Privacy Policy

1AI Service Provider (OpenRouter) Compliance

Ovona leverages artificial intelligence technology provided by third-party services to enhance your baking experience. This section explains how your data is handled when using AI-powered features.

Data Transmission Scope

We clearly distinguish between personal data and non-personal data. Only non-facial data necessary for AI functionality is transmitted, specifically:

• Photographs of your brioche-making stages (kneading, proofing, shaping, baking)
• Recipe information and baking notes you create
• Anonymized usage patterns for dough state assessment

Third-Party Disclosure

Our AI service provider is OpenRouter. We explicitly disclose this partnership so you understand who processes your data for AI functionality.

User Authorization

Before transmitting any data to OpenRouter, Ovona displays a clear consent dialog that:

• Explains the specific purpose of data transmission
• Identifies OpenRouter as the receiving party
• Describes what data will be shared and why
• Requires your explicit active consent before any data is sent

Third-Party Safeguards

OpenRouter maintains data protection standards equal to or exceeding industry requirements. OpenRouter:

• Processes your data only for the agreed-upon purpose (dough assessment, timing predictions, recipe learning)
• Does not retain any user data after processing is complete
• Destroys all data immediately after the AI function finishes
• Does not misuse, resell, or transfer your data to any other parties

No Data Storage by Ovona

2Information Collection and Use

We collect and use information through the following categories to provide and improve Ovona's services:

Types of Information Collected

1. User-Uploaded Content: Photographs of your brioche-making stages, recipe entries, baking notes, and personal baking logs that you voluntarily submit to the App.
2. System-Authorized Data: Information accessed through device permissions you grant, including camera access for photographing baking stages and photo library access for saving baking images.
3. Device Information: Basic device details such as device model, operating system version, and App version to ensure compatibility and troubleshoot issues.
4. Usage Information: Anonymous data about how you interact with the App, including feature usage frequency and navigation patterns, collected automatically to improve user experience.

Purpose of Data Use

Each category of data is used exclusively for the following purposes:

• Baking Documentation: To store and display your baking photos, recipes, and notes within your personal library.
• AI Analysis: To assess dough state, predict optimal baking timing, and generate personalized recipe recommendations.
• Service Improvement: To identify bugs, optimize performance, and enhance features based on anonymous usage patterns.
• Customer Support: To respond to your inquiries and resolve technical issues.

Collection Methods

Data is collected through:

• Active Submission: You directly provide information when uploading photos, creating recipes, or writing notes.
• Permission-Based Access: You grant explicit permission for camera, photo library, and microphone access through iOS system dialogs.
• Automatic Collection: Basic device and usage data is collected automatically through standard iOS frameworks.

3Information Sharing and Third-Party Processing

We are committed to transparency about how your information is shared with third parties.

Sharing Scenarios

Your information is shared only in the following limited circumstances:

• OpenRouter: Non-facial baking images and recipe data are shared with OpenRouter solely to provide AI-powered dough assessment and timing prediction features.
• Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

Third-Party Processing Rules

Third-party partners must adhere to strict data handling requirements:

1. Data may only be processed for the specific purpose disclosed to you at the time of consent.
2. No data may be retained after the processing function completes.
3. All data transmission uses industry-standard encryption protocols.
4. Third parties are contractually prohibited from using your data for any purpose other than providing the agreed-upon service.

Our Commitment

4User Data Rights

You have comprehensive rights regarding your personal data. This section outlines what these rights are and how you can exercise them.

Your Rights

1. Right to Access: You have the right to request a copy of all personal data we hold about you.
2. Right to Correction: You have the right to request correction of any inaccurate or incomplete personal data.
3. Right to Deletion: You have the right to request deletion of your personal data, subject to certain legal exceptions.
4. Right to Data Portability: You have the right to request export of your data in a commonly used, machine-readable format.
5. Right to Withdraw Consent: You have the right to withdraw consent for data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
6. Right to Account Deletion: You have the right to delete your account and all associated data.

How to Exercise Your Rights

You can exercise your data rights through the following methods:

• In-App Settings: Navigate to Settings > Privacy > Data Management to access, export, or delete your data.
• Account Deletion: Go to Settings > Account > Delete Account to permanently remove your account and all associated data.
• Email Request: Send a detailed request to Ovona@gmail.com with the subject line "Data Rights Request" and specify which right you wish to exercise.

5Data Security and Children's Privacy

Security Measures

We implement comprehensive security measures to protect your data:

1. Encryption: All data transmissions between your device and our servers use TLS 1.3 encryption. Data at rest is encrypted using AES-256 encryption standards.
2. Access Controls: Strict access controls limit who can access your data. Only authorized personnel with a legitimate business need can access user data, and all access is logged and monitored.
3. Data Minimization: We collect only the minimum amount of data necessary to provide our services.
4. Regular Security Audits: We conduct regular security assessments and vulnerability testing to identify and address potential risks.
5. Incident Response: We maintain a comprehensive incident response plan to address any potential data breaches promptly and effectively.

Children's Privacy

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us immediately at Ovona@gmail.com so we can take appropriate action.

6Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

Update Mechanism

1. Minor Updates: For non-material changes, we will update the "Last Updated" date at the top of this policy. Continued use of the App after such changes constitutes acceptance of the updated policy.
2. Material Updates: For significant changes that materially affect your privacy rights, we will:

• Display a prominent in-app notification before the changes take effect
• Send an email to the address associated with your account
• Require your explicit acknowledgment of the updated policy before you can continue using certain features

Effective Date

All policy updates become effective on the date specified in the updated policy. If no specific date is stated, updates become effective immediately upon posting.

Review Encouraged

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of Ovona after any modifications indicates your acceptance of the updated policy.

7Additional Provisions

International Data Transfers

Your information may be processed in countries other than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Cookies and Similar Technologies

Ovona does not use cookies or similar tracking technologies. As a native iOS application, we do not track your browsing activity across third-party websites.

California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. Ovona does not sell personal information.

European Privacy Rights

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including those described in the "User Data Rights" section above.