OVE, Inc. (“OVE”, “we”) makes the OVE App, the OVE® Sensor and the OVE Sensor app. This notice explains what personal information we collect, why, who receives it and the choices you have. Fingerprints are covered in more detail in our Biometric Policy.
1. What we collect
- Account: Name, email, phone number, date of birth, password (never stored in readable form) and, when sign-ups are limited, your place on the waitlist. Comes from: you.
- Identity verification: Your verified name, date of birth and home address; your ID’s document type, issuing state and country, issue and expiration dates; the result of each check (including a match on the last four digits of your Social Security number); and a reference number. Plaid collects your ID document, selfie and Social Security number under its own privacy policy. OVE doesn’t store ID images, your selfie, your Social Security number or your ID number. Comes from: Plaid.
- Fingerprint templates: Encrypted templates, never images. After deletion, only a record of which fingers were enrolled and which finger verified each payment, with no fingerprint data. Comes from: the OVE Sensor, with your Biometric Consent.
- Payment methods: Card brand and last four digits; full card numbers stay with Stripe. For corporate cards, the company name and billing address you enter. Bank name, account type, and account and routing numbers, stored encrypted; the app shows only the last four digits. Comes from: you, Stripe and Plaid.
- Bank account owner: The name, address, phone number and email your bank has on file for the account owner, used only to confirm the account is yours and to set the billing ZIP code for your personal cards. If you remove a bank account, we keep only the owner’s address from it. Comes from: your bank, through Plaid.
- Shared cards: Who you share a card with, the limits you set, the status of each share and the purchases made with it. To find the person, you enter their name, phone number, email and OVE account ID; we only confirm whether they match one verified account. Comes from: you and the person you share with.
- Location: Your most recent location only. Each new location replaces the last; we keep no history. Comes from: your phone, with location set to “Always”.
- Transactions: Merchant, amount, date and status of each payment. Comes from: you and the merchant.
- Device and sign-in: Device model (also used to confirm your phone can connect the OVE Sensor), operating system, app version, IP address, sign-in date and time. Comes from: your phone.
- Messages you send to OVE Support, including voice messages and purchase or access reports. A conversation is saved only after you send a message. Support chats may be answered by Sam, our AI assistant
We don’t collect your contacts, and we don’t use advertising cookies or trackers in the OVE App.
2. How we use it
- To create and run your account and verify your identity
- To confirm that bank accounts you link are in your name
- To find your account when you touch an OVE Sensor, and to process your payments
- To send verification codes and account notices (for example, a new sign-in or a password change)
- To prevent fraud and keep OVE secure
- To set the billing ZIP code for your personal cards
- To let you share a card, enforce its limits and show each side what it needs
- To confirm your phone can connect the OVE Sensor
- To manage the sign-up waitlist
- To answer Support requests, including through Sam, our AI assistant, which uses your account details to help you. Sam doesn’t make decisions about your account; our team does
- To meet legal obligations
We don’t use your information for advertising, and we don’t sell it.
3. Who receives it
We share personal information only with:
- Plaid: Identity verification, bank account linking and confirming the bank account owner.
- Stripe: Card storage and payment processing, including the billing ZIP code or address.
- AI provider: Helping answer Support chats through Sam, our AI assistant, under contract. It doesn’t use your information to train its models.
- Twilio: Text message verification codes.
- Resend: Email verification codes and account notices.
- Cloud hosting and fingerprint matching providers: Running OVE’s servers and matching, under contract.
- The merchant you pay: Confirmation that you were verified and the payment details for your receipt. Merchants never receive your fingerprints or your location.
- People in a shared card: The person you share with sees your name, the card brand, its last four digits and the limits. As the owner, you see their name and each purchase they make with your card.
- Authorities: When the law or a valid legal order requires it.
- A buyer of OVE: If OVE is merged or sold, under this same notice.
- Speech-to-text provider: Turning Support voice messages into text. The recording isn't kept.
We don’t sell personal information and we don’t share it for cross-context behavioral advertising.
4. How long we keep it
- Fingerprint templates: See the Biometric Policy (deleted at permanent deactivation, never more than 24 months after last use).
- Location: Only the most recent one, deleted at permanent deactivation.
- Verification codes: Until used or expired (minutes).
- Identity verification results, bank account details and bank account owner details (including the owner’s address kept from a removed bank account): While your account is open. After permanent deactivation, kept in the restricted archive for up to five years.
- Waitlist details: Until you finish signing up. If you don’t finish within six months of joining the waitlist (or of being invited to finish), we delete them.
- Account, payment, shared card and transaction records (including which finger verified each payment): While your account is open. After permanent deactivation, kept in a restricted archive for up to five years for financial, tax and fraud-prevention records.
After permanent deactivation your phone number and email are released and can be used to create a new account.
5. Security
We encrypt data in transit and at rest, limit staff access to what each role needs, and use one-time codes to protect sign-in. No system is perfectly secure. If a breach affects you, we’ll tell you as the law requires.
6. Your choices
- See or correct your information: in the OVE App, or ask OVE Support.
- Deactivate your account: in Profile → Deactivate or delete account. You can reactivate within six months; after that your account is permanently deactivated.
- Delete your account: in Profile → Deactivate or delete account → Delete account. You confirm with codes sent to your phone and email and your password. Your account is permanently deactivated right away, your fingerprints and location are fully deleted, and you get a confirmation email. Payment records stay in the restricted archive (section 4). Without the app, email support@ovetouchngo.com from your account email with the subject “Delete my account”.
- Delete your fingerprints only: ask OVE Support.
- Payment methods and shared cards: remove a bank account or card, or stop sharing a card, at any time in the app.
- Location: you can turn it off in your phone settings, but OVE can’t verify you at a store without it.
- Texts: reply STOP to stop non-essential texts. Verification codes are needed to sign in.
7. Children
OVE is only for people 18 or older. We don’t knowingly collect information from anyone younger. If we learn we have, we delete it. We ask for your date of birth at sign-up. If you’re under 18, we don’t keep it.
8. Your California privacy rights
If you live in California, the California Consumer Privacy Act gives you the right to:
- know what personal information we collect, use and disclose, and get a copy;
- delete it, subject to legal exceptions;
- correct it;
- limit the use of sensitive personal information;
- not be treated differently for using these rights.
In the last 12 months we collected the categories in section 1 for the purposes in section 2 and disclosed them only as described in section 3. We don’t sell or share personal information, and we have no actual knowledge of selling or sharing information of anyone under 16. We use sensitive personal information (identity verification, fingerprints, precise location and account sign-in) only to provide the service you asked for and to keep it secure, which is why OVE doesn’t need a “Do Not Sell or Share” or “Limit” link.
How to make a request: email support@ovetouchngo.com with the subject “California privacy request” from the email on your account. We’ll confirm your identity with the phone number and email on your account, and answer within 45 days. An authorized agent can make a request for you with your signed permission.
Residents of other states with privacy laws (for example Colorado, Connecticut, Texas, Virginia and Washington) can make the same requests the same way. If we decline, you can appeal by replying to our answer.
9. Changes
If we change this notice, we’ll post the new version with its effective date and email you.
10. Contact
OVE, Inc., 1333 N Curson Ave, apt 209, Los Angeles, CA 90046, USA · support@ovetouchngo.com