Privacy Policy
Effective April 24, 2026
Ovamira (Laurie Stach Holdings LLC, “we,” “us”) operates a healthspan tracking and protocol generator for adults managing training, sleep, recovery, and related health signals at www.ovamira.com. This page explains what we collect, how we use it, and the rights you have.
What we collect
- Account info: your email and password (handled via Supabase Authentication).
- Health profile: health mode (perimenopause / pregnancy / postpartum / general), concerns you select, pregnancy status, and symptoms you log.
- Wearable data: via Fitbit and Oura OAuth - HRV, sleep stages, heart rate, activity metrics. We fetch only the metric types listed in the scopes you grant, and only for the time windows you view.
- Uploaded exports: CSV files you upload from wearable or nutrition apps. Parsing happens in your browser.
- Diagnostic logs: application error logs and sign-in events.
How we use it
We use your data to operate Ovamira: sign you in, save your profile, render your dashboard, and deliver the feature set of the product you're using. We do not use your data to target ads.
What we share
We do not sell your health data. We do not share your health data with advertisers, insurers, or employers. Your wearable data is only pulled to render your dashboard and generate recommendations for you.
Third parties we use
Supabase (authentication + token storage), Vercel (hosting), Fitbit + Oura (wearable data, under their respective APIs), OpenAI (only if features that generate text-based recommendations are used; content you submit is sent to OpenAI under their API data usage policy).
Retention
We retain your account data for as long as your account exists. If you delete your account, we delete your personal data within 30 days, except where we are legally required to keep records (e.g., tax records for invoices, or abuse/fraud logs).
Your rights
- Access and download your data by emailing support@ovamira.com.
- Correct or update your data from inside the app.
- Delete your account from Settings. Deletion is immediate; processor copies are purged within 30 days.
- If you are in the EEA or UK, object to processing or lodge a complaint with your data protection authority.
- If you are in California, request details of any disclosure of your personal information in the past 12 months. We disclose only to the processors listed above for the purpose of operating the service.
Children
Ovamira is not intended for anyone under 13 (or 16 in the EEA/UK). We do not knowingly collect data from children. If you believe a child has created an account, email support@ovamira.com and we will delete it.
Google API Services User Data Policy
Ovamira's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties, do not use it for advertising, and do not allow humans to read it except where necessary for security, to comply with law, or with your explicit consent.
Contact
Privacy questions: support@ovamira.com
Mailing address: c/o DelawareRegisteredAgent.com, 8 The Green, Suite A, Dover, DE 19901
Values shown in curly-brace placeholders will be replaced with real legal entity information before public release.