Your Privacy Matters to Us

MyOvly is a period and cycle tracking app. In this policy, “MyOvly”, “we”, “us” and “our” mean MyOvly, the developer of the MyOvly app, based in Pakistan. This policy explains what information the app handles, why, where it is stored, who it is shared with, and the choices you have.

If you have any question about this policy, contact us at info@myovly.com.

• You can use MyOvly without an account. Your cycle and health logs are stored on your phone.
• Your logs are copied to our cloud servers only if you sign in and choose to back them up.
• We do not sell your personal information, and we do not share your health data with advertisers or data brokers.
• Your health data is not used to select the ads you see.
• You can download your data, delete it from your phone, and delete your account and cloud data from inside the app.
• MyOvly is not a medical device and must not be used as contraception.

Depending on the features you use, you may enter:

• Cycle and health logs: period dates, cycle and period length, symptoms, moods, sexual activity, contraception method and pill reminders, body temperature, weight, and notes.
• Personal profile: height, weight, lifestyle details (sleep, activity, stress, water and caffeine intake), and an optional emergency contact (name, relationship, phone number, email).
• Wellness content: goals, healthy-habit and mood check-ins, and anything you write in the journaling features.
• Profile: your name and an optional profile picture.
• Reminders and preferences, including reminders tied to a place.
• App Lock: a PIN and an optional recovery email.

Information about your health, sexual activity and contraception is sensitive. You decide what to log, and every health field is optional.

An account is optional. If you create one, Google Firebase Authentication processes your email address and password (or, with Google Sign-In, your name, email address and profile photo from your Google account). We never see your password.

If you use “Forgot password”, your email address is sent to our server to issue a one-time code. The code is stored only as a protected hash, expires after a short time, and is emailed to you through our email delivery provider, Brevo.

On your phone: by default, everything you enter is stored only in the app’s private storage on your device.

Cloud backup (optional): if you sign in and tap Back up, your period history and daily logs (the cycle and health logs listed above), your email address and the backup time are saved to Google Cloud Firestore, linked to your account. Your personal profile, emergency contact, wellness and journal entries, activity data and App Lock data are not included in this backup.

Profile picture: if you set one while signed in, it is uploaded to Firebase Storage so it can be shown on your account.

Record of your agreement: when you accept this policy and the Terms of Service while signed in, the version you accepted and the date are saved with your account, so we can show that you agreed.

Android device backup: Android may include the app’s data in your device backup to your Google account, as controlled in your phone’s settings. MyOvly excludes App Lock data from these backups.

MyOvly asks for a permission only when you use the feature that needs it. You can refuse or withdraw any permission in your phone’s settings; the rest of the app keeps working.

• Location (approximate or precise): to show local weather and your place name on the home screen. Your coordinates are sent to Open-Meteo to fetch the weather and to your device’s built-in geocoding service to look up the place name. They are not sent to us.
• Background location (“Allow all the time”): only if you turn on a reminder for when you arrive at or leave a place. The place is registered with your phone’s geofencing service and stays on your device. We do not track or store your location history.
• Physical activity: to count your steps for the Activity feature, using your phone’s step sensor and Google Play services on-device step recording. Step data stays on your device.
• Camera and photos: only to take or choose a profile picture.
• Notifications: for the reminders and updates you turn on.
• Biometrics: to unlock App Lock with your fingerprint or face. This is handled entirely by your phone; MyOvly never receives your biometric data.
• Storage (Android 9 and older only): to save your data export to the Downloads folder.

MyOvly is free and may show ads from Google AdMob; where ads are shown, you can remove them with the optional Remove Ads subscription. When ads are shown, to serve and measure them, AdMob may collect your device’s advertising ID, IP address, device and app information, and how you interact with ads, as described in Google’s privacy policy.

We do not pass your health logs, profile or any other information you enter to AdMob or any other advertiser, and the ads you see are not chosen based on your health data.

Where the law requires it (for example in the EEA, the UK and some US states), we ask for your consent through Google’s consent message before personalised ads are shown. You can change your choice in the app under Settings → Privacy → “Ad privacy choices” when that option applies to you. You can also reset or delete your advertising ID in your phone’s settings.

If you subscribe to Remove Ads, Google Play processes the payment and the yearly renewals. We never receive your card or payment details.

To confirm the subscription, the app sends the Google Play purchase token to our server, which checks it with Google Play. Google Play also tells our server when the subscription renews, is cancelled, fails to renew, ends or is refunded. We store, with your account, whether Remove Ads is active, its status, when the current period ends, whether it renews automatically, and the purchase token (kept on our server only).

Some features connect to outside services. These receive only what they need to work, plus technical data that any internet request carries (such as your IP address and device type):

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging): accounts, optional cloud backup, profile picture, purchase checks, password reset and push notifications for new articles.
• Google AdMob and Google’s consent platform: ads and ad consent.
• Google Play (billing and Google Play services): purchases, step recording and location reminders.
• Brevo: delivers password reset emails.
• Open-Meteo: weather for your location.
• OpenStreetMap: map images when you choose a place for a reminder.
• myovly.com: articles shown in the app.

Each provider handles data under its own privacy policy and terms. We do not use any third-party analytics or crash-reporting service in the app.

We use information only to:

• provide the app’s features, such as tracking, estimates, insights, reminders, wellness content and the home-screen weather;
• run your account, optional cloud backup and restore, and password reset;
• show ads (unless removed), ask for ad consent and verify purchases;
• keep the app and your account secure and prevent abuse;
• answer your messages to support; and
• meet legal obligations.

We do not use your health data for advertising or marketing, and we do not sell it.

We do not sell your personal information. We share it only:

• with the service providers listed above, to run the features you use;
• when you choose to, for example when you export your data or share a file from the app;
• when required by law, or to protect the rights, safety and security of our users, the app or others; or
• as part of a merger, acquisition or sale of the app, in which case this policy, or one at least as protective, will continue to apply to your information.

MyOvly is a personal tracking and wellness app. It is not a medical device, and it does not provide medical advice, diagnosis or treatment.

Predicted periods, fertile windows, ovulation days and other estimates are approximate. They are calculated from the information you enter and may be wrong. Do not use MyOvly as a method of contraception or to plan or avoid pregnancy.

Wellness, nutrition, exercise, yoga and article content is general information only. Always talk to a qualified healthcare professional about your health, before changing medication or starting a new exercise or diet, and if anything worries you. In an emergency, contact your local emergency services.

We protect your information with measures such as encrypted connections (HTTPS) to our services, access rules that limit cloud data to your own account, hashing of your App Lock PIN and password reset codes, and optional App Lock with a PIN or biometrics.

No app, device or online service can be guaranteed completely secure. Please keep your phone, account password and App Lock PIN private.

• On your phone: until you delete it in the app, clear the app’s data, or uninstall the app.
• Cloud backup and profile picture: until you replace them, or delete your account.
• Your account: until you delete it.
• Password reset codes: a short time, then they expire.
• Purchase and subscription records: as long as needed to keep Remove Ads working and to meet legal and accounting requirements.

After deletion, copies may remain in our providers’ secure backups for a limited period before they are overwritten.

In the app you can:

• view and edit everything you have logged;
• download a copy of your data (Profile → Download My Data);
• delete all MyOvly data from your phone;
• delete your account, which deletes your cloud backup, profile picture and sign-in account;
• turn notifications, location reminders and other permissions on or off; and
• change your ad privacy choices where that option applies.

You can also email info@myovly.com to request access to, correction of, or deletion of your information, including account deletion if you can no longer use the app. You can also delete your account on our website at myovly.com/delete-account. We may need to confirm that the request comes from the account owner. Uninstalling the app does not delete your account or cloud backup.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, and to withdraw consent at any time (this does not affect processing that already happened). You will not be treated differently for using these rights.

If you are in the European Economic Area or the UK: we process your health information on the basis of your explicit consent, which you can withdraw by deleting the data or your account. Other information is processed to provide the service you asked for, on the basis of our legitimate interest in keeping the app secure and free with ads, with your consent for personalised ads where required, and to meet legal obligations. You may complain to your local data protection authority.

If you are in the United States: we do not sell your personal information. Where ads are personalised, some state laws may treat this as “sharing” for targeted advertising; you can opt out through “Ad privacy choices” or your phone’s ad settings.

MyOvly is not directed to children under 13 and we do not knowingly collect personal information from them. If a higher minimum age applies where you live (for example 16 in some countries), you must meet that age, or use the app with the permission of a parent or guardian where your local law allows it.

If you believe a child has given us personal information, contact us and we will delete it.

Our service providers may process information in countries other than yours, including the United States. Where required, these transfers are protected by safeguards such as the European Commission’s Standard Contractual Clauses.

We will update this policy when the app or our practices change. The date at the top shows the latest version. If we make an important change, for example to how health data is used or shared, we will tell you in the app before it takes effect and ask for your consent where the law requires it.

For questions, requests or concerns about your privacy, email us at info@myovly.com or use our Contact page. We aim to reply within 30 days.