities (the “Services”)
Supporting quotations
Ovia Health by Labcorp Apps Privacy Policy
Introduction and scope
“Policy”) describes how Ovuline, Inc., doing business as Ovia Health by Labcorp (“Ovia”) collects, uses and shares personal data
Ovia Health by Labcorp is a subsidiary of Labcorp, a global life-sciences leader.
Data Access & Collection · Context
“Personal data” defined: information that identifies you, including indirect identifiers such as IP address
The Policy defines “personal data” as information about the user that identifies them, and states it includes “direct identifiers” such as an email address as well as “indirect identifiers” that could be used to identify the person, such as the IP address and the Advertising ID of their mobile device.
Details not recorded for this card
Supporting quotations
“Personal data” means information about you that identifies you, like a name, telephone number or other bit of information that is used to tell us who you are.
Personal data includes “direct identifiers” such as your email address and also “indirect identifiers” that could be used to identify you such as the IP address and the Advertising ID of your mobile device.
Data Access & Collection · Company practice
Collects identifiers: contact details, device IDs (IP address, AdID, IDFA); Ovia+ also employer and employee ID
Row 2 of the collection table (this table has no marked header row; column labels come from the first row’s text as columnLabel) lists contact and device identifiers Ovia collects, and adds employer ID and employee ID specifically for Ovia+ members.
Details not recorded for this card
Supporting quotations
We collect the following categories of personal data in connection with our Services:
Identifiers
Name, email address, street address, postal address, mobile phone number
Device identifiers such as IP address, AdID, IDFA
For Ovia+ members, employer ID, employee ID
Personal Data We Collect
Qualifications & exceptions
Employer ID and employee ID are collected only for Ovia+ members.
Data Access & Collection · Company practice
Collects health data: fertility, pregnancy, sex-life and life-circumstance info in apps or coaching; child data
The table’s health-data row covers what the user inputs into the apps or discusses with health coaching services, adds child health and milestone information specifically in the Parenting app, and adds health insurance information for Ovia+ members. This is sensitive health data; the sensitive-information row is carded separately.
Details not recorded for this card
Supporting quotations
Date of birth, date of last period, due date, and other fertility, pregnancy, health, sex life and life circumstances information you input into the apps or discuss as part of health coaching services
In the Parenting app, health and milestone information for your child
For Ovia+ members, health insurance information
Qualifications & exceptions
Child health and milestone information is specific to the Parenting app.
Health insurance information is collected only for Ovia+ members.
Health data also comes from discussions as part of health coaching services, not only app input.
Data Access & Collection · Company practice
Collects protected classifications: race, gender, sexual orientation, pregnancy status, disability, medical condition
The collection table lists legally protected classifications as a collected category, with examples spanning race, gender, gender identity, age, ethnic group, nationality, sexual orientation, pregnancy status, disability and medical condition.
Details not recorded for this card
Supporting quotations
Legally protected classifications such as race, gender, disability or pregnancy status
Race, gender, gender identity, age, ethnic group, nationality, sexual orientation, pregnancy status, disability, medical condition
Data Access & Collection · Company practice
Treats synced wearable data as “biometric information”; states no biometric identifiers are collected
Ovia labels the sleep, health and exercise data synced from a wearable device, Apple Health or Google Health Connect to the user’s Ovia account as biometric information, while explicitly stating that it does not collect biometric identifiers such as fingerprints or voiceprints. Syncing is how that data arrives; the sync sources are carded at ovia-sources-sync-google-limited-use.
Details not recorded for this card
Supporting quotations
Sleep, health and exercise data that you sync from a wearable device, Apple Health or Google Health Connect to your Ovia account.
Ovia does not collect biometric identifiers such as fingerprints or voiceprints.
Qualifications & exceptions
Data arrives only when the user syncs a wearable device, Apple Health or Google Health Connect to their Ovia account.
Data Access & Collection · Company practice
Collects internet and app activity information and approximate geolocation (country, state, city, zipcode)
Two table rows cover online activity data and location. Geolocation is stated as approximate: country, state, city, zipcode and regional area.
Details not recorded for this card
Supporting quotations
App usage, browsing history, email opens and views
Device type, operating system, other device parameters
Approximate location by country, state, city, zipcode and regional area
Qualifications & exceptions
Geolocation is approximate (country, state, city, zipcode and regional area), not precise.
Data Access & Collection · Company practice
Collects photos and videos that the user uploads to their Ovia account
The collection table lists audio and visual information as photos and videos the user uploads to their Ovia account.
Details not recorded for this card
Supporting quotations
Photos and videos that you upload to your Ovia account
Data Access & Collection · Company practice
Collects professional and employment-related data: employment status, and name of employer for Ovia+ membership
The employment-related row states employment status generally and the name of employer in connection with Ovia+ membership.
Details not recorded for this card
Supporting quotations
Employment status, name of employer (for Ovia+ membership)
Qualifications & exceptions
Name of employer is tied to Ovia+ membership.
Data Access & Collection · Company practice
Collects sensitive information: racial or ethnic origin, health information, sex life and sexual orientation information
The final collection-table row names sensitive information collected, consisting of racial or ethnic origin, health information, and sex life and sexual orientation information. Overlaps with the general health row are identities of collected data, not separate collection.
Details not recorded for this card
Supporting quotations
racial or ethnic origin, health information, sex life and sexual orientation information
Data Access & Collection · Company practice
Where data comes from: direct input into the apps and Services, stored in Ovia’s cloud computing environment
The sources table states Ovia collects the data users input into Ovia apps and Services and stores it in its cloud computing environment.
Details not recorded for this card
Supporting quotations
Where Do We Get the Information We Collect?
From direct input into our apps and Services
We collect the data you input into Ovia apps and Services and store it in our cloud computing environment
Data Access & Collection · Company commitment
Wearable/Apple Health/Google Health Connect sync collects only shared data; Google API Limited Use commitment
Two qualifiers matter: data from devices, Apple Health and Google Health Connect is collected only if the user syncs, and only the data they choose to share. Separately, Ovia commits that its use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements — a commitment by Ovia, not a description of Google’s policy contents.
Details not recorded for this card
Supporting quotations
If you sync a device, Apple Health or Google Health Connect with Ovia, we collect the data you choose to share
Ovia’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Qualifications & exceptions
Sync collection applies only when the user syncs the device or service with Ovia.
Only the data the user chooses to share is collected.
Not stated here
The text of the Google API Services User Data Policy is not supplied by this source; the card cannot describe what that policy or its Limited Use requirements contain, only Ovia’s stated commitment to adhere to them.
Data Access & Collection · Company practice
Receives identity data (name, DOB, employee IDs) from Ovia+ customers to verify Ovia+ service eligibility
Ovia collects the user’s communications with its care advocates and health coaches and in its Community feature as a source of personal data.
Details not recorded for this card
Supporting quotations
We collect your communications with our care advocates, health coaches and in our Community feature
Data Access & Collection · Company practice
Receives identity data (name, DOB, employee IDs) from Ovia+ customers to verify eligibility for Ovia+
Identity information for eligibility verification is supplied to Ovia by the organizations providing Ovia+ as a benefit. This is a data transfer from the employer or plan side into Ovia, not user input.
Details not recorded for this card
Supporting quotations
From our Ovia+ customers – employers, employer health plans, health insurers, providers
To verify your eligibility for Ovia+ services, we receive identity information (such as name, date of birth, employee ID numbers) from your organization
Qualifications & exceptions
Purpose limited to verifying eligibility for Ovia+ services.
Data Access & Collection · Company practice
May receive email addresses and contact information from referrals, co-promotions and list purchases
Data also arrives passively: automatically from the user’s mobile device or computer, and through cookies, tags, pixels and other tracking technologies collecting information about the user’s interaction with content and the Services generally.
Details not recorded for this card
Supporting quotations
We automatically collect from your device information such as IP address and technical identifiers
We also use cookies, tags, pixels and other tracking technologies to collect information about your interaction with content and the Services generally
Qualifications & exceptions
Tracking technologies collect interaction data about content and the Services generally.
Data Access & Collection · Company practice
Receives data the user submits through surveys
The sources table lists surveys as a source: Ovia collects data the user submits to it through surveys.
Details not recorded for this card
Supporting quotations
From surveys
We collect data you submit to us through surveys
Data Access & Collection · Company practice
May receive email addresses and contact information from referrals, co-promotions and list purchases
The sources table states Ovia may receive email addresses and contact information from referrals, co-promotions and list purchases. The modality is “may” — a possibility, not a guarantee — and the lists come from sources other than the user.
Details not recorded for this card
Supporting quotations
From friends referrals and lists purchases
We may receive email addresses and contact information from referrals, co-promotions and list purchases
Qualifications & exceptions
Stated as “may receive”: possibilities, not established receipt.
Data Access & Collection · Restriction or exception
No under-13 use or collection; parents may include child data at their responsibility for legal right
Two rules: the Services are unavailable to children under 13 (and to anyone else who requires parental consent under applicable law), and Ovia does not collect personal data from children under 13. Parents and guardians may enter personal data about their baby or child in their own account, and the parent or guardian is responsible for having the legal right to do so.
Details not recorded for this card
Supporting quotations
The Services are not available to children under 13 or who otherwise require parental consent under applicable law to use the Services or provide personal information to Ovia. Ovia does not collect personal data from children under 13.
Parents and guardians may include personal data about their baby or child in their Ovia account; the parent or guardian is responsible for ensuring they have the legal right to do so.
Qualifications & exceptions
The under-13 rule is age-based; above 13 it turns on applicable parental-consent law.
Child data in a parent’s account rests on the parent/guardian’s legal right, which Ovia does not verify here.
Data Access & Collection · Company practice
No collection of personal data via Ovia’s social media channels; channel providers’ policies apply
For Ovia content on social media channels: Ovia does not collect personal data through those channels, and the social media provider’s own privacy policy applies to the user’s usage there.
Details not recorded for this card
Supporting quotations
Ovia does not collect personal data through those channels, and the respective privacy policies of the social media provider will apply to your usage of those channels.
Not stated here
The respective social media providers’ privacy policies are not supplied by this source; the card cannot describe their contents.