Privacy policy

§01Data collected

Data categories:

• Account: email, name, username, photo, bio, birth date
• Content: posts, photos, videos, comments, likes
• Messages: DM and Spheres content (for moderation if reported)
• Technical: IP address, device type, OS, browser, cookie/device IDs
• Usage: pages visited, duration, interactions (scroll, clicks), searches
• Location: IP-based location (approximate), optional GPS if allowed
• Contacts: if imported, emails/phone numbers stored temporarily.

§02Use of data

Your data is used to:

• Provide the service (accounts, storage, DMs, Spheres)
• Security and moderation (abuse, fraud, harassment detection)
• Continuous improvement (non-identifying analytics, trends)
• Light personalization (recommendations, feed algorithm)
• Communication (notifications, support, legal updates).

We do NOT use your data for targeted advertising or sell it to third parties.

§03Location data

We may infer an approximate location from your IP address (security, language, relevance).

• Precise location (GPS) is used only if you explicitly authorize it, for example for a Marketplace listing
• You can revoke this authorization at any time in your phone's settings
• We do not continuously track your movements.

§04Marketing & communications

We may inform you about the service and, with your consent, send you offers.

• Essential communications (security, moderation, legal, transactional) are always sent
• Marketing messages are optional and can be disabled under 'Consents' or via the unsubscribe link
• We neither rent nor sell your contact details to advertisers.

§05Legal basis for processing

We process your data on clear legal bases (GDPR):

• Performance of the contract: providing the service you request
• Legitimate interest: security, fraud prevention, product improvement
• Consent: analytics, personalization, notifications — revocable at any time
• Legal obligation: retaining and responding to valid legal requests.

You can withdraw your consent at any time under "Consents".

§06Sharing & third parties

We NEVER sell your personal data.

We share with:

• Technical providers (Firebase hosting, CDN, email) under trusted contracts
• Legal authorities when served a subpoena/court order
• Moderation partners (for serious reports)
• Analytics (Google Analytics, with personal data stripped).

All partners are bound by confidentiality obligations.

§07Providers & processors

We rely on trusted providers that process data on our behalf, notably:

• Hosting & infrastructure: Google Cloud / Firebase
• Media storage & CDN: Cloudflare R2
• Notifications: Firebase Cloud Messaging
• Payments & subscriptions: Google Play / RevenueCat
• Diagnostics & aggregate audience measurement.

Each is bound by confidentiality obligations and may only use your data for the service provided.

§08Ads in your feed

Oppall shows third-party ads in the feed, provided by Google AdMob.

• Advertising identifiers may be shared with this partner to serve and measure ads
• You control personalization via "Consents" and the system consent prompt; minors only receive non-personalized ads
• A Premium subscription removes all ads.

§09International transfers

Oppall relies on providers (hosting, CDN, payment) that may process data outside your country.

• These transfers are governed by appropriate safeguards (standard contractual clauses, certified providers)
• We limit transferred data to what is strictly necessary
• Your data is never sold, wherever it is hosted.

§10Retention period

We keep your data only for as long as it is useful:

• Account: while it is active, then 30 days after deletion
• Aggregated usage & analytics: up to 24 months
• Deleted messages: up to 48 h in backup, then erased
• Reported or moderated items: up to 12 months (safety and appeals)
• Billing data: as required by legal and tax obligations.

Upon expiry, data is deleted or anonymized.

§11Security & retention

We use:

• HTTPS/TLS for secure transit
• Encryption at rest (databases)
• Optional multi-factor authentication
• Continuous auditing and monitoring.

Retention:

• Account data: as long as the account is active + 30 days after deletion
• Usage data: 24 months (aggregated analytics)
• Deleted messages: 48 hours (backup) then erased
• Moderation reports: 12 months.

§12In the event of a data breach

Despite our protections, no system is infallible.

• In the event of a breach likely to pose a risk to your rights, we inform the competent authorities and the affected persons within the legal deadlines
• We describe the nature of the incident, the data affected and the measures taken
• Keep your password secret and enable the available protections to reduce the risks.

§13Cookies & identifiers

We use:

• Session cookies (to keep you signed in)
• Local identifiers (SharedPreferences, iCloud/Play on mobile)
• Tracking pixels (1x1 for non-identifying measurement)
• Device ID (IDFA on iOS, Google Advertising ID on Android, optional).

No third-party ad cookies. You can manage these settings in your account.

§14Moderation & automated decisions

To protect you, automated systems analyze certain content (abuse, spam, CSAM, deepfakes):

• Any significant automated decision is re-checked by a human before a final sanction
• You are notified and can appeal
• You can decline non-essential automated analysis under "Consents"; mandatory safety detection remains.

Full details in the Transparency Center.

§15AI & model improvement

We use automated systems for security, research and recommendations.

• Your content and usage signals may be used to improve these systems (abuse detection, relevance), preferably in aggregated or de-identified form
• We do not use your private messages for advertising purposes
• We do not sell your data to third parties to train their models
• Where the law provides for it, you can object to certain processing under 'Consents'.

§16Your rights (GDPR/CCPA)

You have the right to:

• Access: download a copy of your data
• Rectification: correct inaccurate info
• Erasure: "right to be forgotten" (except legal obligations)
• Restriction: suspend processing
• Portability: export your data in a standard format
• Objection: refuse processing based on legitimate interest
• Restriction: limit use of sensitive data.

Request via loticce@gmail.com. Response within 30 days.

§17How to exercise your rights

To exercise your rights (access, rectification, deletion, export, objection):

• Write to loticce@gmail.com from the address linked to your account, or use the in-app tools
• We may verify your identity before responding, for your security
• We respond in principle within 30 days
• Exercising your rights is free, except for manifestly unfounded or repetitive requests.

§18Regional rights (EU, California, Brazil…)

Depending on where you reside, specific rights apply:

• EU/EEA & United Kingdom (GDPR): access, erasure, portability, objection, complaint to a supervisory authority
• California (CCPA/CPRA): the right to know, delete, correct, and opt out of the 'sale' or 'sharing' — Oppall does not sell your data
• Brazil (LGPD) and other regions: equivalent rights.

We apply to everyone the highest level of protection reasonably possible.

§19Payments & subscriptions

For Premium/Business subscriptions, Boost and the Market:

• Payment is processed by the app store (Google Play) or our providers — your banking details never pass through Oppall
• We only keep the subscription status (active, expiry date) and the necessary history
• No banking details are stored on our servers.

The source of truth for your premium status is our server, updated by the store.

§20Minors (< 18)

Oppall applies strict protections for minors:

• Age verification (13-18 identified)
• DMs: only people they follow or approved contacts
• No invasive recommendation algorithm
• Sensitive content filtered/restricted
• Parents/guardians can request account deletion
• No profiling to predict sensitive behavior.

If a child is under 13: account is removed immediately.

§21Inactive accounts & deceased persons

An account that has remained inactive for a long time may be flagged, restricted or deleted after warning, in order to free up the username and protect your data.

• A relative may request the deletion of a deceased person's account, upon supporting documentation
• The data is then deleted or anonymized according to our retention periods.