Olivi Privacy Policy
DRAFT — Product text pending final legal review.
This draft was last updated: 2026-09-08.
This page explains what data we collect while you use Olivi, why we collect it, how long we keep it, and what rights you have.
What data we collect
Account information (name, email), the medical reports/documents you upload and the lab values extracted from them, your conversations with Olivi, the family profiles you use, notification/reminder preferences, and (if you upgrade to Premium) payment information processed through Lemon Squeezy (your card details are never held by us — they stay with Lemon Squeezy directly).
What we use your data for
To explain your uploaded reports/questions in plain language, generate medication/check-up reminders, and manage your account. Report analysis and chat replies are processed on our AI provider OpenAI's servers — meaning your data (specific to that document) is transferred abroad for that processing; this transfer is separately recorded for every analysis.
Legal basis for processing
Under Turkey's KVKK, your health data is "special category personal data" and is only processed with your explicit consent — collected separately when you create an account/upload a report, and withdrawable at any time (withdrawing consent doesn't undo processing already done, but stops new processing).
Data retention
Your data is kept for as long as your account is active — it is not deleted automatically after a fixed period. You can close your account at any time from the Account page's "Delete my account" option; this permanently deletes your account and all personal health data linked to it (uploaded documents, analysis results, chat history, family profiles). Deletion is processed immediately. Before deleting, you can download a machine-readable (JSON) copy of your data via "Download my data" on the Account page.
Your rights
Under KVKK Art. 11 (and in line with GDPR-equivalent rights): to learn whether your data is processed, request information about it, learn the purpose of processing, learn whether it's been transferred abroad, request correction if inaccurate/incomplete, request deletion/destruction, and request that these actions be communicated to any third parties the data was shared with. You can exercise these rights via the contact address below; you can also directly download your data or delete your account yourself from the Account page.
Who we share your data with
We do not sell your data. It's shared with a limited set of service providers needed to run the product: OpenAI (AI processing for report analysis and chat replies), Supabase (database and file storage infrastructure), Vercel (the server infrastructure hosting the app), and — only if you upgrade to Premium — Lemon Squeezy (payment processing, acting as Merchant of Record). These providers process data only on Olivi's behalf, to provide the service.
Security
Your data is protected by per-account access controls (row-level authorization) — no other user can access your data. Sensitive actions (like account deletion or data export) are logged. That said, no system connected to the internet can be guaranteed 100% secure.
Minors and family profiles
You may create a separate health profile in Olivi for a family member (e.g. your child). Anyone creating a profile for a minor represents that they are that person's legal parent/guardian and are authorized to consent to processing that data on their behalf.
Data controller
[COMPANY INFORMATION TO BE ADDED — legal entity name and address. This is a placeholder until incorporation and legal review are complete.] Contact: support@oliventis.com
Contact
For privacy questions or to exercise your rights: contact@oliventis.com