From the first moment you interact with Ovum, we are collecting data. Sometimes you provide us with data, sometimes data about you is collected automatically. Here’s more information about the data we collect, which falls into three broad categories: 1) information you provide us directly, 2) information we collect about you automatically, and 3) information we collect from others (third parties). We’ll explain what sort of data falls into these three categories below.

Information you provide us directly

a) Account Information

Some information is required to create an account on Ovum, such as your first name, PIN-code, gender, year of birth, living status (regional, rural or remote).  In addition, the following information may be gathered, depending on the version of Services you are using:

• Version 1.0 of Ovum (Trial Version)

  • Email address

• Version 2.0 of Ovum (Commercial Release)

  • No additional information other than as listed above.

When you register an account with us, we will issue you with a personal identification number (PIN) or password, which we will use instead of your name wherever possible to allow us to help keep your information provided for AI training purposes de-identified.

b) Additional information

To allow you to use certain features of Ovum, you may choose to (but you do not have) provide us with additional information, like height, weight, health symptoms, health tracking (your menstrual cycle, any data you choose to share through integration with Apple Health (optional)), past medical history, antenatal history, number of times you have seen a doctor, smoking and drinking history, diet (Voluntary Information).

We take reasonable precautions to ensure that we de-identify your information. You must not include in the Voluntary Information your full name, email address or other identifying information in any input in Ovum other than the account set up stage (this includes free text entry and document or photographic uploads), as it cannot be guaranteed that this information will be flagged as information which may identify you.

Information we collect automatically

a) Usage Information

When you access or use Ovum, we receive certain usage or network activity information. This includes information about your interaction with Ovum, for example, when you view or search content, create or log into your account, when you opt in to connect to Apple Health and any application you have connected to this, for example, a menstrual tracking application, your sleep data, energy expenditure, heart rate, respiratory rate, and body temperature.

Information we receive from third parties

If you choose to connect your account on Ovum to your account on another service (such as Apple Health or Android equivalent) (Other Service), we may receive information from the Other Service. You can stop sharing the information from the Other Service with us by removing our access to that Other Service.

We use the information we collect for the following purposes.

To ensure Ovum is tailored for women

Using the information we collect, we are able to deliver Ovum in a tailored, and personalised manner. For example, we need to use your information to provide you with the most accurate and relevant information based on the symptoms you are reporting, the questions you are asking, and other medical reports or biometric data you are inputting. This will also help us give you customer support.

To constantly improve Ovum for its users

We use the information we collect to improve Ovum and to develop new features or improve errors. For example, we use the information to troubleshoot and protect against errors; perform data analysis and testing; conduct research and surveys; and develop new features and Services.

We also use your information to make inferences and show you more relevant content. Here are some examples (this is not a full list):

• Voluntary Information provided to us, like your height, weight, gender and age, menstrual and antenatal history, past medical history allows us to improve the experience / accuracy of the information Ovum provides you when you have a question about a specific symptom. For example, if you asked Ovum about stomach pain, and you had let Ovum know you were pregnant, it would provide different information to if you were not pregnant and had a history of irregular periods.

• Based on your health data inputs (symptoms, biometric data, medical reports), we provide you with customised insights, and recommendations to help you better understand and manage your health. Ovum may provide you with lifestyle suggestions (for example diet plans, or exercise plans), but will not give you treatment advice (for example what medications you should take). However, Ovum can provide you with general information about medications you are already taking. These inferences are suggestions only, and do not constitute specific health or medical advice [see Terms of Use].

To train AI data sets using de-identified data

We use some aggregated or de-identified aspects of the information we hold about you such as your first name, year of birth, gender, age, location, reported symptoms, past medical history, medication history, allergies, smoking/drinking/diet history in order to share with research institutions, our own and third party artificial intelligence (AI) providers for the purposes of helping train AI models on women’s health data, and for conducting research with partners such as hospitals, universities and healthcare providers on women’s health in general. The aim being to close the gender health gap, and improve gendered AI datasets. In order to protect your privacy, we will restrict the nature of such information shared with third parties so that it will not include any information which identifies you, or poses a risk of re-identification. For example; your name, email address will be replaced with a vector number within our background servers and all data will be aggregated so that it will not be linked to any particular individual. However, the Trial Version (v1.0) of Ovum will have the following exclusion:

Version 1.0 of Ovum (Trial Version)

Ovum admin personnel may have access to view individual user data (including limited identifiable data such as email address and year of birth) in order to conduct user-testing. This information may be transferred or shared with third parties in an aggregated or encrypted format, and is deleted after 30 days.

Version 2.0 of Ovum (Commercial Release)

No additional information other than as listed above.

Communicate with you

We use your information when needed to send you service (Ovum) notifications and respond to you when you contact us. We also use your information to promote new features or products that we think you would be interested in. You can control marketing communications and most Service (Ovum) notifications by using your notification preferences in account settings or via the “Unsubscribe” link in an email.

Promote safety and security

We use the information we collect to promote the safety and security of Ovum, our users and other parties. For example, we may use the information to authenticate users, protect against fraud and abuse, respond to a legal request or claim, conduct audits and enforce our terms and policies.  

Depending on which features of Ovum you use, we will process your personal information based on one or more of the following legal bases (we have included some examples):

Bases for processing your information

Your consent: During your onboarding to Ovum there will be clear terms and conditions which you can read, that will explain what data is being stored, how it is being used, and the limitations of artificial intelligence. You give us permission to process health data in order to use Ovum. Regardless of which version of Ovum used, all data will be de-identified or aggregated and encrypted wherever possible, and especially if shared outside of Ovum, meaning it cannot be linked back to a specific user (subject to, and please read the expectation not to include identifiable information in the Voluntary Information in section 1a.i. above).

Version 1.0 of Ovum (Trial Version)

Your consent includes permission for us to share de-identified, encrypted data (which does not identify you) with third parties used to provide Ovum, such as Open Access AI.

Your consent permits Ovum to view the following entered identifiable data for research and development purposes:

• Year of birth (YOB)

• First (given) name

• Email address

Version 2.0 of Ovum (Commercial Release)

This version of Ovum may use AI models hosted within Ovum’s own infrastructure, meaning that it is not shared with third parties to provide support of AI-enabled features.

Below, we describe the purposes for which we process your personal information and our lawful bases for doing so, including some basic examples:

To fulfil our contractual obligations to you in order to provide Ovum to you: We may process your personal information to fulfil our contractual obligation to you such as account management and other administrative purposes.

Legitimate interest: We may process your personal information in relation to our interests in providing Ovum to you, including our interest in protecting the security and integrity of Ovum. If we rely on this basis, our interests will not come before your rights.

Legal obligation: We may be obligated to process some of your personal information to comply with applicable laws and regulations.

For external processing: We may transfer information to our corporate affiliates, service providers, research partners and other partners who process it for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures.

Examples

1)  To support the existing functions of Ovum, including customisation of content and materials you see when you use Ovum.

Legal basis; Consent

Example :We use your health data to track and make recommendations regarding your health, and provide certain suggested articles or materials to read that may be of interest based on your information inputs, noting that Ovum are not a diagnostic tool, nor do they give personalised medical advice.

2) To respond to your comments, questions, and requests and to provide customer service.

Legal basis: Legitimate interest

Example:We may process your name and email to reply to your support request or to contact you about a specific query or question you have raised.

3) To monitor and analyse trends, usage, and activities in connection with our Services.

Legal basis: Legitimate interest

Example: We may analyse your browsing activity in Ovum to ensure Ovum functions as it should in response to your interactions, fix issues, and  improve your future experience.

4) To provide de-identified information to artificial intelligence (AI) models and medical research databases.

Legal basis: Consent

Example: We may share your non-personal, de-identified information (untraceable back to you) to artificial intelligence (AI) models for the purposes of: training the AI models on women’s health data for the purposes of medical research.

(This is subject to the expectation that you do not include identifiable information in the Voluntary Information, see section 1a.i. above).

Principles of Processing

Data minimisation and purpose limitation: We will not process personal information in a way that is incompatible with the purposes for which it has been collected or authorised by you or collect any personal information that is not needed for the mentioned purposes.

No sale of personal information: We never sell the personal information of our users. We do not share your personal information except in the limited circumstances described above.

It does not matter what country, state, or region you come from; we are committed to providing you with individual privacy rights standard to the General Data Protection Regulation (GDPR) in relation to your personal information.

What are these rights?

Correction of your personal information: If you believe that your personal information is inaccurate, you have the right to contact us and ask us to correct such personal information.

Restriction of processing: You have the right to request that the processing of your personal information be restricted in some circumstances. For example, you have the right to request the restriction of your personal information if you contest the accuracy of your personal information and we need some time to verify its accuracy.

Access to your personal information: You have the right to request information about what personal information we process about you, to access all your personal information, and to receive a copy of it, including in a structured and portable form PDF.

Erasure of your personal information:You may ask us to erase your personal information if you withdraw your consent to processing, or if you believe such processing is unlawful. Please be aware that erasing some personal information may affect your experience using certain features of Ovum that rely on historical data. For the purposes of de-identified information only, this data that may be used to train AI models may not be able to be fully erased. However, this is not strictly personal information and does not identify you, and is generally deleted every 30 days. We will make best efforts to request that this information is erased, but we do not guarantee that it will be. As between different versions, the following additional information applies:

Version 1.0 of Ovum (Trial Version)

We recommend that you do not erase information during the trial, as this may have an impact on data quality and user testing (however, we will action an erasure request if you make it).

Version 2.0 of Ovum (Commercial Release)

No

Objection to the processing of your personal information: In some cases, you can object to the processing of your personal information, for example, if we process it under the legitimate interest basis, by emailing us at  support@ovumtechnology.com.

How to exercise your privacy rights

Email us at support@ovumtechnology.com to exercise your privacy rights.

We will address your request within 30 days after receipt. It can take us up to 90 days in some cases, for example for full erasure of your personal information stored in our backup systems. We will let you know if we need more time and explain the reasons for the delay.

Please keep in mind that if we receive a vague request, we may contact you to better understand the request before doing anything. We may also refuse to comply with or charge a reasonable fee for a request that is manifestly unfounded and/or excessive (repetitive) requests.

We will require you to prove your identity. Normally, we will verify that the request is coming from the same email that you provided when registering. If you have not registered your account, we may ask you to undergo additional verification checks to ensure we can appropriately respond to you.

You may have the right to lodge a complaint with your local data protection authority about any of our activities. If you have any concerns about our privacy practices, please let us know by emailing  support@ovumtechnology.com.

Types of Processing

Processing to make Ovum run: In some situations, we engage other companies to process your personal data on our behalf. We refer to these companies or service providers as “processors.”

Processors are companies that help us run Ovum, support our communication with you, or perform other Services-related activities. They process certain personal information on our behalf to accomplish the goals related to the functions and deliver Ovum and associated activities. We remain responsible for any acts or omissions of our processors, and we enter into data processing contracts with them to the extent required by applicable law.

Here are some of the main processors we rely on:

i) Open Access A.I.

Type of data:

• All de-identified information provided (no information which identifies you); and

• Any Voluntary Information entered by you into Ovum after the onboarding stage.

Purpose:

• Access to, analysis of and summarising of health information

• Provision of personalised and tailored health advice

ii) Google Cloud (Firebase)

Type of data:

• All personal information provided

Purpose:

• Storage of all personal data when you use Ovum

De-identified  Information We may aggregate, anonymise, or de-identify your personal information so that it cannot reasonably be used to identify you. We may share such data with other third parties such as academic research institutions or use the data for statistical purposes. For example, we may share or use general age and demographic information and aggregate statistics about certain activities or symptoms from data collected to help identify patterns across users in articles, blog posts, and scientific publications. Sharing such data may contribute to the advancement of scientific research on female health.

To ensure all identifying information is properly de-identified, it is important that you do not include in the Voluntary Information any identifying information such as your name, email address or phone number (see section 1a.i. above).

For certain targeted academic or user research studies, we will contact you for, and rely on, your consent. For example, the Trial Version 1.0 of Ovum relies on your express and informed consent. You can withdraw your consent at any time by emailing us at support@ovumtechnology.com.

Except as set out below, we will retain your personal information for as long as needed to provide you with Ovum or otherwise fulfil the purposes for which it was collected.

Impact of account deactivation/requests to erase personal data: At any time, you can deactivate your account and erase your personal information by emailing  support@ovumtechnology.com. All data on OpenAI will be deleted automatically within 30 days. Our data deletions practices in each version of Ovum are described below:

Version 1.0 of Ovum (Trial Version)

• We will action a request to deactivate your account and delete your personal information in Ovum within thirty (30) days.

• For the purposes of the trial period only, Ovum will delete data from our cloud server as soon as reasonably possible after the conclusion of the trial.

Version 2.0 of Ovum (Commercial Release)

• We will address your deletion request within 30 days after receipt.

• It will take us up to 30 days in some cases to complete full erasure of your personal information stored in our backup systems. In case of a full erasure request, as noted under “Erasure of your personal information” section above, de-identified data does not identify you and while we may make reasonable efforts to delete this data where possible, we do not guarantee it.

Limitations: You should be aware that although we will anonymise or otherwise de-identify your data where possible, we may retain certain personal information and other information after your account has been terminated or deleted as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Our obligations regarding security: We work hard to keep your data safe. We use a combination of technical, administrative, and physical controls to maintain the security of your data.

This includes:

• Encryption of your personal data in transit and in rest

• Protection of data integrity via information security management processes

• Organisational and legal measures: For example, our employees have different levels of access to your personal data and only access your personal data for limited and necessary purposes required for the operation of Ovum. We impose strict rules on our employees for any disclosure, unauthorised access, alteration, destruction, or misuse of your personal data.

Your obligations regarding security of your account: Please protect your password, and for an added layer of protection,when you sign up with Ovum you will be required to set a pin code. Do not share your password or allow others to use your mobile device.  

No method of transmitting or storing data is completely secure, however. If you have a security-related concern, please contact  support@ovumtechnology.com.

What happens in the event of a security breach: If we learn of a security systems breach, we may either post a notice or attempt to notify you by email and will take reasonable steps to remedy the breach as specified in applicable law and this Privacy Policy. If we learn of a potential personal data breach, together with other actions referred to in the Privacy Policy, we will take actions to remedy the breach as appropriate under the circumstances, which may include logging you out from all the devices, resetting a password (sending a temporary password for you to apply), and performing other reasonably necessary activities.

If you want to report a security incident related to Ovum, please email us at privacy@ovumtechnology.com.

We are based in Australia. Personal information we collect is transferred to and processed in the United States (US) and to other countries.

Transfers of personal data outside of the European Union, the European Economic Area, and the United Kingdom

Personal information in the European Union (EU), the European Economic Area (EEA), and the United Kingdom (UK) is protected by the General Data Protection Regulation and Data Protection Act 2018 (GDPR), but some other countries may not necessarily have the same standard of protection for your personal information.

Please review the “Your Rights To Access and Control Your Personal Information” section above for how your account settings and tools allow you to exercise your rights under the GDPR to access and control your personal information.

United States Privacy Disclosures

We do not sell your information for monetary gain.

Under certain state laws (including California), if we disclose personal information to a third party for any benefit, this can be considered a “sale” or “share” or personal information, even if the third party does not use the personal information for any other purpose. We “share” personal information if we disclose personal information to a company for purposes of cross-context behavioural advertising.

Request to opt out: While we do not sell your personal information for monetary gain, you have the right to opt out of our “sale” or “sharing” of your personal information (as defined under California or other US state legislation) to our analytics and advertising partners. This statement does not apply to aggregated or de-identified data, which may be shared in this way (but you may still opt out). To exercise this right, contact us at  support@ovumtechnology.com.

Limiting the use of sensitive personal information: Sensitive personal information that we process is limited to only those purposes that are necessary to provide products or services to you.

Request to know/access: In addition to the other rights mentioned in this Privacy Policy, you have the right to request to know (i) the personal and sensitive information we have collected about you and our purposes of use; and (ii) the categories, sources, and third parties involved in personal information we have collected about you or “sold” or disclosed in the past 12 months. You may exercise your right to request to know twice a year, free of charge.

Shine the Light: California residents may also request information from us once a calendar year about any personal information shared with third parties for their own direct marketing purposes. We don’t share information with third parties for their own marketing uses, but please email us at  support@ovumtechnology.com if you have questions. You’ll need to specify “California Privacy Rights Request” in the subject line of the email, and also include your name, street address, city, state, and ZIP code.

References to “personal information” in this policy include “sensitive/personal information” as defined under California laws.