Who we are
Olive (we, our, or us) is an independent iOS wellness application available in the United States. Our website is myolivehealth.com.
What we collect
We collect only what is necessary to provide the app's functionality:
- Account information — your name, email address, username, and a securely hashed version of your password. We never store your password in plain text.
- Account information — your name, email address, username, and a securely hashed version of your password. We never store your password in plain text.
- Health and cycle data — period logs, cycle predictions, symptoms, and related tracking entries you create.
- Mental health data — PHQ-2 check-in responses, mood diary entries (including intensity ratings and trigger tags), journal entries, and weekly reflections you record.
- Fitness data — workout sessions, exercise types, sets, reps, activity logs, and workouts written to Apple Health with your permission.
- Nutrition data — food entries, meal logs, and nutrition information you record.
- Supplement and medication data — supplement names, dosages, reminder times, and taken/untaken status; medication names, dosages, and reminder schedules.
- Birth control data — pill name and reminder preferences, if you choose to enable this feature.
- Body metrics — weight and related measurements you choose to log.
- Hydration data — water intake logs.
- Apple Health data — steps, sleep hours and stages, heart rate, HRV, and active calories, read from Apple Health only with your explicit permission. We do not store raw HealthKit data on our servers; it is processed on your device to generate insights.
- Diary media — photos and videos you attach to journal entries, stored securely in AWS S3.
- Profile information — your avatar color, bio, birthday, and profile photo if you choose to upload one.
- Notification preferences — your settings for reminders such as water, supplement, medication, and cycle alerts.
That's it. We do not collect analytics, usage telemetry, advertising identifiers, location data, or any data beyond what you explicitly enter into the app.
How we use your data
We use your information solely to:
- Provide and operate the app's core features — tracking, logging, reminders, and insights.
- Authenticate your account securely.
- Send transactional emails — account verification, password reset, and notification reminders you have enabled.
- Sync your data across sessions and devices.
- Generate wellness insights by correlating health metrics (such as sleep, steps, and HRV) with mood and check-in data. All correlation processing occurs on our servers using only data you have provided; no insights are shared with third parties.
We do not use your data for advertising, profiling, or any purpose beyond operating Olive for your benefit.
How we share your data
We do not sell your personal information. We do not share it with advertisers, data brokers, or third parties for their own purposes.
We share data only with the following service providers who process it on our behalf, under strict data processing terms:
- Amazon Web Services (AWS) — cloud infrastructure and database hosting. Your data is stored on AWS servers in the United States.
- Amazon S3 (AWS) — secure cloud storage for diary photos and videos you attach to journal entries. Media is stored in a private bucket with server-side encryption and accessed only via short-lived pre-signed URLs.
- Amazon Simple Email Service (SES) — transactional email delivery for verification emails, password resets, and reminders.
- Apple HealthKit — Olive reads health data (steps, sleep, heart rate, HRV, active calories) and writes workout data to Apple Health only with your explicit permission. Data exchanged with HealthKit is governed by Apple's privacy policy and your device settings. We do not transmit raw HealthKit data to our servers.
We may disclose information if required by law, court order, or to protect the safety of our users or the public.
Data storage and security
Your data is stored in a secure PostgreSQL database hosted on AWS in the United States. We protect it with:
- HTTPS encryption for all data in transit between your device and our servers.
- bcrypt hashing for all stored passwords.
- Network-level security controls limiting database access to our application servers only.
- Server-side encryption for diary photos and videos stored in AWS S3, accessed via short-lived pre-signed URLs that expire automatically.
No method of transmission or storage is 100% secure. We take reasonable and industry-standard precautions to protect your information, but we cannot guarantee absolute security.
Data retention
We retain your data for as long as your account is active. If you delete your account, we permanently delete your personal information and all associated health data from our systems. Deletion is processed immediately upon confirmation of your request through the app.
Backups may retain data for a short additional period (up to 30 days) before permanent removal.
Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — update or correct inaccurate information directly in the app or by contacting us.
- Deletion — delete your account and all associated data at any time through the app's account settings.
- Portability — request your data in a portable format by contacting us.
Children's privacy
Olive is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately and we will delete it.
Users between 13 and 17 should review this policy with a parent or guardian.
Changes to this policy
We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify you through the app or by email. Your continued use of Olive after changes are posted constitutes your acceptance of the updated policy.
Contact us
If you have questions about this privacy policy or how we handle your data, please reach out: