Privacy Policy

Hello, and welcome to Olvi's Privacy Policy. This policy is written to explain clearly how Olvi ("we," "us," "our") collects, uses, shares, and protects your personal information.

Olvi is an AI-powered nutrition app. You log your meals — often just by taking a photo — and Olvi estimates the calories and macronutrients, analyzes your nutrition, sets personalized calorie goals based on your health profile, and guides you towards building healthier eating habits. Throughout this policy you'll find short summaries in plain language. They're there to help you understand quickly — the full text of each section is what governs how we handle your information.

Olvi is operated by Seranthia Inc., a company incorporated in Ontario, Canada. We are the organization handling and protecting your personal information, and we are committed to safeguarding your personal and health-sensitive information.

By using Olvi, you agree that we can collect, use, and disclose your information as described here. If you don't agree, please don't use the App. This Privacy Policy forms part of, and should be read alongside, our Terms & Conditions.

Your Health & Food Data — The Short Version

You share food photos, logs, and health details so Olvi can estimate calories, analyze nutrition, and set your goals.
This information is sensitive, and we treat it that way: encrypted, access-restricted, and stored on secure servers in Canada.
We never sell your personal information or health data — to anyone, for any purpose, without your consent.
We never share your health information with employers, insurers, or family members without your consent.
You can access, correct, export, or delete your data at any time.

1. Information We Collect

PHASE 1 HEALTH, GOAL, ACTIVITY AND CORRECTION DATA

Depending on the features you enable and information you choose to provide, we may also collect target weight, desired pace or timeframe, waist and hip circumference, systolic and diastolic blood-pressure readings, blood-glucose readings, measurement units, dates and times; exercise type, duration, intensity and distance; device-reported activity and energy estimates; and corrections you make to AI-generated foods, ingredients, quantities, portions or nutrient results. We use these data only for the disclosed tracking, personalization, history, trend and wellness features. Optional medical and health fields may be skipped, although recommendations may then be less tailored.

NUTRIENT INFORMATION

Nutrition records may include estimated calories, protein, carbohydrates, fibre, sugars, fats (including saturated and unsaturated fats where available), sodium and other nutrients presented by the feature. The precise nutrients available may vary by food record and data source, and values are estimates unless clearly identified otherwise.

a. Information You Provide Directly

Profile information — your name, email address, and password. We also ask for your age or date of birth, sex/gender, height, and weight, because these help us calculate your nutrition and calorie needs. You may optionally add a profile photo.
Health profile data — to deliver personalized guidance, we ask about your cultural or dietary background (to tailor meal suggestions), dietary preferences and restrictions, relevant medical conditions (such as diabetes or hypertension), allergies, and your goals (such as "lose 10 lbs" or "manage blood sugar"). This information is sensitive, and we treat it with a high level of confidentiality.
Meal photos and nutrition logs — the photos you take of your meals, the food and drinks you log (including quantities and times), the calorie and macronutrient information generated from them, and any notes you add. Over time this builds a diary of your eating habits. These are stored securely, are private by default, and are treated as personal information. We'll ask for permission to access your camera or photo library when needed, and you can delete your photos anytime.
User-generated content — when you upload meal photos, food descriptions, comments, responses to challenges, progress updates, achievements, or other content through Olvi ("User-Generated Content" or "UGC"), we may use that content to provide and improve our services, personalize your experience, and operate community features, challenges, contests, rewards programs, points systems, badges, leaderboards, streaks, and other gamification features.

Where we use your UGC for these purposes beyond your personal account experience, we will remove or anonymize information that directly identifies you whenever reasonably possible. We will not publicly display your name, contact information, or personal health information without your consent. Aggregated and anonymized information derived from UGC may also be used to analyze usage patterns, improve our products and services, and create educational, statistical, or promotional content.

Activity data — any exercise or activity you log, and any wearable or fitness-tracker data you choose to sync.
Communications — if you contact us for support or share feedback, we collect what you send us (such as your contact details and the content of your message).

A note on optional fields: sharing health details (conditions, allergies, etc.) is voluntary but helps Olvi personalize accurately. If you leave fields blank, your recommendations may be less tailored — for example, if you don't tell us about a peanut allergy, a suggested recipe might include nuts. Only share what you're comfortable sharing.

b. Information Collected Automatically

Usage data — how you interact with Olvi, such as when you log in, which features you use, and time spent in the app. This helps us improve the experience.
Device and technical data — your device type, operating system, unique device identifiers, crash and error logs, IP address, and general (country/region-level) location. We use this for functionality, troubleshooting, and security.
Analytics data — aggregated information about app usage patterns (such as screens viewed and features used), gathered through analytics tools. This is aggregated and does not directly identify you in our analysis.

We do not track your precise GPS location in the background. If we ever add a feature that needs precise location (for example, finding nearby healthy restaurants), we'll ask your permission first.

PHASE 1 WEARABLE DATA WHITELIST

Olvi integrates your wearable data — such as steps, workouts and workout type, workout start and end time, workout duration, exercise minutes, active energy, walking/running or cycling distance, and source application or device information — only with the permission you provide.

SYNCHRONIZATION AND DUPLICATES

Imported records retain available source, timestamp and record identifiers. Where the same activity appears from more than one source, Olvi applies synchronization and duplicate-resolution rules intended to avoid double-counting, such as preferring the original recording source and not adding overlapping daily totals or duplicate workout energy values. Source corrections or deletions may cause summaries to be recalculated.

c. Information From Third Parties

Olvi does not currently obtain information about you from data brokers or marketing firms, and we never purchase user data. If you choose to connect Olvi to an external service — for example, Apple Health, Google Fit, or a clinic or wellness-program system — we'll receive data from that source only after you authorize the connection, and we'll tell you what is imported.

d. Purchase and Subscription Information

Olvi is free to download, and paid memberships are sold only as in-app purchases through Apple's App Store or Google Play. Because the store processes the payment, we never receive your credit- or debit-card number, bank details, billing address, or any other payment-instrument information — that stays with Apple or Google.

What the store sends us is limited to what we need to unlock what you paid for:

An opaque purchase token or transaction identifier — a meaningless string to anyone but the store and us, used to match a purchase to your Olvi account.
The product you bought (for example, Olvi Core annual or Olvi Coach monthly), and whether it was a subscription or a one-time credit top-up.
The subscription status the store reports — in trial, active, in grace after a failed payment, paused, expired, or revoked.
The date the current paid period ends, any trial end date, and — if you cancel — the date access is due to stop.
Updates to all of the above, sent to us by Apple's and Google's server notifications whenever your subscription changes.

We use this information only to give your account the access you paid for and stop it when the subscription ends; to show you your plan, renewal date, and trial countdown in the app; to reconcile store notifications so that a repeated message cannot double-charge or double-grant you; and to meet our own record-keeping, tax, and audit obligations. We do not use purchase information to build a profile of you, we do not combine it with your health or nutrition data for advertising, and we never sell it.

Apple and Google are independent controllers of the transaction itself. They decide how they handle your payment method, receipts, store account, and refund requests, under their own privacy policies rather than this one — so for anything to do with the payment or a refund, they are the ones holding that information. We are the controller only of the purchase token, product, and status described above, and of how they are used inside Olvi.

How long we keep it. We keep your subscription record for as long as your account exists, so we can honour your entitlement and answer questions about it. If you delete your account, that record is deleted along with the rest of your data, apart from the minimum transaction and financial records we are required to keep for tax, accounting, and audit purposes — see Section 7 (Where Your Data Is Stored & How Long We Keep It).

3. How We Use Your Information

We use your personal information to:

Provide the core service. We process your photos and logs to estimate calories and macros, show your daily totals and nutrition analysis, and track your progress. We use your health profile (age, weight, goals, etc.) to set personalized calorie targets and meal plans. The App may request access to your camera or photos to do this — we'll explain why before asking, and you can manage permissions in your device settings.
Personalize your experience. We use your diet, activity, goals, and health profile to generate customized meal plans, nutrition insights, and suggestions. These are informational and educational only — not medical advice (see our Terms & Conditions). You can always accept, ignore, or adjust them.
Improve Olvi. We analyze usage data and feedback to fix bugs and build better features. This analysis is done in aggregate or with personal identifiers removed.
Provide support and account notices. We use your contact details to respond to you and to send essential service messages (such as password resets or notices about changes to this policy). You can't opt out of these essential notices while you have an account.
Communicate with you (with your consent for anything promotional). We don't currently send marketing messages. If that changes, we'll ask for your consent first, and you'll always be able to opt out.
Meet legal and safety obligations. We may use or disclose information where necessary to comply with the law, respond to valid legal process, prevent fraud or security threats, or protect the rights and safety of users and others — disclosing only the minimum necessary, and notifying you where lawful.

USE OF USER CORRECTIONS

Corrections you make to automated food, ingredient, quantity, portion or nutrient results are used to update the affected record and may be used to personalize future results for your account. We may evaluate or improve Olvi using information that has been de-identified or aggregated so that it cannot reasonably identify you. We will not use identifiable health information, meal photos or identifiable corrections to train or fine-tune a third-party or general-purpose model without a specifically disclosed lawful basis and, where required, separate consent.

AUTOMATED TARGETS AND SAFETY

Automated calorie, nutrient, activity and weight-related targets depend on the information supplied, the formula and rules then in use, and applicable safety guardrails. We may update formulas and will identify material changes where appropriate. Outputs are estimates and may not be suitable for pregnancy, minors, eating disorders, acute illness or other situations requiring individualized clinical advice.

4. Automated Processing & AI

Olvi relies on automated systems, including artificial intelligence, to deliver its core features:

Meal photo analysis. When you upload a photo, AI estimates the food, portion size, calories, and macronutrients. These are estimates, not exact measurements, and may contain errors.
Calorie goals and meal plans. We use your health profile to generate personalized calorie targets and meal suggestions automatically.

These automated outputs are informational and educational only. They do not make decisions that have legal or similarly significant effects on you, and they are not medical diagnosis or treatment. Blood-pressure, blood-glucose, weight, waist, hip, nutrition, exercise and wearable information is used for self-tracking, descriptive trends and general wellness personalization. Olvi does not use these readings to independently diagnose a condition, issue urgent clinical alerts, calculate medication or insulin doses, or recommend starting, stopping or changing treatment. You can always review, adjust, or disregard them.

We do not permit third-party AI providers to use your identifiable health information, meal photos, nutrition logs, or other personal information to train their general-purpose AI models without your consent. Any use of data to improve Olvi's own products, services, or AI capabilities is performed using de-identified, aggregated, or anonymized information where reasonably possible.

Some third-party services integrated with or linked from Olvi may be governed by their own privacy policies and terms of use. While we carefully select our service providers and take reasonable steps to protect your information, we cannot control or guarantee the privacy, security, availability, or practices of independent third-party services. We encourage you to review the privacy policies and terms of any third-party services you choose to access through or in connection with Olvi.

MEAL-IMAGE HANDLING

The original meal image may be retained with the meal record to let you review your history, correct results and support the feature, unless you delete it.

Decisions Made by Automated Processing

Sometimes Olvi reaches a result about you entirely automatically, with no person involved — your daily calorie and macronutrient targets calculated from your health profile, for example, or the foods and portions estimated from a meal photo. When that happens, we tell you at the point the result is shown, and we label it as an estimate you are free to review, adjust, or ignore.

If you ask us, we will tell you, in plain language:

the personal information we used to reach that result;
the principal reasons for it, and the main factors and parameters that shaped it;
your right to have any of that personal information corrected if it is wrong or incomplete; and
how the result changes once a correction is made.

You can also submit your own observations about the result, and ask for it to be reviewed by a person at Seranthia rather than by a system. Write to privacy@olvi.io and we will respond within the time the law allows.

We describe these rights here because Québec's Law 25 requires them for decisions based exclusively on automated processing, and because equivalent expectations apply under EU and UK law. We apply them to every Olvi user, wherever you live.

None of Olvi's automated results is a diagnosis, a treatment decision, or the output of a medical device, and none of them determines anything about your access to care, employment, insurance, credit, or any other legal or similarly significant matter. They are wellness estimates, and you always have the final say.

5. How We Handle Your Sensitive Health, Food & Image Data

Because Olvi is a nutrition and health app, much of what you share is sensitive personal information — including:

Health metrics — age, sex, height, weight, conditions, allergies, and goals.
Food and nutrition logs — what you eat, when, and the calorie/macro data derived from it.
Behavioural patterns — habits and trends inferred from your logs (for example, hydration or eating-time patterns).
Images — meal photos and any progress photos, which may reveal personal or bodily information.

We protect this category of information with heightened care: it is encrypted in transit and at rest, access is strictly limited to authorized personnel who need it, it is stored on secure servers in Canada, it is never sold and never disclosed to employers, insurers, or family members without your consent, and you can delete your photos and logs, export your data, or delete your account at any time.

7. Where Your Data Is Stored & How Long We Keep It

Data location

Olvi stores your personal information on secure cloud servers located in Canada. Some limited processing — such as AI analysis of your meal photos — may be carried out by trusted service providers; where any such processing occurs outside Canada, we put contractual and technical safeguards in place to protect your information to a comparable standard, as required by applicable law.

Retention

We keep your personal information only as long as necessary to provide the service and meet our legal obligations. While you have an account, we keep your data so Olvi works for you. If you delete your account or request deletion, we securely delete or anonymize your personal data, except anything we're legally required to retain (for example, certain compliance records, or limited backup archives that age out over time).

Users in the United States

If you access or subscribe to Olvi from the United States, additional U.S.-specific protections apply, including U.S. consumer-health-data protections (such as applicable state consumer health data laws). Our U.S. Consumer Health Data Notice — set out in Section 12 below — describes how we handle consumer health data for U.S. users.

PASSWORD AND ACCESS SAFEGUARDS

Passwords are protected using industry-standard salted cryptographic hashing rather than stored in readable form. Personal information is encrypted in transit and sensitive stored information is encrypted at rest where appropriate. Olvi applies role-based access, multi-factor authentication for privileged or provider accounts where applicable, logging, vendor review, vulnerability management and incident-response procedures proportionate to the information and risk.

8. How We Secure Your Information

Our safeguards include:

Encryption. Data is encrypted in transit (HTTPS/TLS) and at rest. Sensitive health information and passwords are encrypted in our systems.
Access controls. Access to personal data is limited to authorized personnel who need it, using authentication, role-based access, and regular audits.
Secure infrastructure. We host data in secure facilities with firewalls, monitoring, and timely security patching.
Minimization & de-identification. We collect only what we need and separate or remove identifiers where possible.
Staff training. Everyone who may handle personal data is trained on confidentiality and data protection.
Breach response. No system is perfectly secure. If a breach occurs, we'll act quickly to contain and investigate it, and we'll notify affected users and the relevant privacy regulator at the first reasonable opportunity, as the law requires.

You play a role too: use a strong, unique password, don't share it, and log out on shared devices. We'll never ask for your password by email. If you notice anything unusual, contact us right away.

9. Cookies & Similar Technologies

Within the mobile app, our use of cookies is minimal. Our website and emails may use cookies for login, security, and analytics, and you can control non-essential ones through your browser settings or any cookie-preference tool we provide. If you use any Olvi website or receive our emails, we may use:

Essential cookies — required for core functionality, login, and security (for example, keeping you signed in and protecting against fraudulent activity).
Non-essential / analytics cookies — which help us understand how people use our site so we can improve it (for example, through privacy-respecting analytics tools).

10. Your Privacy Rights & Choices

Subject to applicable law, you have the right to:

Access the personal information we hold about you. Most of your data is visible in the app; for a full export, contact us and we'll provide it in a common format. We aim to respond within 30 days where feasible.
Correct or update inaccurate information. You can edit much of your profile directly; for anything you can't, contact us.
Delete your data / withdraw consent. Deleting your account withdraws your consent and erases your personal data from our active systems (except what we must retain by law).
Opt out of marketing, if we ever send it, via the unsubscribe link or your notification settings.
Data portability, where applicable — to receive your data in a structured, machine-readable format.

To exercise any right, contact us (Section 15). To protect you, we may need to verify your identity. These requests are free, except in rare cases where a request is manifestly unfounded or excessive (in which case we'll explain). If we can't fully honour a request, we'll tell you why.

If You Are in Canada

Seranthia Inc. is an Ontario company and Olvi's servers are in Canada, so Canadian privacy law is our baseline: the federal Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's Personal Health Information Protection Act, 2004 (PHIPA) where it applies, and Québec's Act respecting the protection of personal information in the private sector (Law 25) for Québec residents.

Accountability and our Privacy Officer. Seranthia has designated a Privacy Officer who is accountable for the personal information we hold and for the practices described in this policy — the person in charge of the protection of personal information for the purposes of Law 25. You can reach the Privacy Officer at privacy@olvi.io, or by writing to Seranthia Inc., Ontario, Canada.

Identified purposes and meaningful consent. We tell you why we are collecting your information before or at the time we collect it (Sections 1 and 3), we ask for your consent in clear language rather than burying it (Section 2), and we limit what we collect to what those purposes actually need. If we ever want to use your information for a new purpose, we will explain it and ask you again.

Withdrawing consent. You can withdraw any consent you have given, at any time and as easily as you gave it — through the app's settings for feature-level consents such as a connected wearable or a linked provider, or by writing to privacy@olvi.io. We will tell you plainly what withdrawing means for the features that depend on it, then stop the relevant processing within a reasonable time, keeping only what the law requires us to keep.

Access, correction, and portability. You can ask for a copy of the personal information we hold about you and ask us to correct anything inaccurate or incomplete. Where the law gives you a portability right — including the data-mobility right under Law 25 — we will provide the computerized personal information you gave us in a structured, commonly used technological format.

Automated decisions. If a decision about you is reached exclusively by automated processing, Law 25 gives you the right to be told, to learn what information and factors were used, to have that information corrected, and to have a person review the result. Section 4 explains how that works in Olvi, and we extend it to every user.

Breach notification. If a confidentiality incident or privacy breach involving your personal information creates a real risk of significant harm to you, we will notify you and the appropriate regulator — the Office of the Privacy Commissioner of Canada, and the Commission d'accès à l'information du Québec for Québec residents — as promptly as the law requires. We keep a register of confidentiality incidents, as Law 25 requires.

Information processed outside Canada. Your information is stored in Canada. Where a service provider carries out some processing outside Canada — or, for Québec residents, outside Québec — such as AI analysis of a meal photo, we assess the privacy implications before that processing begins, as Law 25 requires, and we put contractual and technical safeguards in place. While information is in another country, it may be accessible to that country's courts, law enforcement, and national-security authorities under their laws.

Olvi and PHIPA. Olvi is a direct-to-consumer wellness app. Seranthia is not a health information custodian under PHIPA, and the information you give Olvi directly is not personal health information held by a custodian — it is personal information protected by PIPEDA, by Law 25 where it applies, and by this policy. If you choose to link a clinic, provider, or wellness program (Section 6(b)), the copy of your information that lands in that organization's records is held by them, and PHIPA or the equivalent law of your province governs what they do with it. If Seranthia ever handles personal health information on a custodian's behalf, it does so under a written agreement that applies the safeguards that law requires.

Making a complaint. Please come to us first at privacy@olvi.io — we would much rather fix it. If our answer doesn't satisfy you, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), to the Information and Privacy Commissioner of Ontario (ipc.on.ca) where PHIPA applies, or, if you live in Québec, to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

11. Regional Rights (EU/UK and California)

If you are in the EU or UK: we process your personal information on one or more lawful bases — performing our contract with you, your consent, our legitimate interests (such as operating, securing, and improving Olvi), and legal compliance. Health-related information is "special category" data, which we generally process based on your explicit consent.

You have the rights described in Section 10, plus the right to object to or restrict certain processing, and to lodge a complaint with your local data protection authority (such as the UK's Information Commissioner's Office). For cross-border transfers, we use recognized safeguards such as standard contractual clauses.

If you are a California resident: you have the right to know what personal information we collect and how we use and disclose it, to request access and deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights. We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising. You may also have rights regarding sensitive personal information (which includes health information). For Olvi's detailed U.S. consumer-health-data practices, see Section 12. To exercise your rights, contact us (Section 15).

12. U.S. Consumer Health Data Notice

This is a dedicated notice about your consumer health data — the nutrition, weight, activity, and health information you share with Olvi. It explains what we collect, why, who we share it with, and the rights you have, and you can access, delete, or withdraw your consent at any time.

This Consumer Health Data Notice ("Notice") supplements Olvi's U.S. Privacy Policy and applies specifically to "consumer health data" as defined under U.S. state consumer-health-data laws, including Washington's My Health My Data Act (MHMDA), Nevada's SB 370, and comparable laws. It is provided as a separate, dedicated notice and forms part of Olvi's U.S. Supplemental Terms (see "Additional Terms for U.S. Users" in our Terms & Conditions).

Capitalized terms not defined here have the meaning given in this Privacy Policy.

A Note on HIPAA

Olvi is a consumer wellness and nutrition app. Seranthia is not a health plan, a healthcare provider, or a healthcare clearinghouse, and it is not a "covered entity" or a "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA). Information you give Olvi directly is therefore not HIPAA "protected health information," and HIPAA's rights and procedures do not apply to it. We do not describe Olvi as HIPAA-compliant, because HIPAA is not the law that governs this relationship.

That does not leave your information unprotected. It is protected by this Privacy Policy, by this Notice, by our Terms & Conditions, and by applicable U.S. federal and state law — including the state consumer-health-data laws described below, which in several respects give you more than HIPAA would. If Seranthia ever handles protected health information on behalf of a HIPAA-covered organization, it does so as a business associate under a written business associate agreement, and HIPAA governs that data — but that is a separate arrangement with that organization, and it does not change how your own direct use of the app is treated.

What "Consumer Health Data" Means — and the Standard We Apply

Different states define health data differently. Rather than treat you differently depending on where you live, we apply the broadest, most protective standard to every U.S. user. We treat as "consumer health data" any information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status — or that qualifies as consumer health data, sensitive data, or health data under any applicable U.S. state law.

We apply the commitments and rights in this Notice to that data for all U.S. users, regardless of your state of residence. Where a specific state grants you a right beyond what is described here, that right also applies to you.

Categories of Consumer Health Data We Collect

We may collect or receive the following categories of consumer health data, only as you provide them or authorize them:

Health profile and conditions — health conditions you choose to share (such as diabetes or hypertension), allergies, and dietary or medical restrictions.
Body measurements and metrics — height, weight, and (if you connect a device) related measurements such as heart rate or other physiological readings.
Nutrition and food data — your meals, food and beverage logs, eating times and patterns, and the calorie and macronutrient information generated from them.
Activity data — exercise and activity you log, and activity, sleep, or glucose data imported from a wearable or health platform you choose to connect.
Health and wellness goals — for example, "manage blood sugar" or "lose 10 lbs."
Meal and profile images — photos you submit, which may reveal personal or bodily information.
Inferences — insights about your nutrition, habits, or health status that Olvi derives from the above to personalize your experience.

We collect only what is necessary for the purposes below, and sharing any of this data with Olvi is your choice.

Sources of Consumer Health Data

We collect consumer health data from:

You — directly, when you create your profile, log meals, set goals, or contact us.
Your device — through your use of the App, where you grant the relevant permissions (such as camera or photo access).
Services you connect — wearables, fitness trackers, or health platforms (for example, Apple Health or Google Health Connect) that you choose to link, subject to the permissions you set.

We do not buy consumer health data from data brokers.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data to:

provide, personalize, secure, and improve the Service — including estimating nutrition, setting your goals, and generating insights and coaching;
respond to your requests and provide support and account communications;
with your consent, support optional activities such as research, surveys, or programs you join;
create de-identified or aggregated data where reasonably possible; and
comply with our legal obligations.

We use consumer health data only for purposes that are necessary to provide what you have requested, or for which you have given consent.

How We Share Consumer Health Data — and How We Don't

We share this data only to run Olvi for you, or with a provider or program you choose to connect.

Service providers (processors). We share consumer health data with vendors who operate Olvi on our behalf — such as secure cloud hosting (located in Canada) and AI image-analysis services — under contracts that bind them to protect it and use it only for us.
A provider or program you connect. If you choose to link a healthcare provider, dietitian, coach, or wellness program, we share the relevant data with them, with your separate consent, to support that connection. You can disconnect at any time.
De-identified research. We may share de-identified or aggregated data that cannot reasonably identify you, with partners bound to protect it and use it only for the approved purpose.
Legal requirements and business transfers. We may disclose data where required by law or in connection with a merger, acquisition, or sale, as described in this Privacy Policy.

We obtain your separate, specific consent before sharing consumer health data with a third party, except where the law permits sharing without consent (such as with our processors under contract).

Your Consumer Health Data Rights

For all U.S. users, you have the right to:

Access the consumer health data we have collected about you;
Confirm whether we collect, share, or sell your consumer health data, and the categories of third parties with whom we share it;
Delete your consumer health data; and
Withdraw consent to our collection or sharing of your consumer health data.

We will respond within the time required by applicable law. We will not discriminate against you for exercising these rights. If you withdraw consent or request deletion, some or all features of Olvi may stop working.

How to Submit a Request and Contact Us

For questions about this Notice or our consumer-health-data practices, email privacy@olvi.io. To protect you, we may need to verify your identity before acting on a request.

13. Children's Privacy

Olvi is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us and we'll delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We'll revise the "Last Updated" date above and, for material changes, notify you (for example, by in-app notice or email). Continued use of Olvi after a change takes effect means you accept the updated policy.

15. Contact Us

For any privacy question, request (access, correction, deletion, withdrawal of consent), or complaint:

Privacy contact: privacy@olvi.io
General support: support@olvi.io
Mailing address: Seranthia Inc., Ontario, Canada

Our Privacy Officer

Seranthia Inc. has designated a Privacy Officer who is accountable for the personal information described in this policy, and who is the person in charge of the protection of personal information for the purposes of Québec's Law 25. Write to the Privacy Officer at privacy@olvi.io, or to Seranthia Inc., Ontario, Canada, marked for the attention of the Privacy Officer.

If You Are Not Satisfied

Come to us first — most things are quickest to fix directly. If our answer doesn't satisfy you, you can escalate: to the Office of the Privacy Commissioner of Canada (priv.gc.ca), to the Information and Privacy Commissioner of Ontario (ipc.on.ca) where PHIPA applies, or, if you live in Québec, to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). If you are in the EU or UK, you can complain to your local data protection authority (Section 11). Complaining to a regulator does not affect any other right or remedy you have.

Please describe your question or request and include your contact details. We may need to verify your identity before acting on certain requests, to keep your data safe. Thank you for reading — and for trusting us with your health journey. Your data is in good hands with Olvi.