Last updated: 25 September 2026.
ODNENDO (“ODNENDO”, “we”, “us”) is operated by The OG Labs Ltd. This policy explains what personal data we collect through the ODNENDO app, why, who we share it with, and the rights you have over it. We built this app to document symptoms, not to diagnose or treat them — the same principle applies to this policy: we tell you plainly what actually happens to your data, not what would sound reassuring.
Contact: support@odnendo.com. The OG Labs Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
We do not use advertising trackers or marketing analytics, we do not track you across other companies' apps or websites, and we do not collect location data. We do use error and security monitoring to keep the app working and secure.
After you explicitly consent to OpenAI processing during onboarding, saving an entry sends its text, typed or transcribed from voice, to OpenAI to extract symptoms. Voice recordings are sent to OpenAI for transcription. We do not add your email, name or other account fields. Identifying details you write or say inside an entry are not redacted during these steps. We do not keep an audio archive: recordings are temporarily held on your device and sent for transcription, with cleanup when recording work finishes or abandoned recordings are cleared. Your original words and extracted symptoms are saved in your journal. For symptom extraction and AI report writing, we ask OpenAI not to save responses for later reuse. Its published standard rules still allow separate abuse-monitoring retention for up to 30 days, or longer where legally required. This is separate from our account-deletion controls.
Your original entries and the structured data derived from them are stored in our database, hosted by Supabase.
AI summaries provide an optional paragraph for your own report. With your consent, OpenAI writes it using figures calculated from your journal and short extracts. We do not send a raw copy of your journal for this step, or add your account name or email. Your own words may remain in an extract.
Before extracts are sent, we remove unrecognised words, detected name pairs, contact details and date patterns, and limit descriptions of places to body areas. These checks are not perfect: some names and identifying details can remain. You never need to mention anyone's name in your journal, and leaving names out is the best way to keep them private. Apple Health records and your report questions are not sent for this purpose.
The paragraph is not a diagnosis or treatment advice and does not decide your treatment, eligibility or legal rights. It can contain mistakes; check it against your journal before sharing your report.
Without the required consent, or if a check fails, the report uses its standard summary. Limits on how often summaries can be requested help prevent misuse. If you withdraw your consent, we stop sending new requests once your withdrawal is recorded; a request already in progress can still finish.
We use Sentry, an error-monitoring service, to find and fix technical problems in the app and to alert us to unusual repeated activity, such as many failed sign-in attempts.
App error reports are rebuilt before they leave your device: they keep only the type of error and where in the app's code it happened. They do not include the original error message, your journal content, your name, email or account identifier, and we do not take screenshots or session recordings. Our Sentry project is set not to store IP addresses.
Security alerts contain only a fixed category (for example, repeated failed sign-ins) and a count. To count repeated activity, our server keeps a protected pseudonymous code derived from your account. This code contains no journal content, is never sent to Sentry, and old codes are cleared automatically.
Apple's permission screen controls whether ODNENDO can read your menstrual cycle records and how much history is available. Importing is optional and begins only when you tap Import from Apple Health. The cycle dates Apple shares are copied to your ODNENDO account so they can appear in Cycle, Timeline, and Report. Matching dates already in ODNENDO are not duplicated, and dates you previously removed are not silently restored.
Imported Apple Health dates are stored by Supabase with your other cycle records. They are not sent to OpenAI for transcription or symptom extraction. Revoking ODNENDO's Apple Health permission prevents later imports, but it does not delete dates already copied to ODNENDO; you can remove those dates in Cycle or delete your account.
Supabase (database, authentication, file storage), OpenAI (voice transcription, symptom extraction and AI report summaries) and Sentry (error and security monitoring) act as our data processors, under their respective data processing terms. Apple Health cycle dates are stored by Supabase but are not sent to OpenAI. We do not sell your personal data, and we do not share it with advertisers or data brokers. No research study is currently running. Adults can separately choose whether to allow de-identified journal data use and contact about future studies in Settings → Research. Both choices are optional and can be withdrawn independently. See our Research Policy.
Your account and journal database is hosted in the European Union (Ireland). Our service providers, including OpenAI, Supabase and Sentry, may also process your information outside the UK. Where they do, we rely on the safeguards UK data protection law requires, such as UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in our providers' data processing terms. Contact us if you would like more information about these safeguards.
We keep your account and journal data while your account exists. On successful account deletion, deletion from the live account database is permanent and immediate: your profile, journal entries, extracted symptoms, imported Apple Health dates, AI summaries and consent history are removed and cannot be restored through the app. Consent records are the exception to changing or removing an individual choice while your account exists: we retain the history of grants and withdrawals to show what you agreed to and when. This exception does not mean consent history survives account deletion.
For AI report summaries:
If you withdraw your consent, you can ask us to delete your saved summaries, or delete your account.
Deleted data can remain in our database provider's encrypted backups for up to 7 days, until those backups expire. Provider records and copies you have already exported or shared are separate; deleting your account does not recall those copies.
We may use anonymised, combined statistics about how ODNENDO is used — for example, how often a symptom is logged across all users — to improve the app. These statistics are combined from many people and cannot identify you or anyone you mention. Because these aggregated statistics contain no personal data and cannot identify anyone, we may retain them indefinitely for product improvement and historical reporting.
This is separate from research. Using your own journal information, in de-identified form, for health research needs your separate research consent, which is only available to adults. See our Research Policy.
Your account is protected by the authentication and database security controls provided by Supabase, and all traffic between your device and our servers is encrypted in transit (HTTPS). We do not currently offer end-to-end or on-device encryption of journal content, and we won't claim otherwise. No system is perfectly secure; we take reasonable, industry-standard measures but cannot guarantee absolute security.
If you are in the UK or European Economic Area (GDPR / UK GDPR), you have the right to access, correct, delete, or export your data, to restrict or object to certain processing, and to withdraw consent at any time. Many of these are self-service already: view your original entries and download an export in Settings, or delete your account outright. To delete individual entries, email us. You also have the right to lodge a complaint with your national data protection authority — in the UK, the Information Commissioner's Office (ICO).
Your export includes saved AI summaries, the information prepared for them, generation records and request history. You can correct supported symptom details in your journal.
To withdraw your consent to AI processing, email support@odnendo.com or delete your account in Settings. Because AI processing is central to how ODNENDO works, you will not be able to keep using the journal after withdrawing, but you can still ask us to export or delete your data.
Wherever you are, you can exercise these rights by using the tools in Settings or by emailing support@odnendo.com.
You must be at least 16 years old to create an account. We ask for your year of birth at signup specifically to enforce this, and use it for no other purpose.
If anything here is unclear, email support@odnendo.com and we will explain it.
If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you directly.