Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Ovia Health's policy indicates potential risks, including that email communications may be intercepted (risk_flags-1) and that user data transferred to the US from other countries may fall under weaker data protection (risk_flags-2). Furthermore, vendors providing AI tools to Ovia may use personal data to improve their services (data_use-1). Even after users delete their account or exercise other data rights, Ovia may still retain personal data for reasons such as legal compliance or business records (cancellation_renewal-1).
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Critical issues that need immediate attention, such as arbitration clauses or limitations of liability.
medium90% confidence
Email communications may be intercepted
Email communications may be intercepted, and users should opt-out if they do not wish to accept this risk.
Why it matters: Your personal data sent via email communications could be intercepted by unauthorized parties, leading to potential privacy breaches. To avoid this risk, you should opt out of such communications.
Despite precautions, email communications may be intercepted; you should opt-out if you do not wish to accept this risk.
We use your personal data to:, paragraph 1 · Citation strength: strong
medium90% confidence
User data may be subject to weaker data protection safeguards if transferred to the US
If users are resident outside the US, their data transferred to US servers may become subject to US jurisdiction, which may provide weaker data protection safeguards and rights than in their home jurisdiction.
Why it matters: If you reside outside the US, your data, when transferred to US servers, might be protected by weaker data protection safeguards and rights compared to your country of residence, potentially increasing your privacy risk.
If you are resident outside the US, your data may as a result become subject to US jurisdiction which may provide you with weaker data protection safeguards and rights than you would enjoy in your home jurisdiction. By accepting this Privacy Policy, using the Services or providing us with your personal data you acknowledge and consent to your personal data being transferred and/or processed as described in this Policy.
How the company collects, processes, and shares your personal information.
low85% confidence
Personal data used for AI development by vendors
Vendors providing AI tools to Ovia may use personal data to improve their services.
Why it matters: Your personal data might be used by external vendors to improve their AI tools that they provide to Ovia.
We may, to the extent permitted by law, allow vendors who provide us with AI tools to use personal data to improve the services they provide to us.
**What Categories of Personal Information Do We Sell or Share for Advertising or AI Training?**, paragraph 1 · Citation strength: strong
Cancellation & Renewal
Terms related to account termination, data retention post-cancellation, and subscription renewals.
medium90% confidence
Data retained after account deletion or exercise of rights
Even if users exercise their rights to delete data, Ovia may retain personal data for business records, legal compliance, security, litigation, or to protect rights or property.
Why it matters: Even if you delete your account or exercise other privacy rights, Ovia may still retain your personal data for several reasons, including legal or business obligations, meaning your data may not be fully erased as expected.
Even if you exercise your rights described above, Ovia may retain personal data to maintain proper business records, to comply with and as permitted by law, for security management and investigation, in connection with litigation, or to protect the rights or property of Ovia or third parties.
_Opting Out Through Browser-Based Global Privacy Controls_, paragraph 8 · Citation strength: strong
Gotchas
Less-than-obvious clauses tricky for consumers, such as limitations on GPC signals or specific data retention details.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
Specific commitments and features that benefit user privacy and control.
Protection95% confidence
No sale or sharing of personal data for advertising or AI training from June 2025 onwards
As of June 2025, Ovia will not show advertising to Consumer users and will not sell or share personal data for advertising. Additionally, Ovia does not sell personal data to third parties for the purpose of training AI.
Why it helps: This commitment helps protect your privacy by limiting how your personal data can be used for advertising and preventing its sale for AI training.
As of June 2025, Ovia no longer shows advertising to our Consumer users and does not sell or share any personal data for advertising. Ovia does not sell personal data to third parties for the purpose of training AI.
**What Categories of Personal Information Do We Sell or Share for Advertising or AI Training?**, paragraph 1 · Citation strength: strong
Protection95% confidence
No sale or sharing of personal data of users under 16
Ovia states that, to its knowledge, it does not sell or share any personal data of Ovia users under 16.
Why it helps: This protects the privacy of young users by explicitly stating that their personal data will not be sold or shared, which is crucial for vulnerable populations.
To its knowledge, Ovia does not sell or share any personal data of Ovia users under 16. Ovia no longer shows advertising.
**No Selling or Sharing for Advertising of Personal Data of Consumers Under 16**, paragraph 1 · Citation strength: strong
Protection90% confidence
Automatic data deletion for Consumer users
For Consumer users, all data categories are stored for the period the account is active plus 7 years, after which the data is automatically deleted.
Why it helps: This provides a clear retention period and an automatic deletion process for Consumer users, ensuring data is not kept indefinitely.
If you are a Consumer user, we store your data (all categories) for the period that your account is active and then for 7 years after that. After this period, we automatically delete your data.
Data Retention, paragraph 1 · Citation strength: strong
Protection90% confidence
Data deletion for Ovia+ users after benefit ends, with conversion option
For Ovia+ users, data is stored while benefits are active, and Ovia is generally required to delete data once benefits end. Users will be notified before deletion and offered the option to convert to a Consumer account to retain data.
Why it helps: This protects Ovia+ users by ensuring their data is generally deleted after their benefits cease and provides them with an option to retain their data by converting their account.
If you are an Ovia+ user, we store your data (all categories) during the period that you are receiving Ovia+ benefits. Ovia is generally required to delete your data after your Ovia+ benefits end. We will notify you before your data is deleted and, where possible, offer you the opportunity to convert your account to a Consumer account and retain your data.
Data Retention, paragraph 2 · Citation strength: strong
Protection95% confidence
Self-service controls for data subject rights
Users can use self-service controls within the Ovia apps to correct their data, opt-out of marketing communications, delete data and accounts, obtain data copies, get a summary of data processing, and withdraw consent.
Why it helps: These self-service controls give users direct and convenient ways to manage their personal data and exercise their privacy rights, enhancing user control and transparency.
You can use self-service controls within the Ovia apps to exercise your data subject rights to:
Data Retention, paragraph 6 · Citation strength: strong
Protection95% confidence
Right to not be discriminated against for exercising privacy rights
Users have the right not to be discriminated against for exercising their privacy rights and are encouraged to contact the helpdesk if they feel this has occurred.
Why it helps: This clause explicitly protects users from negative consequences for asserting their privacy rights, encouraging them to exercise these rights without fear of reprisal.
You have the right not to be discriminated against for exercising your privacy rights. Contact our helpdesk if you are concerned that this has happened to you.
_Opting Out Through Browser-Based Global Privacy Controls_, paragraph 4 · Citation strength: strong
Protection90% confidence
Appeal process for denied privacy requests
If a request to exercise rights is refused, users can send an email appeal to Ovia's Legal Department for review, which will be resolved within 30 days.
Why it helps: This provides users with a formal mechanism to challenge denied privacy requests, ensuring an additional layer of recourse and accountability.
If your request to exercise any of your rights is refused, you may send your notice of appeal by email to [legal@oviahealth.com](mailto:legal@oviahealth.com), for review by Ovia’s Legal Department. We will resolve your appeal within 30 days of the date of receipt of your email.
_Opting Out Through Browser-Based Global Privacy Controls_, paragraph 6 · Citation strength: strong
Protection95% confidence
Contact information for Data Protection Officer and complaint lodging
Ovia has a designated Data Protection Officer (legal@oviahealth.com) and provides contact information for questions or complaints. Data subjects in the EEA or UK can also contact Ovia's EU and UK representative (dpo@labcorp.com), and users may have the right to lodge a complaint with their local consumer protection or data protection authority.
Why it helps: This provides clear channels for users to address privacy concerns, ask questions, or lodge formal complaints, including specific contacts for different regions and authorities, enhancing accessibility and accountability.
Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at: