Your journal. Your choices.

Basic tracking starts on your device, without an Olyvi account. Apple Health and sharing are optional. Olyvi does not include advertising or third-party analytics SDKs.

Who provides Olyvi

Olyvi is provided by Anze Sustarsic. For privacy questions or requests, contact support@olyvi.app. Please avoid sending health history or invitation links by email unless necessary to resolve your request.

Your personal journal

The app stores the name or nickname you enter, profiles, recorded dates, flow, symptoms, mood, notes, fertility observations, pregnancy entries and settings on your device. It does not automatically upload your journal to an Olyvi account. Device backups may include app data depending on your Apple device and backup settings. Face ID authentication is handled by Apple’s operating system; Olyvi does not receive biometric templates.

Apple Health, Watch and widgets

With your permission, Olyvi can read menstrual flow history, write flow records and read basal temperature observations. Apple controls these permissions. Health connections apply to the phone owner’s profile, rather than additional family profiles. Olyvi does not sell Health data or use it for advertising.

Your paired Apple Watch receives the phone owner’s cycle summary and sends check-ins back through Apple’s device connection services. Optional widgets receive a local summary through the app’s shared container. Information you choose to display in widgets may be visible on your device screen.

Optional shared profiles

When you enable sharing, you choose which supported journal fields to share and whether invited members may edit. The phones encrypt the shared journal before sending it to api.olyvi.app. The service stores encrypted journal content, revision numbers, channel and membership identifiers, access roles, invitation expiry and failed-attempt counters. The encryption key is kept in the phones’ Keychain and included in the private invitation link for the recipient; it is not sent to the sharing API.

The sharing phone also generates a six-character confirmation code. This code is omitted from the invitation link and share message. The recipient reads it from the sharing phone and types it before previewing or joining. The code is submitted over HTTPS for verification; the server stores a keyed hash, not the readable code. Five wrong attempts lock that invitation.

Only share profiles with the person’s knowledge and agreement. Sharing a family profile is not an invisible monitoring feature. Keep invitation links private: they contain encryption material. Revoking access prevents future service access but cannot erase copies a recipient has already downloaded or exported. Photos and pregnancy appointment questions are excluded from the shared journal.

Subscriptions and service security

Apple handles subscription payments. Olyvi uses StoreKit to check Plus entitlements; the app does not receive your payment card details. For shared-profile authorization, the service verifies Apple-signed subscription information and records subscription identifiers, validity and revocation state. TestFlight purchases use Apple’s test environment and do not create real charges.

Service connections use HTTPS. The sharing database and backup snapshots are encrypted at rest. Request logs use route templates, status, timing and request identifiers rather than journal content, invitation links or credentials. The service uses keyed hashes of network addresses for rate limiting; hosting and network providers may also process connection information to operate and protect their infrastructure. No system can guarantee protection against every device or service compromise.

Keeping and removing information

Your device keeps journal entries until you change or remove them. You can stop automatic Health writes in Olyvi and revoke permissions in Apple Health. Removing data from Olyvi does not automatically erase previously written Health records, and removing Health records does not automatically erase imported journal entries.

Shared content stays on the service while the shared journal exists. Its owner can delete the remote shared journal through the app’s sharing controls. Leaving or revoking a member removes future access; local copies are retained on each phone. Encrypted backup snapshots rotate with a configured limit of 14 snapshots. A deletion may remain in older snapshots until those rotate out. Exported PDF or CSV files are controlled by you and anyone you send them to.

Support, testing and your choices

Support messages contain whatever information you choose to send. We use them to respond and troubleshoot. Apple processes TestFlight invitations, installation information, crash reports and feedback according to its own policies; feedback submitted through TestFlight may be shared with the developer. The app’s own screens do not include third-party advertising trackers.

You can use basic tracking without sharing or Health permissions, choose a nickname, enable the free app lock, and cancel Plus through your Apple Account. For access, correction or deletion requests relating to service-held information, email support. Because Olyvi does not require a personal account, we may need a safe way to verify your control of the affected journal without asking for its encryption key.