Owlen Privacy Policy
This Privacy Policy explains how Owlen collects, uses, shares, and protects your information when you use our mobile application and related services.
1. Scope
This policy applies to users in the United States and globally, unless a local law provides additional rights. By creating an account or using the app, you agree to the practices described here.
2. Information We Collect
- Account and profile data: account identifier, email address, display name, sign-in provider, and basic profile details you provide or authorize us to receive.
- Onboarding data: age range selection and onboarding completion metadata used to configure your account experience.
- Authentication data: OAuth tokens or claims from Google Sign-In or Sign in with Apple, used only for identity, session management, and account security.
- Purchase and entitlement data: product identifiers, transaction identifiers, purchase status, restore information, and entitlement state needed to provide paid features.
- App usage data: feature usage records, app events, and operational logs needed to run, secure, and improve the service.
- User content: prompts, workspace inputs, generated result history, and other content you submit in the app to receive core product functionality.
- AI request content: the text you enter, links you add, images you upload, and clarification answers you provide when asking Owlen to analyze a question or generate a response.
- Device and technical data: app version, platform, device model class, language, time zone, and network diagnostics.
3. How We Collect Information
- Directly from you: when you create an account, edit your profile, purchase a subscription, type text, upload an image, add a link, answer a clarification question, or contact support.
- Automatically through app operation: when the app records entitlement state, session activity, technical diagnostics, security events, and service logs needed to run the product.
- From service providers you choose: when you sign in with Google or Apple, restore purchases, or use features that depend on external infrastructure providers.
4. How We Use Information
- Authenticate users and maintain account security.
- Provide app features, sync data, and keep sessions stable.
- Provide paid access, restore purchases, and reconcile entitlements.
- Process your prompts, links, uploaded images, and clarification answers to generate AI-assisted responses and decision support.
- Prevent abuse, fraud, unauthorized access, and policy violations.
- Debug issues and improve performance and product quality.
- Comply with legal obligations and enforce our terms.
5. Google Sign-In and Google User Data
If you choose Google Sign-In, we access only the minimum Google account data required for authentication and profile display, such as your email address and basic profile details, subject to your Google consent screen.
We follow the Google API Services User Data Policy, including Limited Use requirements where applicable. We do not sell Google user data and do not use Google user data for unrelated advertising.
6. Sign in with Apple
If you choose Sign in with Apple, we process only the data Apple shares for authentication. If you select Apple’s private email relay, we use the relay address as your account email and respect that choice.
We handle personal data in line with Apple platform privacy expectations and App Store Review Guideline 5.1.1 requirements.
7. AI Processing and Third-Party Services
When you use Owlen’s AI features, we may send the content needed to fulfill your request to third-party service providers acting on our behalf.
- OpenRouter: when our configured model route uses OpenRouter, we may send the text you enter, links you add, images you upload, and clarification answers you provide so the service can process the AI request and return a response.
- Google Gemini: we may send the text you enter, links you add, images you upload, and clarification answers you provide so the service can analyze your request and generate a response.
- Brave Search or Tavily: if Owlen needs web search to answer your request, we may send relevant search queries derived from your request to one of these providers to retrieve supporting public web results.
- Supabase: we use Supabase for authentication, database, and storage infrastructure, including storing uploaded image files and workflow data needed to operate the service.
We share only the data reasonably necessary to provide the feature you requested. We require service providers that process data on our behalf to provide confidentiality, security, and data protection measures that are the same as or substantially similar to our own requirements.
8. Sharing and Disclosure
We do not sell your personal information.
We may share limited information with service providers that support the app, for example authentication, hosting, database, storage, AI model processing, search retrieval, billing, analytics, or security operations, under contractual confidentiality and data protection obligations.
We may also disclose information if required by law, legal process, or to protect the rights, safety, and integrity of users, our services, or the public.
9. Data Retention
We keep personal data for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and legal requirements.
If you delete your account, we will delete or de-identify personal data associated with your account except where we are required or permitted by law to retain specific records.
10. Your Privacy Rights (United States)
Depending on your state of residence, including California, you may have rights to request access, correction, deletion, or portability of your personal information, and rights related to certain sharing uses.
You can initiate account deletion in the app from Profile > Delete account. For privacy questions or other privacy requests, contact us at innovalog.app@gmail.com.
11. Children’s Privacy
The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us so we can delete it.
12. Security
We use reasonable administrative, technical, and organizational measures to protect personal information. No system is completely secure, so we cannot guarantee absolute security.
13. International Transfers
Your information may be processed in countries other than your own. Where required, we use safeguards designed to protect personal information during cross-border transfer.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date and, where required, additional notice within the app.
15. Contact
For privacy questions, deletion requests, or complaints, contact innovalog.app@gmail.com.