Privacy Policy
Last updated: March 2026
Who We Are
Opalo is a private social app for sharing moments with close friends. This policy explains what data we collect, why, and how you can control it. If you have questions, contact us at support@opaloapp.io.
What We Collect
Account information: Your email address, username, display name, and profile/cover pictures. Collected when you sign up via email, Google, or Apple Sign-In. Messages and media: Text messages, photos, videos, and voice notes you send to friends are stored on our servers (Firebase) so they can be delivered to recipients. View-once media is deleted from our servers after viewing. Journal entries: Photos, videos, and journal entries you save to your journal are stored locally on your device and synced to your personal iCloud account. We do not have access to your journal data. Device information: We store a push notification token (FCM token) on your device so we can deliver notifications. Firebase infrastructure may collect IP addresses and basic device information for service operation. Usage data: If crash reporting is enabled, anonymous crash logs may be collected to help us fix bugs.
Why We Collect It
We collect data only to make the app work: • Account info — so your friends can find and message you • Messages and media — so they reach the people you send them to • Push notification tokens — so you know when someone messages you • Crash data — so we can fix problems We do not collect data for advertising, profiling, or analytics beyond basic crash reporting.
Who We Share With
We do not sell, rent, or share your personal data with advertisers or data brokers. We use Google Firebase as our infrastructure provider. Firebase processes your data on our behalf under Google's Data Processing Terms. Data is stored on servers in the United States. Messages and media you send are delivered to the friends you choose. We do not share your data with anyone else.
How Long We Keep It
Account data: Kept until you delete your account. Messages and media: Kept until you or the other participant deletes them, or until you delete your account. View-once media: Deleted from our servers after the recipient views it (60-second replay window, then permanently deleted). Journal data: Stored on your device and iCloud — we never have access to it.
Your Rights
You can: • Delete your account and all associated data at any time from Settings. This removes your messages, media, friend connections, and profile from our servers. • Request a copy of your data by contacting us. • Correct your information by editing your profile. If you are in the EU, you also have the right to: data portability (receive your data in a machine-readable format), restrict processing, object to processing, and lodge a complaint with your local data protection authority. To exercise any of these rights, email support@opaloapp.io.
Children
Opalo is not intended for anyone under 13. We do not knowingly collect data from children under 13. If we learn that a user is under 13, we will delete their account and data.
Changes
If we make significant changes to this policy, we will notify you in the app before the changes take effect.