1. Information We Collect
We collect information necessary to provide, improve, and secure Ovvey:
- Account Information — your name, email address, and authentication credentials from Google or email sign-in.
- Conversations with Ovvey — messages, prompts, and AI responses, including files, images, or voice dictation you share.
- Personal Data You Save — reminders, tasks, notes, links, and documents in your Knowledge Hub, plus facts Ovvey remembers from conversation.
- Connected Accounts — Gmail (read-only) and Notion, if you connect them. Disconnect either any time from Settings.
- Device Calendar — with permission, read/write access to your device's native calendar.
- Location — with permission, used only for local time/region personalisation.
- Device and Technical Data — IP address (truncated), device platform, app version, error logs.
- Push Notification Tokens — used solely to deliver notifications to your device.
2. How We Use Your Information
- Provide, operate, and maintain Ovvey.
- Remember what matters to you and proactively surface reminders, insights, and suggestions grounded in your own history.
- Send push notifications and reminders you've opted into.
- Authenticate your identity and protect your account.
- Analyse aggregate, anonymised usage to improve the product.
- Comply with legal obligations under the DPDP Act 2023 (India) and other applicable laws.
We do not use your data to train AI models without explicit consent, and we do not sell your data.
3. AI Processing and Third-Party Models
- Messages and relevant context are sent to AI providers (OpenAI, Google Gemini) to generate responses, under their own privacy terms.
- Files and images may be processed for content extraction and summarisation.
- Web search queries go through Tavily — only the query is shared, not your account data.
- Voice dictation is transcribed on-device; Ovvey only receives the resulting text, never raw audio.
- Conversation memory may be stored via Supermemory, scoped to your account only.
AI outputs are informational and productivity aids, not professional advice. Ovvey supports your decisions; you make the final call.
4. Data Storage and Security
Your data is stored on Cloudflare's edge infrastructure using per-user isolated Durable Objects with SQLite. Files live in Cloudflare R2. All data in transit is encrypted via TLS.
- JWT-based authentication with short-lived, rotating tokens.
- Rate limiting on authentication endpoints.
- Per-user data isolation — your data lives in your own isolated store.
- IP address anonymisation for security logs.
5. Data Retention
- Account and personal data — retained until deletion.
- Conversation history — retained for the account's duration; older messages periodically pruned. Clear chat history anytime.
- Files and Knowledge Hub content — stored until deleted.
- Consent records — retained 7 years minimum for legal compliance.
Delete your account anytime from Settings → Account. Personally identifiable data is deleted within 30 days, except where retention is legally required.
6. Sharing and Disclosure
We do not sell, rent, or trade your personal data. Limited sharing only:
- Service Providers — Cloudflare, OpenAI, Google, Supabase, Supermemory, Tavily, each under data processing agreements.
- Connected Services You Authorise — Gmail (read-only) and Notion, revocable anytime.
- Legal Requirements — when required by law or to protect rights and safety.
- Business Transfers — you'll be notified before any transfer.
Ovvey is single-user — no one else can see your data unless you share it yourself.
7. Your Rights
Under the DPDP Act 2023 (India), you have the right to:
- Access — a summary of data we hold about you.
- Correction — fix inaccurate or outdated information.
- Deletion — delete your account and data from within the app or by request.
- Withdraw Consent — at any time.
- Nomination — nominate someone to exercise these rights on your behalf.
- Grievance Redressal — file a complaint if your rights are violated.
Contact privacy@flowhi.ai — we respond within 30 days.
8. Permissions Ovvey Requests
- Microphone & Speech Recognition — voice dictation into chat. No live, always-listening agent.
- Camera & Photo Library — sharing photos and attaching images in chat.
- Calendar — managing your schedule.
- Location — local time/region personalisation only, never tracking.
- Notifications — reminders and alerts you've opted into.
Every permission is requested only when first needed, and revocable anytime from device settings.
9. Cookies and Tracking
The Ovvey app doesn't use advertising cookies or third-party trackers. We use authentication tokens and local storage for your session and preferences, plus privacy-preserving aggregate analytics.
10. Children's Privacy
Ovvey isn't directed at individuals under 18. We don't knowingly collect data from minors — contact us if you believe we have, and we'll delete it promptly.
11. Changes to This Policy
Material changes are communicated via in-app notification or email at least 7 days before taking effect. Continued use after the effective date means you accept the update.
12. Contact Us
- Email: privacy@flowhi.ai
- Company: Flowhi Pvt. Ltd.
- Website: flowhi.ai