Owlo Privacy Policy
Effective date: November 15, 2026
Operator: Kadir Uyanık
Contact: support@getowlo.app
1. In short
- Owlo shows no ads, does not track you and never sells your data.
- The app contains no analytics or advertising software (SDK). We do not follow you across apps or websites.
- Your data is shown only to the members of the groups you are in.
- We use your data only to make the app work.
2. Data we process
- Account: your email address (through Supabase Auth). If you sign in with Apple or Google, those services pass us your account ID and email address.
- Profile: your display name, your profile photo (optional), your default currency and your language preference.
- Group content: your groups, member names inside a group, expenses (description, amount, currency, date, category, note, who paid and how it is split), settlements (payments that clear debts), comments, activity history and expense edit history.
- Invites: invite links and whether they were used.
- Notifications: your device's push token and platform (iOS or Android), the queue of notifications to send, and your notification settings (expenses, payments, reminders).
- On your device: your session, a cache of recently read data, changes waiting to be sent, and your language and theme settings.
We do not collect your location, contacts, microphone or advertising ID. The photo library is accessed only when you choose a profile photo.
3. Who sees your data
Members of a group see your name in that group, your photo, expenses, settlements, comments and activity. No data is given or sold to advertisers or data brokers. Your email address is not shown to other group members.
4. Why we use your data
Only for app functionality: to sign you in, calculate group expenses and balances, sync with group members and send notifications. Owlo does not move money and does not process payments.
5. Processors
| Service | Purpose | Data |
|---|---|---|
| Supabase | Hosting, database, file storage, authentication (region: EU (Ireland)) | All account and group data described in this policy |
| Resend | Sends sign-in code emails (region: EU) | Email address and one-time code |
| Cloudflare | Website hosting and support email forwarding | IP address on web requests; contents of support emails |
| Expo Push Service | Relays push notifications | Push token and notification text |
| Apple and Google push services (APNs, FCM) | Deliver the notification to your device | Push token and notification text |
| Sign in with Apple and Google | Authentication, if you choose it | Account ID and email |
| Frankfurter / European Central Bank | Daily exchange rates | No personal data is sent; our server fetches the rates |
Notification text can include the group name, the name of the person who acted, the expense description or comment, and the amount. This text passes through Expo, Apple and Google. You can turn notifications off at any time on the Account screen.
6. Retention
- Deleted expenses and settlements: can be restored within 30 days of deletion. After 30 days they cannot be restored and are no longer shown. There is currently no automatic job that permanently deletes these records from the database; they stay hidden as part of the group's records. Groups that have been deleted (closed), including groups closed by an account deletion, are kept the same way: their expenses, comments and activity stay hidden, not erased. To ask for permanent deletion of any of this, write to support@getowlo.app.
- Notifications: records of sent notifications are deleted after 30 days. Records that could not be sent after repeated attempts are also deleted after 30 days.
- Invites: an invite link expires 14 days after it is created.
- Cache on your device: data kept for offline reading is used for at most 7 days. Changes waiting to be sent stay on your device until they are sent. The cache on your device is cleared when you sign out or delete your account.
- Other data: kept while your account is open.
7. Deleting your account
You can delete your account on the Account screen. For security you must have signed in within the last 10 minutes; otherwise you are asked to sign in again. When you delete:
- Your profile, email record, push tokens, notification settings and profile photos are deleted.
- Your pending notifications are deleted; your name in other people's notifications is replaced with "Silinmiş kullanıcı" ("Deleted user").
- Your member records in groups are not deleted; the name is changed to "Silinmiş kullanıcı" and the link to your account is cut. Balances and past expenses are kept so other members' accounts stay correct. Expense descriptions and comments stay in the group, attached to this anonymous member.
- Groups where you were the only active member are closed and hidden; their expenses, comments and activity are kept hidden. You can ask for permanent deletion at support@getowlo.app.
Deleting an account cannot be undone.
8. Your rights
You have the right to access, correct, delete and port your data. You can correct your name and photo in the app and delete your account. For other requests, write to support@getowlo.app.
9. Security
Data travels between your device and the server over encrypted connections. On the server, each user can reach only the data of the groups they belong to. No system is completely secure.
10. Children
Owlo is not directed at children. We do not knowingly collect data from anyone under 13.
11. Changes
If we update this policy we will publish the new version with a new effective date. We will announce important changes in the app.
12. Contact
Kadir Uyanık — support@getowlo.app