Privacy Policy

Opnr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services ("Service").

Data Controller

The data controller responsible for your personal information is:

• Service Name: Opnr
• Contact Email: contact@op-nr.app
• Location: United Kingdom (England and Wales)

1. Information We Collect

1.1 Information You Provide

When you use Opnr, you may provide us with:

• Account Information: Email address, password (encrypted), and user ID
• Profile Data: Optional profile customization (if provided)
• Input Content: Text, images, and context you provide for AI generation
• Payment Information: Processed securely through Google Play or App Store (we do not store credit card details)
• Communications: Support requests and feedback sent to us

1.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, generation history, credit usage, timestamps
• Analytics Data: App performance, error logs, crash reports
• Location Data: Approximate location (country/region level only, not precise location)

1.3 AI-Generated Content

We temporarily process and store:

• Your input text and images submitted for AI processing
• AI-generated responses and suggestions
• Generation metadata (mode, style, language preferences)

2. How We Use Your Information

We use collected information for the following purposes:

Purpose	Data Used
Provide AI generation services	Input content, preferences, credit balance
Account management	Email, user ID, authentication data
Process payments	Purchase history, credit transactions
Improve Service quality	Usage patterns, generation history, feedback
Personalization	Language preferences, usage history
Customer support	Contact information, support requests
Security and fraud prevention	Device info, usage patterns, account activity
Legal compliance	All collected data as required by law

3. AI Processing and Data Retention

3.1 AI Service Providers

We use third-party AI services to process your content:

• xAI Grok: For all AI generation features including text generation, vision analysis, and content processing

Your input content is sent to this service for processing. We use API-based access and do not grant the provider direct access to your account or personal information beyond what's necessary for AI generation.

3.2 Data Retention

• Generation History: Stored in your account until you delete it or close your account
• Uploaded Images: Stored in Firebase Storage under your user ID. Retained in your account until you delete individual generations or your entire account. Images are not shared with other users and are only accessible by you.
• Account Data: Retained while your account is active and for 30 days after deletion
• Analytics Data: Aggregated and anonymized after 90 days

4. Information Sharing and Disclosure

4.1 We DO NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share limited information with trusted service providers who assist us:

• Firebase/Google Cloud: Backend infrastructure, authentication, database
• AI Providers: xAI Grok for content generation
• Google Play / App Store: Payment processing and app distribution
• AdMob: Ad delivery for free tier users (with user consent)

4.3 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service
• Protect our rights, privacy, safety, or property
• Investigate fraud or security issues

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Firebase Security: Firestore security rules, authentication protocols
• Access Controls: Limited employee access on a need-to-know basis
• Regular Audits: Security reviews and vulnerability assessments
• Secure Storage: Passwords hashed using industry-standard algorithms

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

• Access: View your account information and generation history in the app
• Delete: Remove individual generations or your entire account
• Correct: Update your email address and preferences
• Export: Request a copy of your data (contact support)
• Object: Opt out of certain data processing activities

6.2 Account Deletion

To delete your account:

1. Open the Opnr app
2. Go to Profile
3. Scroll down and tap "Delete Account"
4. Confirm deletion in the dialog

Upon deletion, we will immediately remove:

• Your account and authentication data
• All generation history
• All uploaded images
• All remaining credits

This action is permanent and cannot be undone. Some anonymized analytics data may be retained.

6.3 Marketing Communications

We do not send marketing emails. Transactional emails (verification, support responses) are necessary for Service operation.

7. Cookies and Tracking

7.1 Mobile App

Our mobile app does not use browser cookies but may use similar technologies:

• Local Storage: For app preferences and session management
• Analytics SDKs: For app performance monitoring (Firebase Analytics)
• Advertising IDs: For ad delivery if using free tier (can be reset in device settings)

7.2 Website

Our website (op-nr.app) uses minimal analytics to track visits and improve user experience.

8. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Firebase/Google Cloud Privacy Policy
• Google Privacy Policy (AdMob, Play Store)
• Apple Privacy Policy (App Store)
• xAI Privacy Policy (Grok)

We are not responsible for the privacy practices of these third-party services.

9. Children's Privacy

Opnr is intended for users aged 13 and over. Users under 18 must have parental or guardian consent to use the Service. We do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, we will terminate their account and delete their information.

If you believe we have collected information from a child under 13, please contact us immediately at contact@op-nr.app.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We use services operated by:

• Google (Firebase) - servers worldwide with EU/US data protection standards
• xAI - based in the United States

By using our Service, you consent to the transfer of your information to these countries. We ensure adequate safeguards are in place to protect your data during international transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at contact@op-nr.app.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process data based on consent, contract performance, and legitimate interests
• Data Portability: Request your data in a machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge Complaint: File complaints with your data protection authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy in the app
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

14. Do Not Track

Our Service does not respond to "Do Not Track" signals. However, you can control tracking through your device settings and advertising ID preferences.