Privacy Policy

01 Who we are

Ovels is developed and operated by Ishan, an individual developer based in Varanasi, Uttar Pradesh, India ("Developer," "we," "us"). There is no company or corporate entity behind Ovels — you are contracting with an individual. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Developer acts as the Data Fiduciary for any personal data processed by the App.

02 Scope of this policy

This policy covers the Ovels mobile app and this companion website. It does not cover third-party services you connect to Ovels (e.g. Apple Health, Google Health Connect, Open Food Facts, app-store platforms), which have their own privacy policies that we don't control and aren't responsible for.

03 Data we collect

Because Ovels has no account system, no sign-up, and no login, we — the Developer — do not operate a server that receives or stores your personal data by default. Data is created and stored on your device. The categories below describe what the App itself collects locally, and what may leave your device only when a specific feature requires it.

Profile & onboarding data

Name, date of birth, gender, height, current weight, available equipment, primary goal (fat loss / muscle gain / strength / maintain), training level, and training frequency — collected once during onboarding and stored locally to calculate your calorie and macro targets.

Nutrition data

Meals logged by photo, typed description, or barcode scan; resulting calorie/macro estimates; custom foods and meal combos. Barcode lookups query Open Food Facts' public database (see §6).

Training data

Workout logs, exercises performed, sets, reps, weights, progressive-overload history, and AI-generated workout plans based on your stated equipment and any injuries you disclose.

Progress data

Weight-trend entries and progress photos you choose to add, plus any summary PDF you generate to share with a coach or doctor — that PDF is created and shared entirely at your direction.

Device health-store data

Where you grant permission, Ovels reads step count, sleep, and calorie-burn figures from your device's own health store — Apple HealthKit on iOS or Google Health Connect on Android. This happens on-device via the OS's own health APIs; we don't operate a separate health-data server.

AI Coach conversations

Messages you send to the AI Coach, and the app's own logged context (today's calories, recent workouts) used to ground its replies. Processed on-device when your hardware supports it, or via a cloud inference request when it doesn't — see §5.

Backups

A full local backup file containing everything above. You control where it's stored (e.g. your own device storage, your own cloud drive) — we do not host or receive a copy of your backups.

Usage analytics (opt-in only)

By default, usage statistics stay on-device and are visible only to you, in-app, under "Usage Insights." Nothing is sent anywhere unless you explicitly enable anonymous analytics, in which case only aggregate, non-identifying counters (e.g. feature-open counts) are transmitted — never meal content, health data, or coach conversations.

Technical data

Standard app-store telemetry (crash reports, install/update events, device model, OS version) may be collected by Apple, Google, or Indus Appstore under their own privacy policies when you install or update Ovels — this is platform-level data collection outside our control.

04 How we use data

• To calculate and display your calorie/macro targets, workout plans, and progress trends.
• To power the AI Coach's responses, grounded in your own logged data.
• To look up nutrition facts for scanned barcodes via Open Food Facts.
• To generate a shareable summary PDF, only when you request one.
• To improve the App, solely from anonymous aggregate analytics if you've opted in.

We do not sell personal data, and we do not use your meal photos, health data, or coach conversations to serve you ads — Ovels does not carry third-party advertising.

05 On-device vs. cloud processing

Ovels runs a tiered set of on-device AI models (for meal-photo recognition and coaching) where your phone's hardware supports it — in that mode, the content of a photo or message is processed locally and is not transmitted anywhere for that purpose. When on-device processing isn't available, the relevant request (a meal photo, or a coach message plus the minimum context needed to answer it) is sent to a cloud AI inference provider solely to generate a response. We do not authorize those providers to use your data to train their own models, and we do not retain a copy of that request on any server we operate. We cannot, however, guarantee the internal data-handling practices of third-party AI infrastructure providers beyond what their own terms state.

06 Third-party services

Service	What it receives	Why
Open Food Facts	Scanned barcode / search query	Nutrition label lookup
Apple HealthKit / Health Connect	Read/write access you grant, on-device	Steps, sleep, calorie-burn sync
Cloud AI inference provider(s)	Photo or message, only when on-device AI is unavailable	Generate meal recognition / coach reply
Apple App Store / Google Play / Indus Appstore	Install, update, and payment telemetry per their own policies	App distribution

None of these third parties are controlled by us, and each governs its own data handling under its own privacy policy. We encourage you to review them independently.

07 Retention & deletion

Locally stored data persists on your device until you delete it in-app, delete the App, or restore from an earlier backup. Uninstalling Ovels removes locally stored app data, subject to your device OS's own backup/restore behavior (e.g. iCloud or Google account device backups are outside our control). If you've opted into anonymous analytics, aggregate counters are retained only in de-identified, aggregate form and are not linkable back to you individually. Because we don't operate accounts, we have no server-side copy of your personal data to retain in the first place.

08 Security

Your data's security depends significantly on your own device security (passcode, disk encryption, OS updates). We follow reasonable, industry-standard practices for the limited data flows the App does initiate (e.g. transport encryption for any cloud AI or Open Food Facts request), but no method of storage or transmission is 100% secure, and we cannot guarantee absolute security of data stored on your device or transmitted over the internet. You are responsible for securing the device(s) Ovels runs on and any backup files you export.

09 Children's data

Ovels does not restrict installation by age, but is recommended for users aged 16 and above. Under the DPDP Act, anyone under 18 is legally a "child" in India, and processing a child's personal data requires verifiable parental or guardian consent. Ovels has no account system and performs no age verification — by using the App, you represent that you either meet the recommended age, or have obtained the consent of a parent or legal guardian if you have not. If you're a parent or guardian and believe a child has used Ovels and stored data locally on a device you're responsible for, you can delete that data directly within the App or by deleting the App; you may also contact us (§14) with any concern.

10 Your rights

Because Ovels keeps data on-device, you hold direct, immediate control over most of these rights already, without needing to contact us:

• Access & portability — export a full backup or a summary PDF at any time, in-app.
• Correction — edit any profile, meal, or workout entry directly in the App.
• Erasure — delete individual entries, or delete all app data via your device's app-storage settings or by uninstalling.
• Withdraw consent — turn off analytics, or revoke Apple Health / Health Connect permissions, at any time in your device settings.
• Grievance redressal — contact us using the details in §14; we aim to respond within 30 days.

11 International data transfers

If a cloud AI inference request or an Open Food Facts lookup is routed to servers outside India, your data may be processed in another country under that provider's own safeguards. By using features that rely on cloud processing, you consent to this transfer to the extent required by applicable law.

12 This website

app.ovels.in (this marketing site and wiki) does not use advertising cookies or third-party trackers. It loads fonts from Google Fonts, which may receive your IP address as a normal part of serving font files. No account system, form submission, or analytics script currently runs on this site.

13 Changes to this policy

We may update this policy as the App changes. Material changes will be reflected by updating the "Last updated" date above and, where required by law, through an in-app notice. Continued use of Ovels after an update constitutes acceptance of the revised policy.

14 Grievance officer & contact

For any privacy question, data-related request, or grievance under the DPDP Act or otherwise, contact:

We aim to acknowledge grievances within a reasonable time and resolve them within 30 days where practicable.