Privacy Policy

Account information

When you create an account, OWEVIA stores information needed to authenticate you and operate your account, such as your email address, display name, and sign-in provider (Apple, Google, or email/password through Supabase Auth).

Device and app information

OWEVIA may store a push notification token and platform identifier if you enable notifications. OWEVIA also stores local preferences on your device (such as onboarding completion and lock-screen notification privacy settings) using device storage.

Subscription information

If you subscribe to a paid plan, OWEVIA stores your plan tier and subscription expiry information in our database. Billing is processed by Apple or Google when in-app purchases are available — OWEVIA does not receive your full payment card number.

OWEVIA connects to Gmail only when you choose to connect and authorize access through Google OAuth.

OWEVIA uses the gmail.readonly scope. OWEVIA does not ask for your Gmail password.

Gmail connection is separate from Google sign-in used to create an OWEVIA account. You may use OWEVIA without connecting Gmail, but recovery scanning features require a connected mailbox.

OAuth tokens are stored server-side in OWEVIA's Supabase backend. They are not stored in the mobile app.

When you run Find My Money or when OWEVIA syncs authorized mail, OWEVIA reads relevant Gmail messages and processes information needed to identify potential recovery opportunities.

Depending on the message, this may include:

• Subject line and snippet
• Message body text (stored up to approximately 4,000 characters per message)
• Sender and date metadata
• Parsed purchase details such as merchant name, order reference, amounts, and dates

OWEVIA does not send email on your behalf, delete email, or modify your mailbox. OWEVIA scans for messages relevant to receipts, orders, subscriptions, refunds, credits, warranties, and similar purchase-related notices.

Gmail access allows OWEVIA to analyze purchase-related messages you authorize and identify potential money-recovery opportunities described in the app.

Without Gmail access, OWEVIA cannot scan your mailbox for these opportunities. OWEVIA does not use Gmail access for advertising or to sell mailbox contents.

OWEVIA stores data generated from authorized scans and your use of the app, including:

• Recovery opportunities (type, status, estimated amount, explanation, and evidence references)
• Extracted purchase records
• Scan job status and progress
• Activity timeline events
• Draft recovery request text you generate or save

This data is stored in OWEVIA's Supabase database and is associated with your account.

Ask OWEVIA lets you ask questions about your stored OWEVIA data.

When you use Ask OWEVIA:

• Your questions and assistant replies are stored in OWEVIA's database
• OWEVIA provides the assistant with your stored recovery opportunities and Gmail connection metadata (such as connected email address and sync status)
• Ask OWEVIA does not send your entire mailbox to the assistant

When OpenAI processing is enabled on the server, your question and a JSON summary of your stored recovery records may be sent to OpenAI to generate a response. If OpenAI is unavailable, OWEVIA answers from your stored records only.

You can clear Ask OWEVIA chat history from the Ask OWEVIA screen or by deleting imported data or your account.

If you enable push notifications, OWEVIA stores your Expo push token to deliver alerts about recovery opportunities and account activity.

You control lock-screen privacy preferences in notification settings. OWEVIA does not guarantee that notifications will always arrive before a merchant deadline or time-sensitive event.

OWEVIA uses collected information to:

• Operate and secure your account
• Connect and sync authorized Gmail data
• Identify and display potential recovery opportunities
• Provide Ask OWEVIA responses
• Send notifications you enable
• Enforce plan limits and subscription features
• Respond to support and privacy requests
• Prevent fraud and abuse

OWEVIA does not sell your mailbox contents.

OWEVIA uses third-party services to operate the app, including:

• Supabase — authentication, database, and server functions
• Google — Gmail OAuth and optional Google sign-in
• Apple — optional Apple sign-in and App Store subscriptions
• OpenAI — optional AI processing for Ask OWEVIA when configured
• Expo — push notification delivery

These providers process information according to their own policies and OWEVIA's instructions for providing the Services.

OWEVIA retains account and imported data while your account is active and as needed to provide the Services.

If you delete imported data, OWEVIA removes stored messages, purchases, recovery opportunities, scan history, activity events, and Ask OWEVIA chat history from our database while keeping your login and Gmail connection unless you disconnect or delete your account.

If you disconnect Gmail, OWEVIA revokes OAuth tokens and stops future scans. Previously imported data remains until you delete imported data or delete your account.

Certain information may be retained where reasonably necessary or legally permitted for security, fraud prevention, dispute resolution, or legal compliance.

You may delete imported Gmail and recovery data from Legal & Support → Delete My Data.

This removes from OWEVIA's servers:

• Stored Gmail message records
• Extracted purchases
• Recovery opportunities
• Scan jobs
• Activity events
• Ask OWEVIA chat history

Your OWEVIA account and Gmail connection remain unless you disconnect Gmail or delete your account.

You may delete your OWEVIA account from Legal & Support → Delete My Account.

Account deletion permanently removes:

• Your OWEVIA authentication account
• Connected Gmail tokens and connection records
• Imported messages, purchases, and recovery opportunities
• Activity history and scan records
• Ask OWEVIA chat history
• Plan and push token records associated with your account

OWEVIA revokes Google OAuth tokens for connected Gmail accounts during account deletion. Deletion does not remove data held by third parties such as Apple, Google, or OpenAI under their own retention policies.

OWEVIA uses reasonable technical and organizational measures to protect information, including server-side storage of OAuth tokens with restricted access and authenticated API access.

No method of transmission or storage is completely secure. OWEVIA does not claim certifications it has not verified.

You may:

• Disconnect Gmail at any time
• Delete imported data at any time
• Delete your account at any time
• Clear Ask OWEVIA chat history
• Contact OWEVIA with privacy questions or requests

Depending on your location, you may have additional rights under applicable privacy laws. OWEVIA will respond to valid requests as required by law.

OWEVIA is not intended for children under 13. We do not knowingly collect personal information from children under 13.

OWEVIA may update this Privacy Policy as the Services or legal requirements change. The "Last updated" date will reflect the current version.

Where required, OWEVIA will provide notice of material changes.

Privacy questions and requests may be directed to:

OWEVIA

OWEVIAadmin@gmail.com