Ouvori

Politique de confidentialité

La politique de confidentialité de l'app Ouvori

Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains which data is processed when you use the Ouvori mobile application (the “App”) on Android and iOS devices, for which purposes, and which rights you have. It is designed to comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Summary

  • Your content stays on your device. Everything you answer, write and rate in the App is stored locally. The App does not require an account, and we have no access to this data.
  • Usage statistics are anonymous. We record that the App and its features are used, never what you enter.
  • Subscriptions are handled by the app stores. We learn that an installation has an active subscription, but not who you are or how you pay.
  • One function transmits content, and only with your consent. If you allow the App to sort what you write, the single line being sorted is transmitted, processed and not retained.

2. Controller

The controller within the meaning of the GDPR is the operator of Ouvori (“we”, “us”), based in Germany:

Loading...

Please use these contact details for any question about data protection and to exercise the rights described in section 11.

3. Data stored on your device

All content you enter in the App is stored locally on your device. This includes your answers during setup, your plans and predictions, your ratings, notes and check-ins, the photos you add, and your settings. We do not have access to this data, do not process it on any server and do not hold a copy of it.

A copy can exist in two places, both of which are under your control:

  • The backup of your device. If you have enabled the backup of your device (iCloud on iOS, Google backup on Android), the App’s data is included in it. On Android, the photos you add are not part of the backup in the cloud. This processing is governed by the privacy policies of Apple and Google.
  • Files you export. The App can create a summary or a backup file at your request. Such a file is only passed to the destination you choose.

Uninstalling the App deletes the data stored on your device. Copies contained in a device backup have to be removed there.

4. Usage statistics

We collect anonymous usage statistics in order to understand how the App is used and to improve it.

Data processed. The statistics record that the App and its functions are used, for example that the App was opened, which steps of the initial setup were displayed or skipped, that a function was used or completed, and that a purchase was started or completed. Each event is transmitted together with general technical information, such as the device model, the version of the operating system, the version of the App and the language setting, and with an anonymous identifier generated by the App. This identifier is not derived from your device and is not linked to your name, to an account or to an advertising ID. No user profile is created.

The statistics never contain the content you enter: no answers, no texts and no ratings. IP addresses are not stored, and no location is derived from them.

Recipient. PostHog, Inc. (USA) provides the statistics service as our processor. The data is hosted exclusively on servers in the European Union (Frankfurt, Germany).

Legal basis. Our legitimate interest in analysing and improving the App (Art. 6(1)(f) GDPR).

Retention. Usage statistics are retained for a maximum of one year.

5. Subscription

Subscriptions are purchased through your account with Apple (App Store) or Google (Google Play). Payment is processed exclusively by Apple or Google in accordance with their own privacy policies. We do not receive your name, your email address or your payment details.

To determine whether an installation has an active subscription, the App uses RevenueCat, Inc. (USA) as a processor.

Data processed. RevenueCat processes an anonymous identifier of the installation, which is not derived from your device and is not linked to your name or to an account, information on the purchase (product, time, status, trial period, transaction data of the store), and general technical information (IP address, country of the store, device model, version of the operating system and of the App). When a purchase is made, the anonymous identifier of the usage statistics (section 4) is passed on as well, so that purchases can be evaluated together with those statistics.

Legal basis. Performance of the contract on the subscription (Art. 6(1)(b) GDPR). The joint evaluation of purchases and usage statistics is based on our legitimate interest in improving the App (Art. 6(1)(f) GDPR).

Transfer to third countries. RevenueCat processes this data in the USA. The transfer is safeguarded by the Standard Contractual Clauses of the European Commission, which are part of RevenueCat’s Data Processing Addendum.

Retention. The data is retained for as long as it is required to manage the subscription and to comply with statutory retention obligations.

6. Sorting what you write (only with your consent)

The App can determine what a line you have written belongs to, for example which kind of situation “call the dentist” is, and fill this in for you. This function is switched off until you consent to it during setup. You can switch it off and on again at any time in the App under Me, Suggestions. While it is switched off, no data is processed as described in this section.

Data processed.

  • The single line that is being sorted, exactly as you wrote it. These are the short lines the App works with: the name of an upcoming event, something you wanted to do and the reason against it, a situation, a thought or a step in your own words, the name of a rhythm, or a parked worry. Names or places you include in such a line are transmitted with it.
  • The list the line is sorted into. In most cases this is a fixed list that is identical for all users. For some questions it is a short list of your own entries, for example the items on your list or the steps of your ladder, so that the App can recognise whether the new line matches one of them.
  • The anonymous identifier of the installation described in section 5, which allows our server to verify the subscription.

Your ratings, your notes, the outcome of an event, your check-ins and any other content are never transmitted.

Recipients and processing.

  1. The data is sent over an encrypted connection to a server operated by us. The connection is routed through the network of Cloudflare, Inc. (USA).
  2. Our server verifies the subscription and the usage limits of the installation. For this purpose it stores a hash of the identifier together with the number of requests per day and per month. It neither stores nor logs the line or the result. The IP address is only processed transiently to protect the server against abuse and is not stored. Daily counts are deleted after 14 days, monthly counts after two years.
  3. Our server forwards the line and the list, without the identifier and without your IP address, to OpenRouter, Inc. (USA). OpenRouter passes them on to the provider operating the model, currently SiliconFlow Technology Pte. Ltd. (Singapore). Our account is configured so that only providers are used which state that they neither retain the content of requests nor use it to train models.
  4. The result, meaning the matching entry of the list and a confidence value, is returned to the App and stored on your device, so that the same line is not transmitted twice. You can delete these results in the App under Me, Suggestions.

Legal basis. Your consent (Art. 6(1)(a) GDPR). A line may contain information about your health, for example what you are afraid of. In that case your consent also covers the processing of this information (Art. 9(2)(a) GDPR).

Transfer to third countries. The USA and Singapore do not in every case ensure a level of data protection equivalent to that of the European Union. Authorities in these countries may be able to access data, and your rights may be more difficult to enforce there. The line is transmitted without your name, without an account and without your IP address, and solely on the basis of your explicit consent (Art. 49(1)(a) GDPR).

Withdrawal of consent. You can withdraw your consent at any time with effect for the future by switching the function off in the App. From that moment no further data is transmitted. The lawfulness of the processing carried out before the withdrawal remains unaffected. As the content is not retained, there is nothing to be deleted afterwards.

7. Notifications

Notifications are scheduled locally by the App and displayed by your device. No server is involved, and no data is transmitted for this purpose.

8. Device permissions

  • Notifications: to remind you of what you have set up.
  • Alarms and reminders (Android): only if you allow it, so that reminders arrive at the time you set. Without it they may arrive later.
  • Face ID, fingerprint or device passcode: only if you enable the app lock. Authentication is performed by the operating system. The App only receives the result and neither stores nor transmits biometric data.
  • Photos: when you attach a photo to an entry. The photo is selected in the system photo picker, the App only reads the photo you select, and it is stored locally in the App.
  • Files: when you save or restore a backup. This is done through the system file picker.
  • Internet access: for the processing described in sections 4 to 6.

The App does not access your location, your contacts or your microphone, and it does not use an advertising ID.

9. Contacting us

If you contact us by email, we process your email address and the content of your message in order to respond to your request (Art. 6(1)(f) GDPR). This data is deleted once the matter has been resolved, unless statutory retention obligations apply.

10. Minimum age

The App is intended for persons aged 16 or older, and it asks you to confirm this. We do not knowingly process data of persons under the age of 16.

11. Your rights

Where the GDPR applies, you have the following rights regarding the personal data we process:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interests (sections 4, 5 and 9)
  • Right to withdraw consent at any time (section 6)
  • Right to lodge a complaint with a data protection supervisory authority, for example the one responsible for your place of residence

Usage statistics and subscription data are processed under anonymous identifiers only, so we cannot attribute them to a person by ourselves. To enable us to locate your data, the App lets you copy these identifiers under Me, Privacy. Please include them in your request. The content stored on your device remains under your control at all times: you can export it in the App under Me and delete it by uninstalling the App.

You are not obliged to provide any data. Without the processing described in section 5, a subscription cannot be verified and the App cannot be used. No automated decision-making within the meaning of Art. 22 GDPR takes place.

12. Security

All data transmitted by the App is sent over encrypted connections. Data stored on your device is protected by the security features of your device and, if enabled, by the app lock.

13. Changes to this Privacy Policy

We may update this Privacy Policy when the App or the legal requirements change. The current version is always available at this address, and the date at the top indicates when it was last revised.