Privacy Policy

Introduction

Ovuloom ("we," "our," or "us"), operated by MannaSync Solutions Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you use our fertility tracking mobile application (available on iOS and Android) and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

Information We Collect

We collect the following categories of information:

a) Information You Provide Directly

• Account Information: Name, email address, date of birth, profile photo, and user preferences
• Health & Reproductive Data:
  • Menstrual cycle information (period dates, cycle length, flow intensity)
  • Fertility tracking data (ovulation dates, fertile windows, conception attempts)
  • Pregnancy data (due dates, LMP dates, pregnancy milestones, kick counts, contractions)
  • Pregnancy loss information (loss type, dates, PALS tracking preferences)
  • Daily health tracking (symptoms, moods, sleep quality, energy levels, discharge, bleeding)
  • Physical measurements (blood pressure, weight, basal body temperature)
  • Perimenopause symptoms and health metrics
  • Medical notes and provider communications
• Wearable Health Data: If you connect Apple Health or Google Health Connect, we read:
  • Body temperature (for ovulation detection)
  • Heart rate and heart rate variability (for stress and fertility indicators)
  • Respiratory rate (for stress monitoring)
  • Sleep data (duration, stages, quality)
  • Menstruation flow data
• AI Chat Data: Conversations with our AI health assistant for personalized guidance
• Community Data: Forum posts, comments, and interactions (if you choose to participate)
• Payment Data: Subscription purchases are processed by Apple (App Store), Google (Play Store), and Stripe. We do not store your credit card number.

b) Information Collected Automatically

• Usage Data: Features used, screens viewed, time spent, and engagement metrics
• Device Information: Device type, operating system version, unique device identifiers, push notification tokens
• Crash & Performance Data: App crash reports and performance metrics via Firebase Crashlytics
• Analytics Data: Anonymized usage patterns via Firebase Analytics

How We Use Your Information

We use your information to:

• Provide and operate the Service, including personalized cycle predictions, ovulation forecasts, and pregnancy insights
• Provide AI-powered health guidance through our chat assistant
• Calculate medical-grade metrics (kick counts, contraction patterns, fertility windows)
• Deliver mode-specific features (TTC tracking, pregnancy tools, PALS support, perimenopause management)
• Sync and display health data from connected wearables and health platforms
• Send personalized notifications, reminders, and health alerts
• Enable community features and forum participation
• Process premium subscription services
• Improve app quality, fix bugs, and develop new features
• Comply with legal obligations and protect user safety

Health Data Protection

• We use AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Health data is stored securely in Firebase/Google Cloud with access controls
• We never sell your personal health information to any third party
• Access to health data is limited to authorized personnel under strict confidentiality agreements
• You can delete your health data at any time from within the app
• We comply with applicable health data protection regulations

Data Sharing and Disclosure

We may share your information only in these limited circumstances:

• With your explicit consent
• With healthcare providers you choose to share data with
• With service providers who help us operate the app, subject to confidentiality agreements:
  • Cloud infrastructure: Firebase/Google Cloud (data hosting and storage)
  • AI services: Google AI (Gemini) for the chat assistant — data is anonymized before processing
  • Payment processing: Stripe, Apple, and Google (for subscriptions)
  • Push notifications: Firebase Cloud Messaging (FCM)
  • Analytics: Firebase Analytics (anonymized usage data only)
  • Crash reporting: Firebase Crashlytics (technical crash data only)
• To comply with legal requirements such as court orders, subpoenas, or applicable law
• To protect rights and safety of users, the public, or MannaSync Solutions Inc.

We never sell your personal health information to third parties. We do not use your health data for advertising.

Pregnancy Loss Data — Special Protections

We understand the extreme sensitivity of pregnancy loss information:

• Pregnancy loss data receives enhanced privacy protections and is encrypted separately
• You control visibility settings (hide from timeline, pause predictions)
• Loss data is never shared in anonymized research without explicit consent
• Support resources remain accessible even if you choose to delete loss records
• You can transition out of PALS mode or clear loss data at any time

Data Retention

Data Type	Retention Period
Account information (name, email)	Retained while your account is active. Deleted within 30 days of account deletion request.
Health & reproductive data (cycles, symptoms, pregnancy)	Retained while your account is active. Permanently deleted within 30 days of account deletion request.
Wearable health data (heart rate, temperature, sleep)	Retained while your account is active. Permanently deleted within 30 days of account deletion request.
AI chat conversations	Retained for up to 12 months for service improvement, then automatically deleted. Deleted immediately upon account deletion.
Community forum posts	Retained while your account is active. Anonymized or deleted within 30 days of account deletion.
Payment records	Retained for 7 years as required by tax and financial regulations.
Usage analytics (anonymized)	Retained for up to 24 months, then automatically purged.
Crash reports	Retained for up to 90 days, then automatically deleted.
Locally cached data (offline mode)	Stored on your device only. Deleted when you uninstall the app or clear app data.

Data Deletion

How to Delete Individual Data:

• Delete individual cycle entries, symptoms, or health logs directly within the app
• Clear wearable sync data from Settings → Wearables → Clear Cache
• Delete AI chat history from Settings → Privacy → Clear Chat History

How to Delete Your Entire Account:

1. In-App (Immediate): Go to Profile → Account Settings → Delete Account. This initiates permanent deletion of all your data within 30 days.
2. Email Request: Send a request to support@ovuloom.com with the subject line "Account Deletion Request." We will process your request within 30 days.
3. Web Form: Visit www.ovuloom.com/delete-account

What Gets Deleted:

Upon account deletion, we permanently and irreversibly delete:

• All cycle and fertility data
• All pregnancy tracking data
• All health logs, symptoms, and measurements
• All wearable sync data
• Account settings and preferences
• AI chat history
• Community forum posts (anonymized or removed)
• Push notification tokens

What We May Retain After Deletion:

• Anonymized, aggregated analytics data that cannot identify you
• Payment transaction records (as required by law, for up to 7 years)
• Data required to comply with legal obligations or resolve disputes

Your Privacy Rights

Depending on your location, you have the following rights:

• Access: Request a copy of your personal data
• Rectify: Correct inaccurate or incomplete information
• Delete: Request permanent deletion of your data ("Right to be Forgotten")
• Portability: Export your data in a machine-readable format
• Restrict: Limit how we process your data
• Object: Opt out of certain data processing activities
• Withdraw Consent: Revoke previously given consent at any time
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@ovuloom.com. We will respond within 30 days.

Data Security

We implement appropriate technical and organizational measures to protect your information:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Firebase Security Rules restricting data access to authenticated users
• Regular security audits and penetration testing
• Secure data centers with restricted physical access (Google Cloud)
• Employee training on data protection and HIPAA compliance
• Incident response procedures for data breaches

International Data Transfers

If you're located outside the United States, your information may be transferred to and processed in the U.S. where our servers are located. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for such transfers in compliance with GDPR and other applicable laws.

Children's Privacy

Our app is designed for users 13 years and older. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately. If you believe a child under 13 has provided us with personal information, please contact us at privacy@ovuloom.com.

Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through in-app notifications or via email. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Privacy Concerns: privacy@ovuloom.com
• Data Protection Officer: dpo@ovuloom.com
• General Support: support@ovuloom.com
• Mailing Address: MannaSync Solutions Inc., United States

For EU/UK residents: If you have unresolved concerns about our data practices, you may contact your local data protection authority.