Privacy Policy — Ovae
Effective Date: July 15, 2026 Last Updated: August 12, 2026
Ovae ("we," "us," "our") provides a wellness and menopause‑tracking mobile application (the "App") available on iOS. This Privacy Policy explains what information the App collects, how it is used, and your rights regarding that information.
Ovae is published by Zacharie MARCHAND-NICOLAS, individual (Apple Developer Individual Account), located at 12 Boulevard Monplaisir, 31400 Toulouse, France ("Company," "we").
If you have questions about this Privacy Policy, contact us at felixaumix@gmail.com.
Important Notice — Not a Medical Device
Ovae is a personal wellness journal. It is not a medical device, does not provide medical diagnoses, and is not a substitute for professional medical advice. PDF reports generated by the App are personal summaries for your own reference and are not medical documents. Always consult a qualified healthcare provider regarding your health.
Information You Provide That Stays On Your Device
Ovae is designed so that your personal health information never leaves your device. The following data is entered by you and stored locally only, using your device's storage:
Data
Where it's stored
Persists after app restart?
Daily symptom scores (0–10)
On‑device calendar
Yes
Personal notes per day
On‑device calendar
Yes
Tracked symptoms (e.g., hot flashes, brain fog)
On‑device settings
Yes
Relax Mode usage per day
On‑device calendar
Yes
First name (entered during onboarding)
Session memory only
No — cleared on app restart
Menopause stage (entered during onboarding)
Session memory only
No
"Feel listened" onboarding score
Session memory only
No
App preferences (theme, breathing speed, relax video/music)
On‑device settings
Yes
Daily reminder time
Local device notification scheduler
Yes
Subscription status (local flag)
On‑device
Yes
None of the data in this section is transmitted to our servers, to PostHog, or to any third party.
PDF Export If you generate a PDF summary, it is created entirely on your device. Whether and how you share that PDF (AirDrop, email, messaging apps, etc.) is entirely your choice and occurs outside the App's control.
Home Screen Widget The optional home screen widget shares only your selected theme color and paywall/subscription status with the App via Apple's App Group mechanism. No health data is included in the widget.
Deleting Your Data Because your health data is stored only on your device, uninstalling the App permanently deletes all locally stored data. We have no ability to recover it, because we never received it.
3. Information Shared With Third Parties
We use a small number of third‑party service providers to operate the App. None of them receive your health data, symptoms, notes, or personal onboarding information.
A. PostHog (Product Analytics)
Provider / hosting: PostHog, processed in the EU (eu.i.posthog.com)
Purpose: To understand how users navigate the onboarding and paywall flow, so we can improve the App
User identification: Anonymous only — a random ID generated by the PostHog SDK. We do not send your name, email, or any account identifier, because the App has no user accounts or logins.
Events we send to PostHog:
Type
Event name
Content
Screen view
$screen
Screen identifier only (e.g., OVAE_01_welcome)
App lifecycle (automatic)
Application Opened / Backgrounded / Installed / Updated
Standard SDK device metadata
Purchase
OVAE_subscribe_annual
Event only, no additional properties
Purchase
OVAE_subscribe_monthly
Event only, no additional properties
Purchase
OVAE_restore_purchase
Event only, no additional properties
Screens tracked include onboarding, paywall, and core feature screens (e.g., welcome, symptom selection, calendar preview, daily reminder setup, relax/SOS calm, theme selection, feedback).
PostHog's SDK also automatically collects standard technical metadata: device type, operating system, App version, language, and IP address (processed by PostHog in the EU).
We do not send to PostHog: your name, menopause stage, selected symptoms, symptom scores, personal notes, onboarding content, calendar data, or email address.
Data retention with PostHog follows PostHog's own data retention policy. See PostHog's privacy policy at https://posthog.com/privacy for details.
B. RevenueCat (Subscription Management)
Purpose: To verify your subscription status and manage the free trial and billing lifecycle
Data shared: An anonymous RevenueCat identifier, your Apple StoreKit purchase receipt, subscription entitlement status (active/expired), and subscription type
Data NOT shared: We do not send your email, name, or any health data to RevenueCat
RevenueCat may process data in the United States. See RevenueCat's privacy policy at https://www.revenuecat.com/privacy
C. Apple (Payment Processing)
All billing is handled through Apple's In‑App Purchase system. Apple processes your payment and Apple ID in accordance with Apple's own privacy policy, which is available at https://www.apple.com/legal/privacy/. We do not have access to your Apple ID, payment card details, or billing address.
D. TikTok (Advertising Measurement)
• Purpose: To measure the performance of our advertising campaigns on TikTok, so we can understand which campaigns lead to app installs and subscriptions.
• Data shared: The TikTok App Events SDK may send technical app events to TikTok, such as app installations, app launches, and eligible in-app purchase events, for advertising measurement purposes.
• App Tracking Transparency (ATT) / IDFA: During onboarding, we may ask for your permission through Apple's App Tracking Transparency prompt. If you grant permission, the TikTok SDK may access the Apple Identifier for Advertisers (IDFA) on your device to help measure ad performance. If you decline, or if tracking is otherwise unavailable, we do not use the IDFA. On iOS, Apple's SKAdNetwork may also be used as part of Apple's privacy-preserving advertising attribution framework, including when ATT permission is not granted.
• What we do NOT share: We do not intentionally transmit your health journal entries, symptoms, cycle records, personal notes, or onboarding content to TikTok through the advertising SDK. Your health information is never used for advertising.
• International transfers: TikTok may process technical event data outside the European Union. See TikTok's Privacy Policy for details.
4. Device Permissions
Permission | Why we request it | Data shared with us?
Notifications | To send you a daily wellness reminder and an end‑of‑trial alert | No — these are local, on‑device notifications; we do not use a push notification server
In‑App Purchase | To process your subscription | Handled entirely by Apple / RevenueCat, as described in Section 3
App Tracking Transparency (ATT) | Optional — to measure which advertising campaigns help people discover Ovae (via TikTok advertising measurement). You can allow or deny. | If you allow tracking, Apple may make the IDFA available to the TikTok SDK for ad measurement as described in Section 3.D. We do not receive your health data through this permission.
We do not request or access: your location, camera, microphone, contacts, photo library, Bluetooth, or Apple HealthKit.
Actions You Take Voluntarily
Feedback email: Tapping "send feedback" opens your device's email app addressed to felixaumix@gmail.com. Anything you choose to include in that email is sent by you, at your discretion, and is not collected automatically by the App.
PDF sharing: Using iOS's native share sheet to send your PDF report is your choice and happens outside the App's data collection.
External links: Certain settings screens may link out to external URLs (such as this Privacy Policy or our Terms of Use).
No User Accounts
Ovae does not require you to create an account and does not operate a server‑side user profile or database of your personal information. There is no login, and we cannot access, view, or reconstruct your personal entries.
International Data Transfers
Depending on your location, your anonymous analytics data (via PostHog) and subscription data (via RevenueCat) may be processed in countries other than your own, including the European Union (PostHog) and the United States (RevenueCat, Apple). Where required by law, such transfers are made subject to appropriate safeguards (e.g., Standard Contractual Clauses).
Your Rights (GDPR / CCPA and other applicable laws)
Because Ovae stores your health and personal entries only on your device, and we do not hold a server‑side copy, the most direct way to exercise your right to access, correct, or delete your personal data is to use the in‑app editing/deletion features, or uninstall the App, which permanently removes all locally stored data.
For any data we do hold indirectly through our third‑party providers (anonymous analytics identifiers with PostHog, subscription identifiers with RevenueCat), you may contact us at felixaumix@gmail.com and we will assist you in exercising applicable rights, including:
Right to access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restrict or object to processing
Right to data portability
Right to lodge a complaint with your local data protection authority (for EU/EEA residents)
Children's Privacy
Ovae is intended for adults and is not directed at children. We do not knowingly collect information from anyone under the age of 18. If you believe a child has provided us with information, please contact us so we can address it.
10. Cookies and Tracking
The App does not use web cookies. It uses standard mobile analytics and advertising-measurement SDKs, including PostHog and the TikTok App Events SDK, as described in Section 3.
For advertising measurement, the App uses the TikTok App Events SDK to send technical app events to TikTok, such as app installations, app launches, and eligible in-app purchase events.
During onboarding, we may present Apple's App Tracking Transparency (ATT) prompt. If you grant permission, the TikTok SDK may access the Apple Identifier for Advertisers (IDFA) to help measure advertising performance. If you decline, we do not use the IDFA.
On iOS, Apple's SKAdNetwork may also be used as part of Apple's privacy-preserving advertising attribution framework.
We do not intentionally transmit your health journal entries, symptoms, cycle records, notes, or other sensitive health content to TikTok through the advertising SDK. Your health information is never used for advertising.
Data Security
We rely on Apple's platform security (device encryption, sandboxing) to protect data stored locally on your device, and on our providers' (PostHog, RevenueCat) own security measures for the limited, anonymous data described above. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you within the App.
Contact Us
If you have any questions about this Privacy Policy or how your information is handled, contact us at:
Email: felixaumix@gmail.com
14. App Store Privacy Nutrition Label Summary (for reference)
Data collected but not linked to your identity, stored on device only:
• Health & Fitness (symptom tracking)
Data shared with third parties:
• Product Interaction / Analytics (PostHog) — anonymous screen views and app lifecycle events
• Purchases (RevenueCat / Apple)
• App Install, App Launch, and eligible In-App Purchase events (TikTok App Events SDK) — technical advertising-measurement events. If you grant App Tracking Transparency (ATT) permission, the IDFA may be used by the TikTok SDK for ad measurement; if you decline, IDFA is not used. Apple’s SKAdNetwork may also be used as part of iOS ad attribution. Not used to receive your health journal, symptoms, notes, or onboarding content.
Data not collected for third parties:
• Health data, contact info, user-generated content, sensitive personal information