Privacy Policy

1. Who We Are

Oge is a mobile application where users share daily outfit photos and rate each other's style. This Privacy Policy explains what personal data we collect when you use Oge, why we collect it, and what rights you have over it.

For any privacy-related questions, contact us at hello@ogeapp.com.

2. Data We Collect

Account data: When you register, we collect your email address and the password you create (stored encrypted). You may optionally add a username, full name, and profile photo.

Profile data: Country and city (set manually by you), content preference (men, women, or all), and an optional short bio. We do not access your device's GPS or location services at any point.

Outfit content: The photos you upload and any text description you add. Each outfit also stores the location (country and city) from your profile at the time of publication.

Activity data: The votes you cast on other outfits, the outfits you save, the collections you create, and the accounts you follow or block.

Push notification token: If you grant permission, we store a device token issued by Apple (APNs) or Google (FCM) to deliver notifications about activity on your outfits. You can revoke this permission at any time in your device settings.

Technical data: Basic request logs (timestamps, error logs) retained for up to 30 days for security and debugging purposes. We do not use third-party analytics SDKs.

3. How We Use Your Data

• To operate the app: showing you the feed, computing outfit scores and regional rankings, enabling voting, saves, follows, and collections.
• To send push notifications: informing you when someone votes on your outfit, follows you, or interacts with your content (only if you have granted permission).
• To personalize your feed: filtering content based on your selected region and content preference.
• To maintain safety: detecting and acting on policy violations, processing reports, and enforcing bans.
• To improve Oge: using anonymized, aggregate data (e.g., how many outfits are posted per day) to understand how the app is used. We do not build individual behavioral profiles for this purpose.

We do not use your data for advertising. We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract (Art. 6.1.b GDPR): processing your account data, content, votes, follows, and saves is necessary to provide the service you signed up for.
• Legitimate interests (Art. 6.1.f GDPR): security monitoring, abuse prevention, error logging, and service improvement — provided these interests are not overridden by your rights.
• Consent (Art. 6.1.a GDPR): sending push notifications. You may withdraw this consent at any time in your device settings without affecting the lawfulness of prior processing.

5. Who We Share Your Data With

We share your data only with the following service providers, and only to the extent necessary to operate Oge:

• Supabase: our backend provider, responsible for database storage, file storage (outfit photos), and authentication. Data is stored in the European Union. Supabase processes data as a data processor under a Data Processing Agreement.
• Apple (APNs) and Google (FCM): for delivering push notifications to iOS and Android devices respectively. Only your device token and a notification payload are shared.
• Expo: the framework used to build and distribute the app. Expo may process technical metadata (e.g., crash reports) as part of the app infrastructure.

We do not share your data with advertisers, data brokers, or any other third parties.

6. Public Information

The following information is visible to all users of Oge:

• Your username, profile photo, full name (if provided), and bio.
• Your country and city (if you choose to display location in your profile).
• The outfits you publish, including their scores and the number of votes.
• Your public collections.
• Your follower and following counts.

Your email address is never shown to other users. The specific scores you assign to each outfit are private.

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account:

• Your profile, outfits, photos, votes, saves, collections, and follows are permanently deleted within 30 days.
• Anonymized aggregate data (e.g., total vote counts used in historical score calculations) may be retained indefinitely as it can no longer be linked to you.
• Push notification tokens are deleted immediately upon account deletion.

8. Security

All data is transmitted over encrypted connections (HTTPS/TLS). Passwords are hashed using bcrypt and are never stored in plain text. Access to the database is restricted to authorized personnel and automated systems.

No system is completely secure. If you become aware of a security vulnerability in Oge, please report it to hello@ogeapp.com.

9. Your Rights

Depending on where you live, you have some or all of the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to correct inaccurate or incomplete data. You can update most of your data directly in the app under Settings → Edit Profile.
• Right to erasure: to request deletion of your personal data. You can delete your account directly in the app under Settings → Delete Account, or by contacting us.
• Right to restriction: to ask us to restrict processing of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent (push notifications), you may withdraw at any time.

To exercise any of these rights, contact us at hello@ogeapp.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in Spain: AEPD).

10. Children

Oge is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe that a child under 13 has created an account, please contact us at hello@ogeapp.com and we will delete the account and associated data promptly.

11. International Transfers

Oge is operated from Spain. If you access the app from outside the EEA, your data may be transferred to and processed in countries that may not offer the same level of data protection as your home country. By using Oge, you consent to such transfers. Where required, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses with Supabase).

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, our practices, or applicable law. We will notify you of material changes through the app. The date at the top of this page always reflects the most recent version.

13. Contact

For any questions, requests, or complaints regarding this Privacy Policy or how we handle your data, contact us at hello@ogeapp.com.