Privacy policy

Who we are

oya1 is run by [OPERATOR NAME], [CITY], Australia. Questions, access requests and deletion requests: [CONTACT EMAIL]. We follow the Australian Privacy Principles under the Privacy Act 1988 (Cth).

The short version

• We keep only what the app needs to work: your account, your IOUs and the people you swap them with.
• No ads. No analytics or tracking. Nothing is sold or shared for marketing.
• You can delete your account, and everything in it, at any time.

What we collect, and why

• Account: email address, display name, date of birth, and a scrambled (hashed) password — to sign you in, show your name to your contacts, and apply the under-18 rules. Your date of birth is never shown to anyone else.
• Security: passkey public keys, a hashed Spend PIN, hashed NFC card codes, and sign-in sessions. None of these can be turned back into the secret.
• What you put in: IOUs (what, how fast, expiry, notes, conditions, NSFW flag), spends, refunds, reminders, contacts, parent–child links, and your app settings — because that is the app.
• Notifications: if you turn them on, a push address for your device, issued by your phone’s maker (Apple, Google or your browser).
• Problem reports: only when you send one — your message, any screenshots you attach, the page you were on and your browser type.
• Beta agreement: when you agreed, which version, your IP address and browser type at that moment, as a record of consent.
• Technical: your IP address is used briefly in memory to slow down password guessing; it is not stored with your account.

Who can see it

• Your contacts see your display name, the IOUs between you, and whether you are under 18.
• A linked parent (for accounts aged 13–17) sees everything their child owes and is owed, their contacts and recent activity, and approves new contacts.
• NSFW titles are hidden from view, including on lock screens, until spent or revealed with your PIN.
• Service providers who process data only to run the app: [HOSTING PROVIDER], Cloudflare (network and security), push services (Apple, Google, Mozilla) to deliver notifications, and [EMAIL PROVIDER] to send invites and password resets.
• We will disclose data if the law requires it, and not otherwise.

Children

You must be 13 or over. Accounts aged 13–17 have NSFW turned off and a word filter on, and can be linked to a parent with a code. If we learn an account belongs to someone under 13, we delete it.

How long we keep it

For as long as you have an account. Deleting your account removes it straight away from the live service; backups are overwritten within 30 days. Expired sign-in sessions, challenges and reset links are cleared automatically.

Where it is kept

On servers in [COUNTRY / REGION]. Data is encrypted in transit (HTTPS) between your device and our servers.

Your choices

• See or correct it: most of it is visible in the app; for anything else, email us.
• Delete it: Settings → Security → Delete my account, or /delete-account.
• Complain: to us first; if unresolved, the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If this policy changes in a way that matters, we will tell you in the app before it takes effect.