Privacy Policy
Comprehensive details on how OlyShare collects, secures, and manages your financial and personal data.
1. Introduction and Scope
Welcome to OlyShare ("we," "our," or "us"). Your privacy is paramount. This Privacy Policy governs your use of the OlyShare mobile application and related services. By accessing or using our Service, you agree to the collection and use of information in accordance with this policy.
We are committed to full transparency regarding the data we collect to provide our expense splitting, receipt scanning, and social financial tracking services.
2. Information We Collect
We collect specific types of data to enable our features and prevent fraud:
A. Personal Identity Information
- Mobile Number: Required for account creation, identity verification via WhatsApp/SMS OTP, and finding friends.
- Username & Name: To identify you within groups and shared bills.
- Google Account Data: If you sign up via Google, we access your email and profile picture.
B. Financial & Transaction Data
- Receipt Images: Photos you upload for processing.
- Extracted Data: Item names, prices, merchant names, dates, and fees (VAT, Service) extracted by our AI.
- Manual Expenses: Cash entries you log directly.
C. Device & Technical Data
- Device ID: A unique identifier for your device used for fraud prevention, security fingerprinting, and enforcing free-tier limits.
- IP Address & Logs: For security monitoring and regional localization.
D. Social Data (Optional)
- Contact List: Accessed only with your explicit permission to help you find friends who already use OlyShare. We do not store your contacts' data unless you invite them.
3. How We Process and Share Data
We rely on trusted third-party processors to deliver our services. Data is shared strictly for operational purposes:
| Processor / Service | Purpose |
|---|---|
| AWS (Amazon Web Services) | Secure cloud hosting, database storage, and image storage. |
| Google Gemini AI | Advanced Bilingual OCR processing to read Arabic/English text from your receipts. |
| Google Firebase / Auth | Secure authentication and social login management. |
| SMS/WhatsApp Gateways | Sending One-Time Passwords (OTP) for phone number verification. |
4. Data Retention and Deletion
To manage storage costs and privacy, we enforce strict data retention policies based on your subscription tier. This applies specifically to Receipt Images and raw scan data.
- Free Tier7 DaysImage Retention
- Standard Tier1 YearImage Retention
- Pro / UltimateLifetimeImage Retention
Note: While raw receipt images may be deleted according to the schedule above, extracted transaction metadata (amounts, dates, splits) is retained in your transaction history to maintain the integrity of shared group balances.
Account Deletion: You may request full account deletion at any time via the "Settings" menu. Upon deletion, all your personal data is permanently removed from our active databases within 30 days. Anonymized data may be kept for analytical purposes.
5. Security Measures
- Encryption: All data is encrypted in transit (using TLS/SSL) and at rest within our databases.
- Access Control: Administrative access to user data is strictly logged and limited to authorized personnel for support purposes only.
- Device Fingerprinting: We utilize hardware-level device IDs to detect suspicious activity and prevent multiple accounts from abusing free-tier quotas on a single device.
6. Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of any inaccurate or incomplete data (e.g., update your profile).
- Export: Standard and Pro users can export their data to PDF or Excel formats.
- Objection: Object to the processing of your personal data for marketing purposes.
If you have questions regarding this policy or wish to exercise your rights, please contact our Data Protection Officer at:
[email protected]