Menu
When you use the Ekvi app, you store intimate personal data with us. We do not take your trust for granted. Therefore, we have implemented several measures to ensure that your data and privacy rights are protected.
Last updated February 5, 2025
We are open about how we store and process your data. Our privacy policy provides you with a full overview and control of your data.
We begin with a brief summary below👇
This summary is not a substitute for reading the entire privacy statement. We recommend that you read our entire privacy policy and terms of use, but here are some highlights that we hope you find useful:
When you use Ekvi, we collect personal data about you and can use it to improve your user experience. This means, for example, increasing the accuracy of our predictions, adapting the product offer, the content you see, etc.Â
If you consent, we may use technical information about your device and other information about you (for example, your device’s unique technical identifier, age group, subscription status, and time of application launch) for marketing purposes to reach more people who we think may be interested in using the app. You can withdraw your consent at any time.
See the section below entitled “Processing to find new Ekvi users and keep in touch with you” for more information on how to withdraw your consent.
You can request to access, change, correct, delete, and update your personal data by writing to us at hello@ekvi.io. Please note that certain features of the app that rely on historical data may be affected if you delete or change your personal information.
We have taken strict measures to protect your personal information from loss, theft, misuse, or unauthorized access.
We want to have an open dialogue with everyone who uses the Ekvi app. Feel free to contact us at hello@ekvi.io if you have any questions about this privacy policy, how we collect or process your personal data, or anything else related to our privacy practices.
This privacy policy explains how Ekvi AS (hereinafter “Ekvi”, “we” or “us”) collects, stores, uses, transfers, and shares personal data from our users (“you”) in connection with the Ekvi app (“the App”), and the website ekvi.io, including all products and services related to it (the “Website”) (collectively, the “Services”).
Ekvi is the data controller and data processor for health information and other personal data processed in connection with the Services. We reserve the right to change this privacy policy from time to time. If we make material changes, we will notify you by email (sent to the email address you provided when you registered), through the app, or by presenting you with a new version of this privacy policy.Â
If permitted by applicable law, your continued use of the Services after the effective date of an updated version of the Privacy Policy will constitute your acceptance of the amended Privacy Policy. In some cases, you will be able to choose whether you want to explicitly accept changes to the Privacy Policy. If you do not agree to the terms of the Privacy Policy, you may not use our Services.
We use various methods to collect personal data about you. Sometimes we collect personal information automatically when you interact with the Services, and sometimes we collect personal information directly from you. We may also receive personal data about you from other sources and third parties.
Personal Identifiers. When you sign up to use the Services, we may collect personal information about you, for example:
Health Data. When you sign up to use the Services, you may choose to provide personal health and wellness information, such as:
Financial Information. We engage third-party payment processors to collect your payment information for our paid features or merchandise.
Communication Information. We collect information included in your communications with us.
We may also collect any other information you choose to provide.
When you access or use the Services, we may automatically collect the following information:
Device information
Location information
Data about your use of the services, including but not limited to:
To collect this and other information, we may use cookies and other tracking technologies. Read more in our Cookie Policy.
Data from external sources. We may receive personal data about you from third parties. For example, we may obtain information from third parties to improve or supplement existing user information, including to customize and personalize your experience and for statistical purposes and analysis, as described below.
We do not collect or use your personal information without notifying you. Depending on which functions of the services you use, we will process your personal data based on one or more of the following legal bases:
Below we describe the purposes we have for processing your personal data and the legal basis for doing so, including some examples:
Processing basis
Tailoring product and service offerings and recommendations to you, including third-party products and offerings.
Legal basis for processing
Consent
Example
We can give you an offer for an Ekvi subscription.
Processing basis
To offer and deliver the products and services you request, process transactions, and send you related information, including confirmations and reminders
Legal basis for processing
Consent
Example
Using your device data, we can send you a reminder, e.g. via push notifications, about logging your period or symptoms. You can disable this at any time in the device settings or in the app settings.
Processing basis
To respond to your comments, questions, and requests and to assist you when contacting customer service.
Legal basis for processing
Legitimate interest
Example
We may process your name and email address to respond to your request or to contact you about a question you have asked.
Processing basis
To send you technical messages, updates, security alerts, and support and administrative messages.
Legal basis for processing
Legitimate interest
Example
We may send you an email notification containing a customer satisfaction survey. You can opt out of receiving such surveys at any time by contacting us at hello@ekvi.io.
Processing basis
Monitor and analyze trends, usage, and activities in the app.
Legal basis for processing
Consent
Example
We may analyze your activity in the app to understand what you like or don’t like so that we can improve your experience in the future.
Processing basis
Verify your identity.
Legal basis for processing
Legal obligation
Example
We ask you to verify your identity, for example using BankID, Google, or Apple ID when you use our Services.
Processing basis
Solely concerning information that you agree to share, for promotional purposes for Ekvi.
Legal basis for processing
Consent
Example
If you agree, we can post your review or comment on our website.
Data minimization and purpose limitation. We do not process personal data in a way that is incompatible with the purposes for which it was collected or later approved by you. We also do not collect personal data that is not necessary for the purposes above. For any new processing purposes, we will ask for your consent.
We do not sell your personal information. We will not sell or share your personal information. We do not disclose your personal data unless otherwise described in this privacy policy. We may only share your personal information with our service providers as described in this privacy policy.Â
Advertising technologies. We do not use or disclose Health Data to serve digital advertising. With your consent, we will share device identifiers and app usage data (app downloads, openings, trials, registrations, and subscriptions) with Appsflyer and its integrated partners to promote the Services and find new users, including by creating and serving ads to audiences made up of non-users the advertising platforms deem similar to our users, and to optimize our advertising efforts. You can withdraw your consent to these activities on iOS devices through the device’s privacy settings.
If you believe that your personal data is incorrect, you have the right to contact us and ask us to correct it.
You have the right to request that the processing of your personal data be restricted under certain circumstances. For example, you have the right to request limited processing if you dispute the accuracy of your personal data and we need time to verify the accuracy.
You have the right to request information about the personal data we process about you, access all your personal data, and receive a copy of it, including in a structured and transferable format (.json). For Ekvi Plus users, the app also allows you to download a report containing some of your personal data from the app.
You can delete your data and account directly in the app. You can also ask us to delete your personal data if you withdraw your consent to processing if you believe that such processing is illegal. Please note that deleting some personal information may affect your experience using certain features of the Services that rely on historical data.
In some cases, you can object to the processing of your personal data, for example, if we process it based on legitimate interest, by contacting us at hello@ekvi.io.
Contact us at hello@ekvi.io to exercise your privacy rights.
You will receive a response from us within 30 days after we have received your inquiry. In some cases, it may take up to 90 days, for example for the complete deletion of your personal data stored in our backup systems. We will let you know if we need more time and explain the reasons for the delay.
Please note that we may contact you to better understand your request if we receive an unclear request. We can also refuse to comply with a request that is obviously unfounded, and excessive (repeated) requests.
In some cases, we may also ask you to confirm your identity. Usually, we make sure to check that the request comes from the same email address that you provided when you registered. If you have not registered your account, we may ask you to undergo additional verification measures to ensure that we are responding to requests appropriately.
You have the right to submit a complaint to the Norwegian Data Protection Authority about any of our activities (among other things related to your privacy rights) that you believe are not in accordance with current legislation. If you are concerned about our privacy practices, please let us know at hello@ekvi.io.
We may share your personal data with third-party service providers (“Data Processors”) who perform tasks on our behalf to operate the Services effectively. These include, but are not limited to, payment processing, analytics, communication, and infrastructure management.
To ensure compliance with GDPR requirements, we implement the following measures when engaging third-party processors:
Data Processing Agreements (DPAs). All third-party processors are bound by Data Processing Agreements (DPAs) that specify their obligations under GDPR. These agreements include strict data protection measures, confidentiality requirements, and instructions on the use of your personal data.
Standard Contractual Clauses (SCCs). For third-party processors located outside the EU/EEA, we use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure that your data is protected to the same standard as within the EU. These clauses impose legally binding obligations on the processor to safeguard your data.
Minimization of Shared Data. We share only the data necessary for the third-party processor to perform their tasks. For example, we may share your email address for email communication purposes but will not share sensitive health data unless explicitly required and consented to.
In some situations, we engage other companies to process your personal data on our behalf. We refer to these companies as “data processors”.
Data processors are companies that help us operate the Services, support our communications with you, or perform other app-related activities. They may process certain personal data on our behalf to achieve the objectives related to the app features and associated activities. We are responsible for any actions or deviations from our data processors and undertake to enter into formal data processing agreements with them to the extent that applicable legislation requires it.
Below is the list of the most significant data processors we use:
Type
Infrastructure and security
Processor
AWS (Amazon Web Services, Inc.)Â
Processor’s privacy statement
Collected data
All personal data
Purpose
Storage of all personal data when you use the Ekvi app.
Type
Infrastructure and security
Processor
Auth0 (Auth0, Inc.)
Processor’s privacy statement
Collected data
– E-mail address
– IP address
– Name
Purpose
Authentication and authorization services.
Type
Analytics tool
Processor
Amplitude (Amplitude, Inc.)
Processor’s privacy statement
Collected data
– App usage data
Purpose
Understanding how you use our Services, engaging with specific features and what you like or dislike most to create a better product.
Type
Infrastructure and security
Processor
Signicat (Signicat AS)
Processor’s privacy statement
Collected data
– E-mail address
– IP address
– Name
Purpose
Authentication and authorization services.
Type
Customer service
Processor
Intercom (Intercom, Inc.)
Processor’s privacy statement
Collected data
– E-mail address
– The content of the inquiry you send to us
Purpose
To respond to all inquiries from you.
Type
Email communications
Processor
HubSpot (HubSpot, Inc)
Processor’s privacy statement
Collected data
– Name
– E-mail address
Purpose
To reach you with our newsletters, emails, and alerts.
Type
Customer surveys
Processor
Typeform (Typeform, S.L.)
Processor’s privacy statement
Collected data
– E-mail address
– Name
– The results of the survey
Purpose
To deliver various service-related surveys and receive feedback from you.
Type
Payments and authentication
Processor
Apple (Apple, Inc.)
Processor’s privacy statement
Collected data
– Payment and bank details
– Personal identifiers
Purpose
To authenticate your identity, and collect and process payments for subscriptions in the Ekvi app.
Type
Payments and authentication
Processor
Google (Google LLC, USA)
Processor’s privacy statement
Collected data
– Payment and bank details
– Personal identifiers
Purpose
To authenticate your identity, and collect and process payments for subscriptions in the Ekvi app.
Type
Payments
Processor
Stripe (Stripe, Inc., USA)
Processor’s privacy statement
Collected data
– Payment and bank details
– Personal identifiers
Purpose
To collect and process payments for subscriptions in the Ekvi app.
Type
Payments and subscriptions
Processor
RevenueCat (RevenueCat, Inc., USA)
Processor’s privacy statement
Collected data
– Personal identifiers (e.g., user ID)
– Payment details (e.g., subscription status, entitlements, and history)
– Usage data (e.g., when you used the app last)
Purpose
To handle in-app subscriptions, including subscription status, payments, and related analytics, ensuring accurate management of Ekvi’s freemium and paid plans.
Type
Communication and marketing
Processor
OneSignal (OneSignal, Inc., USA)
Processor’s privacy statement
Collected data
– Device identifiers (e.g., push token)
– Usage data (e.g., app open and close events)
– Personal identifiers (e.g., user ID, email)
Purpose
To manage and send push notifications within the Ekvi app, including purchase and reminder notifications and emails.
We may collect, anonymize, or de-identify your personal information so that it cannot reasonably be used to identify you. Such information is no longer personal data.
We may share such information with our partners or research institutions or use it for statistical purposes. For example, we may share or use general age, demographic information, and aggregate statistics about certain activities or symptoms from collected data to identify patterns across users in articles, blog posts, and scholarly publications.
Sharing this data helps advance scientific research on women’s health. Our legal basis for processing your data for this purpose is legitimate interest.
The app has a community area, the Community, where users with similar interests can share information and support each other.
All information (including personal data) you share in a community area or an online discussion is open to the Ekvi community. You should think carefully before posting personal information in a public forum. What you post may be seen, disclosed to, or collected by third parties and may be used by others in ways we cannot control or predict, including to contact you for unauthorized purposes. Furthermore, posting your personal information in the Community may be against the rules of the forum.
If you accidentally post personal information in our public areas and want it removed, you can send us an email at hello@ekvi.io.
We may also share some of your personal information in the following special circumstances:
Depending on the circumstances, we may invoke legitimate interest or legal obligation as a legal basis for the above processing activities.
Except as set out below, we will retain your personal information for as long as is necessary to provide the Services to you or otherwise fulfill the purposes for which it was collected.
Impact of Account Deactivation/Personal Data Deletion Requests. You may delete your account and personal data at any time in the Ekvi app. If you choose to delete your account, Ekvi will delete all your personal data, and the data cannot be recovered if you create a new account later.
Impact of App Deletion or Inactivity. If you choose to delete the App from your device or your account becomes inactive, we will retain your personal information for 3 years in the event that you decide to reactivate the Services or reinstall the App. The app covers different periods of the users’ life cycle; therefore, retention of your data is necessary in some cases to ensure you have a good experience with other app features (e.g. switching to a new mode in the app).
Limitations. You should be aware that although we anonymize or otherwise de-identify your information where possible, we may retain certain personal data and other information after your account is terminated or deleted, if necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
We implement technical and organizational measures to protect personal data against loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction, concerning the nature of the personal data and risks associated with special categories of personal data we collect (data on health). These measures include JWT authorization.Â
Encryption of your personal identifiers during transmission and storage.
Protection of data integrity.
Organizational and legal measures. For example, our employees have different levels of access to your personal data, and only those responsible for data management have access to your personal data and only for limited purposes required for the operation of the services. Employees of Ekvi have significant responsibility for any breaches, unauthorized access, changes, destruction, and misuse of your personal data.
We carry out regular privacy impact assessments to ensure that the services fully comply with the principles of “privacy by design” and “privacy by default”. We also commit to carry out a privacy audit in the event of a merger or takeover of Ekvi.
Please note that you can help protect your information by choosing and protecting your password appropriately, not sharing your password, and preventing others from using your mobile device. No security system is perfect, and therefore we cannot guarantee the absolute security of the Services or that your information will not be intercepted while it is being transmitted to us.
If we become aware of a breach of our security systems, we may either post a notice or attempt to notify you by email, and we will take reasonable steps to remedy the breach in accordance with applicable law and this Privacy Policy. If we become aware of a potential breach of personal data security, in addition to other measures mentioned in the privacy policy (such as notifying you in certain cases), we will also take specific measures to remedy the breach according to the circumstances, which may include log you out of all devices, reset your password (send you a temporary password that you can use), and perform other activities and actions that are reasonably necessary.
If you would like to report a security incident related to the Services, please contact us at hello@ekvi.io.
We may contact you through email, in-app pop-ups, or push notifications to provide information about products, services, offers, promotions, rewards, and events offered by us and selected partners. We may also send updates, news, or information we believe may be of interest to you, depending on your preferences and consent.
Mandatory notifications. Certain communications, such as those regarding account creation, security alerts, subscription updates, and changes to our privacy policy, are necessary for the proper functioning and security of the Services. These are mandatory and cannot be opted out of as they are essential to comply with legal and contractual obligations.
Opt-In notifications. Other communications, including reminders to log symptoms, invitations to community events, or promotional offers, are sent based on your explicit consent. You can adjust your preferences for these notifications in the app at any time.
If you want to speak to our data protection officer, you can send an email to cathrine@ekvi.io or use the contact information below.
If you have questions or concerns about your privacy, you can contact us at:
Ekvi AS, c/o Cathrine Delp, Motzfeldts gate 29 A, 0561 Oslo.
Email: hello@ekvi.io or cathrine@ekvi.io
You can also contact the Norwegian Data Protection Authority .Â