Privacy Policy

Introduction

Welcome to Oopi, operated by Marat Safutdinov, an individual residing in Saudi Arabia ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this privacy policy carefully. If you do not agree with the terms, please do not access the Service.

Information We Collect

Information You Provide to Us

• Account Information: When you create a registered account, we may collect your name, email address, and authentication identifiers (such as Apple ID or Google Sign-In data).
• Notes and Saved Content: We store text notes, recognized text results, and any content you create or save within the app on our cloud infrastructure (Supabase). This data is retained on our servers for as long as your account is active.
• Images: We store images you upload or capture within the app on our cloud infrastructure (Supabase) for the purposes of text recognition and note-keeping. Images remain stored on our servers until you delete them or delete your account.
• Token Transaction History: We keep track of your Token purchases and consumption (1 Token = 1 text recognition operation).

Information Automatically Collected

• User ID: A unique identifier linked to your account for app functionality and analytics purposes.
• Device ID: Device identifier used for anonymous accounts, analytics, and to enable tracking (with your consent).
• Device Information: Device model, OS version, and app version for compatibility and support.
• Usage Data: Information about how you interact with the app, including features used, actions taken, and session duration.
• Diagnostic Data: Crash logs, performance data, and other diagnostic information to help us improve the app.

Information from Third-Party Services

Payment Information: Payments are processed by third-party providers (e.g., Apple App Store, Google Play Store). We receive confirmation of the transaction and Token balance updates, but we do not store your credit card details.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following grounds:

You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

App Tracking Transparency (ATT)

On iOS devices, we request your permission to track your activity across other companies' apps and websites using Apple's App Tracking Transparency framework. This permission is requested before any tracking data is collected.

What Happens If You Allow Tracking

• We may use your Device ID (IDFA) for analytics purposes to understand how users discover and use our app.
• We may share this identifier with our analytics provider (Amplitude) to measure the effectiveness of our marketing efforts.
• Your data may be linked to your identity for personalized analytics.

What Happens If You Deny Tracking

• We will not access your device's advertising identifier (IDFA).
• You can still use all features of the app without any limitations.
• We will still collect basic analytics data that is not linked to your identity across other apps.

How We Use Your Information

We use your information solely for the following purposes:

We do not repurpose data collected for one purpose for another purpose without obtaining your additional consent, unless permitted by applicable law.

Data Processing and Third-Party AI

To provide text recognition functionality, we use third-party AI providers:

• AI Processing: When you submit an image for text recognition, the image is sent to providers such as OpenRouter (or other specialized AI APIs) to extract and recognize text.
• Your Consent: By using the text recognition feature, you explicitly consent to your images being transmitted to these third-party AI providers for processing. You may choose not to use this feature if you do not consent.
• Data Usage: These providers process your images to generate the text output. We do not sell your images or extracted text to third parties.
• Third-Party Retention: Third-party AI providers may temporarily cache data in accordance with their own privacy policies. We do not control their data processing practices beyond our contractual agreements with them.

Third-Party Data Processors

We use the following third-party services to process and manage your data. All third-party processors are contractually required to provide the same or equivalent level of data protection as described in this Privacy Policy.

Data Storage and Security

• Storage: Your data, including notes and images, is stored on secure cloud infrastructure provided by Supabase.
• Image Storage: Images you upload or capture are stored on our servers and remain accessible to you until you delete them or delete your account. When images are submitted for text recognition, they are also transmitted to third-party AI providers as described in Section 06.
• Encryption: We use industry-standard encryption (SSL/TLS) for data in transit. Data at rest is protected by our cloud infrastructure provider's security measures.
• Anonymous Accounts: Data tied to a Device ID may be lost if you clear your device storage or change devices.

Data Retention and Deletion

• Active Accounts: Your account data, notes, images, and text recognition results are retained for as long as your account is active.
• Account Deletion: When you delete your account (via Profile → Delete Account), we delete all your data from our servers, including notes, images, text recognition results, token history, and usage data. Deletion is completed imidiatly after your confirm and we do not have any way to recover your data.
• Third-Party Retention: Some anonymized or aggregated data may be retained by third-party analytics providers (such as Amplitude) in accordance with their own data retention policies.
• Legal Obligations: We may retain certain data if required by applicable law or to resolve disputes.

Your Rights

Depending on your location (e.g., EEA, UK, Saudi Arabia), you may have the following rights:

• Access & Portability: Request a copy of your personal data in a structured, commonly used format.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your account and all associated data.
• Restrict Processing: Request that we limit processing of your data in certain circumstances.
• Object: Object to processing based on legitimate interest.
• Withdraw Consent: Withdraw consent for processing at any time, without affecting the lawfulness of processing prior to withdrawal.

How to Exercise Your Rights

• In-app: Delete your account via Profile → Delete Account.
• Tracking: Change tracking preferences in device Settings under Privacy & Security → Tracking.
• By email: Contact us at privacy@oooopi.com. We will respond within 30 days.

Children's Privacy

Oopi is not intended for children under 13 years of age (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected such data, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@oooopi.com.

Data Sharing

We do not sell your personal information. We only share data with:

• Service Providers: AI API providers (OpenRouter), analytics tools (Amplitude), error tracking (Sentry), database infrastructure (Supabase), purchase management (RevenueCat), and payment processors — solely as necessary to operate the Service.
• Analytics Partners: With your consent (via ATT on iOS), we may share device identifiers with analytics providers to understand app usage patterns and improve our service.

We will not share your personal data with any other third parties without your explicit consent, unless required by law.

Your Choices and Consent

Consent

By using the Service, you consent to the collection and use of your information as described in this Privacy Policy. For tracking across other apps and websites, we request your explicit permission via Apple's App Tracking Transparency framework before any such tracking occurs. For text recognition, your use of the feature constitutes consent to transmit images to third-party AI providers as described in Section 06.

Withdrawing Consent

You can withdraw your consent at any time through the following methods:

• Tracking Preferences: You can control app tracking permissions in your device's Settings under Privacy & Security → Tracking.
• Account Deletion: You can delete your account at any time through Profile → Delete Account in the app. This will permanently delete all your data from our servers and effectively withdraw all consent for data processing.
• Contact Us: You can contact us via email to request data deletion or to withdraw consent for specific processing activities.

Data Access

You can request a copy of your data by contacting us at the email provided below.

Data Minimization

We only collect data that is necessary for the core functionality of the Service. You can use all essential features of the app even if you:

• Deny tracking permission (ATT)
• Do not provide optional information

We will never require you to grant unnecessary permissions to access paid features or core functionality. Paid functionality is not dependent on granting access to data unrelated to the purchased feature.

International Data Transfers

Your data may be transferred to and processed in countries other than your own, including countries where our cloud infrastructure providers (Supabase) and AI processing providers (OpenRouter) operate. We ensure that appropriate safeguards are in place, including contractual obligations, to protect your data in accordance with applicable data protection laws.

Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by updating the "Effective Date" at the top of this page and, for significant changes, via in-app notification. We encourage you to review this Privacy Policy regularly.

Contact Us

For questions, data requests, or to exercise your rights, please contact: