Privacy policy

Who we are

OvaReset is made by Zeeshan Waheed (“Zeeshan Waheed”, “we”, “us” or “our”). We are responsible for the personal information described in this policy. In the UK and the European Economic Area (EEA), this makes us the “controller” of that information.

This policy covers:

• this website and the OvaReset waitlist
• the OvaReset app for iPhone and Android
• emails we send you and messages you send us

OvaReset is coming soon, so parts of this policy describe how the app will work when it launches. We will tell you about any important change before it takes effect.

What we collect

When you join the waitlist

• Your email address.
• Which phone you use (iPhone or Android), if you tell us.
• The date you joined and which form on the page you used.
• The country your visit came from. We work this out from your connection, and we don’t save your IP address or exact location with your sign-up.

When you visit this website

We don’t use advertising or analytics cookies, tracking pixels or social media trackers. Our hosting provider, Cloudflare, processes technical information such as your IP address, browser type and the pages you request. This is needed to deliver the website and to protect it from attacks and abuse.

When you contact us

If you email us, we receive your email address, your message and anything else you choose to include.

When you use the app

• Your answers during setup: your goal, the symptoms you pick, the date of your last period, whether you have a diagnosis, your usual wake and sleep times, how you like to eat and how active you are.
• What you log: your afternoon energy, cravings, period flow, mood and sleep, plus the habits you check off and the lessons you finish. With medicine support, part of OvaReset Plus, you can also note side effects such as nausea or tiredness in a daily medicine check-in.
• Medicines, if you add them: their names, doses, reminder times and type (for example a GLP-1 medicine or metformin), and the doses you mark as taken. They stay on your phone and are never shared with the coach.
• Sleep, steps and periods from Apple Health or Health Connect, if you connect them (part of OvaReset Plus). OvaReset only reads this data, and never writes or changes anything there. It stays on your phone, as described in Your health information.
• Weight and waist, if you log them, and your meal plan and grocery list. They stay on your phone and are never sent to the coach.
• Your first name, if you choose to give it. It stays on your phone.
• Account details, if you create an account (you only need one for the coach and the optional password backup): your email address, or the details Apple or Google share when you sign in with them: an account ID, your email address and sometimes your name. Your name stays on your phone. Our servers keep your email address and the account ID. If you use Apple’s Hide My Email, we only see the private relay address.
• Your choices: when you agreed to our use of your health information, and whether you allow the coach to use your data, with the date of each choice.
• Coach messages and meal photos: if you use the coach (part of OvaReset Plus, with a few free questions and a free meal check on the free plan), the questions you ask, the meal photos you send and the answers you receive. They are saved on your phone. To create an answer, they pass through our servers to our AI provider, Anthropic. Our servers don’t keep them.
• Your automatic backup: unless you turn it off, a copy of your app data, locked on your phone with a key that never leaves your devices, then stored on our servers. The key is kept in your iCloud Keychain on iPhone or Google’s Block Store on Android, so your plan can come back after you reinstall the app or move to a new phone. We can’t read the backup, and it isn’t linked to your account or email address. You can also add a second backup locked with a password that only you know.
• How much you use the coach: the number of questions and meal checks you use each day, so we can apply the coach’s daily fair-use limit. On the free plan, we also keep how many of your free questions and meal checks you’ve used.
• Answers you report: if you report a coach answer, the question and the answer, without your account details or anything else that identifies you.
• Purchases: if you subscribe, Apple or Google tell our subscription provider, RevenueCat, which plan you chose, whether you are on a free trial and when your subscription renews. We never see your card or bank details.
• Technical information: when the app talks to our servers, our hosting provider processes your IP address to deliver the request and to protect against attacks. Our own logs record only the kind of request, whether it worked, how long it took and a scrambled version of your account ID.

Your reminders, including medicine reminders, are set on your phone, and we don’t receive them. We don’t ask for your location or your contacts, and we only receive the meal photos you choose to send.

Much of this is information about your health. Many laws treat health information as sensitive, for example as “special category data” in the UK and EEA, and as “consumer health data” in Washington State and Nevada. We treat it with extra care, as described in the next section.

Your health information

We designed OvaReset so that your health information stays with you.

• Stored on your phone, encrypted. Your answers, logs, habits, medicines, weight and waist, meal plans and reports are kept in encrypted storage on your phone.
• Apple Health and Health Connect data stays on your phone. If you connect Apple Health on iPhone or Health Connect on Android, OvaReset reads your sleep, steps and periods to fill in nights and days you didn’t log, show your steps and complete your cycle history. Your own answers always come first. This data is stored encrypted on your phone. It isn’t in your backups, and it’s never sent to our servers, the coach or anyone else. It’s never used for ads or marketing, and never sold. You can disconnect at any time in Me, which deletes what OvaReset brought in, and you can change OvaReset’s access in the Health app or in Health Connect.
• Only what a feature needs leaves your phone. Our servers keep your account details and your choices, not your health information in a form we can read. When you use the coach or a meal check, your question or photo, the recent conversation and the parts of your plan needed to answer it are sent securely through our servers to Anthropic, which creates the answer with its AI model, Claude. Your name, email address and account details are never sent with them. The coach never receives your medicines, your medicine check-ins, your weight and waist, or anything from Apple Health or Health Connect.
• A backup only your phone can open. So that you never lose your history, OvaReset backs up your data automatically. It’s locked on your phone before it’s uploaded, with a key we never receive, so we can’t read it. You can turn automatic backup off at any time in Me, then Backup, which deletes it from our servers. An optional extra backup is locked with a password only you know, and we can’t reset that password for you.
• Your health summary is yours to share. Your reports and health summary are created on your phone. If you connected Apple Health or Health Connect, they can include your steps and the sleep and periods brought in. If you choose, your health summary can also include your weight and waist. You decide whether to share them, and with whom.
• Never sold, never used for ads. We don’t sell health information, share it with advertisers or data brokers, or use it to build advertising profiles.
• Not used to train AI. Anthropic doesn’t use your messages or photos to train its models.

If we ever want to use your health information for a new purpose, we will ask for your consent first.

How we use information

• To run OvaReset: build your plan, show your reports and send your reminders. With OvaReset Plus, this includes medicine support (check-ins, tips and guides) if you add a GLP-1 medicine or metformin, and filling in your sleep, steps and periods from Apple Health or Health Connect if you connect them.
• To keep your automatic backup (and your password backup, if you add one) and give your data back to you after a reinstall or on a new phone.
• To answer your coach questions and check your meal photos, if you use those features, and to apply the coach’s daily fair-use limit.
• To manage your account and your subscription.
• To email you when OvaReset launches, if you joined the waitlist. Apart from that one email, we only write to waitlist members with important notices, such as a significant change to this policy.
• To reply when you contact us.
• To keep OvaReset and this website secure, and to prevent fraud and abuse.
• To meet our legal obligations.

The app builds your plan automatically from your answers. This has no legal or similarly significant effect on you, and you can change your answers at any time.

Our legal bases (UK and EEA)

If you are in the UK or the EEA, data protection law asks us to explain the legal basis for each use of your information.

Who we share information with

We share information only in these cases:

• Service providers that help us run OvaReset, under contracts that only let them use it to provide their service to us. They are listed below.
• Apple and Google, when you download the app, sign in with them or subscribe. They handle this information under their own privacy policies.
• People you choose, for example when you share your health summary.
• When the law requires it, or when it is needed to protect the safety, rights or security of our users, the public or Zeeshan Waheed. We share only what is legally required.
• If our business changes hands. If Zeeshan Waheed is involved in a merger, acquisition or sale of assets, your information may pass to the new owner. We will tell you before it becomes subject to a different privacy policy.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising, as those terms are defined in California law.

Our service providers

International transfers

We and our service providers may process information in countries other than the one where you live, including the United States. These countries may have different data protection laws. When we transfer personal information out of the UK, the EEA or Switzerland, we use legal safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or rely on an adequacy decision where one applies.

How long we keep information

• Waitlist: until OvaReset launches and for up to 12 months after, or until you unsubscribe or ask us to remove you, if that comes first.
• App data on your phone: until you delete it in the app (Me, then Privacy and data, then Delete my data, or Delete my account if you have one) or delete the app.
• Data from Apple Health or Health Connect: on your phone only, until you disconnect, delete your data or delete the app. It never reaches our servers or your backups.
• Account details and your choices on our servers: while your account is open. When you delete your account in the app, we delete them straight away, and they leave our database backups within 30 days. If you ask us by email, we delete them within 30 days of confirming your request.
• Your backups: we keep only your latest automatic backup and your latest password backup. We delete the automatic backup straight away when you turn it off or delete your data in the app, and after 18 months without a new backup. We delete the password backup when you turn it off or delete your account. Deleted backups leave our database backups within 30 days.
• Sign-in sessions: until you sign out, or after 60 days without use.
• Sign-in codes: a scrambled copy of each code for 10 minutes. The email address a code was sent to is removed within 2 days.
• Coach messages and meal photos: on your phone, until you delete them. Our servers don’t keep them. Anthropic deletes them within 30 days, unless they are flagged for breaking its usage policy (then up to 2 years) or the law requires it to keep them longer.
• How much you use the coach: 30 days.
• Answers you report: 90 days. They aren’t linked to you, so we can’t find or delete them for one person.
• Our server logs: up to 7 days. They don’t contain your IP address, email address, messages or health information.
• Proof of deletion: when you delete your account, we keep a scrambled copy of your email address and the date for 2 years, so we can show that we deleted your account.
• Emails you send us: as long as we need them to help you, and then for up to 2 years as a record of our conversation.
• Records the law requires, such as tax records: for as long as the law requires.

How we protect information

• Your app data is encrypted on your phone, with a key kept in your phone’s secure storage.
• Information sent between the app or this website and our servers is encrypted in transit.
• We store sign-in codes and session keys only in scrambled (hashed) form.
• Backups are encrypted on your phone (XChaCha20-Poly1305). The automatic backup uses a random key kept in your iCloud Keychain or Google Block Store; the password backup uses a key made from your password (scrypt). We never receive either key, so we can’t open your backups.
• Only the people who need access to run OvaReset can reach our systems.

No system is perfectly secure. If a security incident affects your information, we will tell you and the relevant authorities as the law requires.

Your rights and choices

Everyone

• Download your data, or delete your data and account, at any time in Me, then Privacy and data.
• Turn off the coach’s use of your data at any time in Me, then Privacy and data.
• Turn off automatic backup at any time in Me, then Backup. This deletes it from our servers.
• Disconnect Apple Health or Health Connect at any time in Me. This deletes what OvaReset brought in, and your own logs stay.
• Ask us for a copy of the information we hold about you, or ask us to correct or delete it.
• Withdraw your consent at any time. This doesn’t affect anything we did before you withdrew it.
• Unsubscribe from our emails with the link in any email.

UK and EEA

You also have the right to restrict or object to how we use your information, and to receive it in a portable format. You can complain to your data protection authority, which in the UK is the Information Commissioner’s Office (ico.org.uk). We would be grateful for the chance to help first.

United States

Depending on where you live, for example in California, Colorado, Connecticut, Virginia or Texas, you may have the right to know what we collect, to get a copy, to correct it, to delete it, and to opt out of the sale of personal information, targeted advertising and certain profiling. We don’t sell personal information or use it for targeted advertising, and we only use sensitive information, such as health information, to provide OvaReset. You can use an authorized agent to make a request for you. If we turn down your request, you can appeal by replying to our decision; if we deny the appeal, you can contact your state attorney general. We will never treat you differently for using your rights.

If you live in Washington State or Nevada, please also read our Consumer Health Data Privacy Policy.

Canada

You can access and correct your information, and withdraw your consent. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

How to make a request

Use the options in the app, or contact us using the details in Contact us. Requests are free. We may need to confirm your identity before we act, and we will reply within one month, or within 45 days where US law allows.

Cookies and tracking

This website doesn’t use cookies for analytics or advertising, and it doesn’t load tracking pixels or third-party scripts. Our hosting provider, Cloudflare, may set a strictly necessary cookie to protect the site from bots and attacks. The OvaReset app doesn’t use advertising identifiers or third-party tracking tools. We don’t track you across other websites or apps, and we honor Global Privacy Control signals.

Children

OvaReset is for people aged 16 and over. We don’t knowingly collect information from anyone under 16. If you think a child under 16 has given us information, please contact us and we will delete it.

Changes to this policy

We will update this policy as OvaReset grows, and change the “Last updated” date at the top. If a change is important, we will tell you by email or in the app before it takes effect, and ask for your consent where the law requires it.

Contact us

Questions about privacy, or a request about your information? Contact Zeeshan Waheed: