KodingKorp (Shivam Mathur, "we", "us") publishes the Ovi desktop application and the website at getovi.in. This Privacy Policy describes what data we do and don't collect.
1. The short version
Ovi is a local-only reader. The application does not have an account system, does not require sign-up, and does not transmit the contents of the files or folders you open. We do collect a small amount of anonymous usage data — page views on this site, plus five lifecycle events from the desktop app — to understand whether the product is working for the people who try it. The exact list is in §9. You can disable the desktop telemetry from Settings → Privacy & telemetry.
2. The Ovi application
The Ovi desktop app reads files only from folders you explicitly open. It does not scan the rest of your filesystem and does not upload the contents of those files anywhere.
The app sends a small set of anonymous usage events through our own reverse proxy at v.getovi.in, which forwards them to PostHog (US data centre): when the app is opened, when it has rendered a markdown file successfully, when you return after at least 24 hours, when you've installed an upgraded version, and when you turn this telemetry off. The events carry an anonymous device-scoped identifier (a random UUID generated on first launch), the running Ovi version, and bucketed return-frequency. They never carry file names, file paths, folder names, or anything you have read in the app. You can disable telemetry from Settings → Privacy & telemetry; the toggle takes effect immediately and rotates the device identifier so a future re-opt cannot be linked to old data.
The app also makes a periodic check (roughly every four hours while running) to updater.getovi.in to see whether a newer version of Ovi is available. This request transmits your IP address and User-Agent (which includes the running Ovi version and OS) — the same information any web request transmits — and nothing about your files or activity inside the app.
3. The getovi.in website
The marketing site you are reading now uses PostHog (US data centre) to count page views, download-button clicks, and manifest-load failures. Events go through our own reverse proxy at v.getovi.in before reaching PostHog. We do not enable click autocapture, session recordings, or heatmaps; we do not run Google Analytics, Plausible, or similar tools. On your first visit a banner asks whether to allow cookies for analytics — until you choose, the site runs in cookieless mode and sets no analytics cookies. The data we collect is listed in §9; the exact cookies and storage entries set after you accept are listed at Cookie Policy. PostHog respects the Do Not Track browser signal — if your browser sends DNT, no events are sent. You can also block v.getovi.in in your browser or with a content-blocker; the site will continue to work.
Windows and Mac download buttons fetch the installer from updater.getovi.in. The Omarchy button copies a command; running it downloads the installation script and application from the same server. These HTTP requests include your IP address and User-Agent. We retain web-server access logs for up to 30 days for the sole purposes of (a) producing aggregate download counts and (b) diagnosing infrastructure issues.
4. What we do not collect
- Contents of files or folders opened in Ovi.
- File names, paths, or directory structures from your machine.
- Account information — there are no accounts.
- Email addresses or other personal information, unless you voluntarily contact us.
- Crash reports, stack traces, or free-text input from inside the app.
- Heatmaps, session recordings, or autocaptured click streams.
5. If you contact us
If you email or message us at the contacts in the Imprint, we keep your message and reply on our mail or messaging server for as long as the conversation is useful. We do not add you to any mailing list and do not share your message with anyone outside KodingKorp.
6. Children
Ovi is a general-purpose reading tool and is not directed at children under 13. We do not knowingly collect any data from children.
7. Your rights under Indian and EU law
The anonymous usage data described in §9 is keyed to a random per-device identifier and contains no personal information. If you believe we hold data about you (for instance, an email exchange you initiated), email us at [email protected] and we will respond within 30 days under the Digital Personal Data Protection Act, 2023 (India) and the GDPR (EU).
8. Changes
If this policy changes materially, we'll update the "Effective" date at the top and post the new version at this URL.
9. What we collect, exactly
Below is the complete event list. All events also carry the same base properties: product=ovi, the surface (web or desktop), the environment (prod), the running release/build, and a schema version.
Website (getovi.in):
page_viewed— fires on each page view; carries the path group (/,/legal/<slug>) and anyutm_*parameters present in the URL.download_clicked— fires when you click a download button or successfully copy the Omarchy installation command; carries the platform key (e.g.windows-x86_64) the Ovi version on offer, anddownload_type(windows,macos, orlinux; copying the Omarchy installation command useslinux).manifest_fetch_failed— fires if the download list cannot be loaded; carries an error category (network,http,parse) and HTTP status if applicable.
Desktop app:
app_opened— once per app launch; carries aninstall_source=unknownplaceholder (we do not have install-source attribution today).first_value_reached— fires the first time a markdown file successfully renders in a session; carriesvalue_type=markdown_rendered.app_reopened— fires when you return after at least 24 hours; carries a bucketeddays_since_last_seen(0,1-3,4-7,8-30,30+).update_applied— fires once after an upgrade, on the first launch under the new version; carries the previous and new version strings.telemetry_opted_out— fires once when you turn the toggle off, before further events stop. After this event, no more events are sent and the device identifier is rotated.
10. How to opt out
- Desktop: open Settings (Ctrl+,) → Privacy & telemetry → switch off Share anonymous usage. Effective immediately.
- Web: click Cookie settings in the footer at the bottom of any page and choose Decline. Aggregate page-view counts will still flow but with no cookies, no
localStorageidentity, and no persistent device id. You can also enable Do Not Track in your browser, or blockv.getovi.inwith a content-blocker; the site will continue to work in either case.
11. Subprocessors and security
The only third party that processes Ovi usage events is PostHog Inc. (San Francisco, CA, USA), our analytics processor. Events go through our first-party reverse proxy at v.getovi.in before reaching PostHog's US infrastructure. Our processing relationship with PostHog is governed by their standard Data Processing Addendum, which uses the European Commission's Standard Contractual Clauses for transfers from the EU/EEA and UK to the US. PostHog's own subprocessors (e.g. their hosting and email vendors) are listed at posthog.com/privacy#sub-processors.
No other vendor receives personal data from us. Our website hosting (Coolify on a self-managed VPS) and updater logs (Caddy access logs) stay on infrastructure we operate directly. We do not share, sell, or rent any data to anyone.
For our security posture, vulnerability disclosure process, and how to report a suspected security issue, see the Security section of our notices page. The same section lists how we handle breach notifications under DPDP and GDPR.
12. Open-source notices and accessibility
Ovi bundles open-source software whose licenses we honour. The full list, with versions and license notices, is at Open-Source Notices. Our accessibility status (WCAG 2.2 AA target, current conformance, and known gaps) is at Accessibility.
13. Contact
Questions about this policy: [email protected]. Postal address and proprietor details are in the Imprint. Security reports: see the Security section of our notices page.