Privacy Policy

1.Scope and controller

This policy covers the Ovation Android app, the features inside it, and the legal pages on this site. It does not cover Google Play, Google Sign-In, Cloudflare, Firebase, or any other third-party service you use. Those services have their own privacy policies.

Ovation is for adults 18 and older. I do not knowingly collect personal information from anyone under 18.

2.What I collect

The exact data depends on how you use Ovation. You can use some features without filling in every profile field, but the core social features need an account and a profile.

2.1 Account and sign-in data

• Your account identifier, account number, and sign-in method.
• If you use Google Sign-In, the Google account identifier, email address, email verification status, and display name that Google makes available. I do not receive your Google password.
• Session tokens, token expiry times, and the device name (manufacturer and model) sent when you sign in.
• Your account status, such as whether the account is active, restricted, or closed.

2.2 Profile and creator data

• Your nickname, avatar, photos, videos, voice intro and its waveform, birth date, age, country, About text, tags, and online status.
• Your Discover visibility preference, profile and cover media, follower and following counts, and content you publish as Moments or video posts.
• Your creator settings.

2.3 Messages and social interactions

• Text messages, image messages, quoted or referenced content, timestamps, delivery state, and the other participant’s user ID.
• Your follows, followers, blocks, and reports.
• Content removal notices and the reason shown to you.

Messages are stored on your device. While a message is waiting to be delivered, it may be stored in a temporary server queue. After the receiving device confirms delivery, the queued copy is removed. Ovation does not provide cloud message history: if you change devices, reinstall the app, or clear its data, your local history may be lost.

2.4 Coins, purchases, and paid features

• Your Coin balance and the Coin packages shown in the app.
• Purchase records needed to validate and credit a purchase, including the Google Play product ID, purchase token, transaction state, and the Coins credited.
• Spend records, including the amount, purpose, reference ID, resulting balance, and timestamps.
• Creator earnings and related records.

Google Play processes your payment method. I do not receive or store your full card number, CVV, or full billing address. Google may provide limited transaction information needed to validate a purchase.

2.5 Real-time media

• Real-time session metadata: session ID, participants, start and end times, duration, and status.
• Real-time media credentials and participant identifiers issued by the real-time provider.
• Technical connection data such as IP address, device and network information, and connection events.

I do not record or store the audio or video of real-time sessions. Cloudflare RealtimeKit processes the media so that a session can connect. Cloudflare may keep session and participant records and operational logs under its own policy.

2.6 Device, usage, and diagnostics

• IP address, device manufacturer and model, operating system, app version, language, time zone, and approximate region derived from IP.
• App launches, sessions, in-app purchase events, and other usage events collected by Google Analytics for Firebase.
• App-instance identifiers and, where made available by Android, the advertising ID.
• Server logs such as request time, requested endpoint, response status, and error information.
• Push notification token and notification preferences.

I do not ask for precise location, contacts, SMS, health data, or government identity documents. I do not collect your precise location.

2.7 Safety, reports, and support

• Reports you submit, including the target, the reason, any details you write, and the user IDs involved.
• Blocks you create and the profile snapshot saved with a block.
• Content removal records and notices.
• Messages and content you send to support, including your email address and any attachments.

2.8 Permissions

Ovation asks for Android permissions only when a feature needs them:

• Camera and microphone for voice and video features. The microphone may remain active during an ongoing voice or video session while the app is in the background, including through the session notification. The camera is turned off when the app goes into the background during a session.
• Photos and videos through Android’s photo picker. I receive only the items you choose.
• Notifications for messages, new followers, and ongoing sessions. Content removal notices are shown in the app. You can turn notifications off in Android settings or in Ovation.
• Vibration for ringtone and vibration settings.

You can change permissions in Android settings. If you deny a permission, the related feature may not work.

3.How I use it

I use personal information to:

• create and secure your account, sign you in, and restore your session;
• build and show your profile, Discover listing, Moments, videos, and voice intro;
• deliver messages, manage follows and blocks, and show online status;
• process Coin purchases and spend Coins;
• connect real-time media through the provider and maintain it in the background;
• send notifications you have enabled;
• investigate reports, detect spam and fraud, enforce the Terms and Community Guidelines, and keep people safe;
• provide support and respond to privacy requests;
• understand how Ovation is used, fix problems, and improve the Service;
• comply with legal, tax, accounting, and regulatory obligations; and
• protect the rights, safety, and security of Ovation, its users, and the public.

I do not use your personal information for third-party advertising, and I do not sell it. I do not use your private messages to build advertising profiles.

4.Who I share it with

I share personal information only as needed for the purposes above, with:

• Google for Google Sign-In, Google Play purchases, Google Analytics for Firebase, and Firebase Cloud Messaging. Google receives the data needed for those services and processes it under its own terms and privacy policy.
• Cloudflare for media storage and delivery and for real-time media through RealtimeKit.
• Content moderation providers that review uploaded images and text, including messages, on my instructions.
• Hosting, database, email, and support providers that store or process data on my instructions.
• Other users, when you publish content, send a message, appear on Discover, or join a real-time session.
• Authorities or other parties when required by law, when necessary to investigate fraud or safety issues, to protect someone’s vital interests, or to enforce my rights.
• A successor if Ovation or its assets are transferred, merged, or sold, subject to this policy and applicable law.
• Others when you ask me to share something or give clear consent.

I do not sell personal information. I do not share it with advertising networks, data brokers, or social media platforms for their own marketing. Where a provider acts as my processor, it uses the data only on my instructions. Some providers, such as Google, may also act as independent controllers for parts of their services; their own terms and privacy policies apply to that processing.

5.Public content and interactions

5.1 Public profile and content

Your profile, avatar, cover media, photos, videos, voice intro, Moments, video posts, tags, country, age, online status, follower counts, and Discover listing may be visible to other users. Other users may screenshot, copy, or share what they see. I cannot control that.

5.2 Messages

Messages are visible to the people in the conversation and may be accessed by me when needed for safety, reports, enforcement, support, or legal reasons. Do not send anything you need to keep completely private.

5.3 Real-time media

The other participant receives your audio and video during a real-time session, and the real-time provider processes the media to connect it. I do not record the session. A participant may still screenshot or record it; do not do that without consent and a legal right.

5.4 Reports and blocks

If you report someone, I receive the report details and may share them with the reported person or authorities as needed to investigate, enforce my policies, or comply with law. I try to protect reporter privacy, but I cannot promise complete confidentiality in every case. Blocking is visible through its effects: the blocked person may no longer be able to contact you or see your content.

6.International transfers

Ovation uses service providers in the United States and other countries. Your personal information may be processed in a country other than the one where you live. Those countries may have different data protection laws.

Where required, I use appropriate safeguards for those transfers. You can contact me for more information about the safeguards used for a particular transfer.

7.How long I keep it

I keep personal information only as long as needed for the purposes described in this policy, including legal, tax, safety, and fraud-prevention needs. The periods below are typical maximums.

I may keep information longer if the law requires it, if I need it to establish or defend a legal claim, or if it is necessary for safety or fraud prevention. When I no longer need it, I delete it or de-identify it.

7.1 Deleting your account

You can delete your account in the app under Me > Settings > Account > Delete account, or through the account deletion page. You will need to confirm the deletion. If you cannot sign in, contact support from the email linked to your account.

Deleting your account removes your profile and content from public view, closes the account, and deletes or de-identifies associated data as described above. Coins are not refunded. Some records may be kept where the law or safety requires it. Deleting your account does not delete copies that other users have already made, messages already delivered to their devices, or records held by Google Play or the real-time provider under their own policies.

8.Security

I use technical and organisational measures designed to protect personal information, including encrypted connections between the app and the backend, encrypted storage of session tokens on your device, access controls, and logging. No system is completely secure, and no method of transmission or storage can be guaranteed.

If you believe your account or data has been compromised, contact me immediately at brinedfish979@gmail.com.

9.Your rights and choices

9.1 Everyone

You can:

• view and edit your profile in the app;
• delete individual content you posted;
• block people and manage your block list;
• turn notifications on or off in the app or Android settings;
• change camera, microphone, photo, and notification permissions in Android settings;
• delete your account in the app or through the deletion page; and
• contact me to ask about your personal information.

9.2 California and other US states

If you are a California resident, you have the rights described below under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. Similar rights may apply if you live in another US state with a comprehensive privacy law.

You have the right to know what personal information I collect, use, and disclose; to access it; to correct it; to delete it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising your rights. I do not sell or share personal information for cross-context behavioral advertising, so there is no sale or sharing to opt out of. I use account log-in information and content only to provide and secure the Service, not to infer characteristics about you.

To make a request, email brinedfish979@gmail.com with the subject “California privacy request.” I may need to verify your identity. You can use an authorised agent, but I may ask for proof of authorisation. I will respond within the time required by law, normally within 45 days, and will tell you if I need an extension.

9.3 Verification and response

To protect your account, I may ask for information needed to verify your identity before fulfilling a request. I will respond within 30 days where required, or within the longer period allowed by local law. If I cannot fulfil a request, I will explain why, subject to legal limits.

10.Children

Ovation is for adults 18 and older. I do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, report the account or contact me. If I learn that I have collected information from someone under 18, I will close the account and delete the information, unless I must keep it for legal or safety reasons.

11.Cookies and tracking

The Ovation app does not use browser cookies. It uses app-instance identifiers and similar technologies for analytics and notifications, and encrypted session tokens for sign-in. Google Analytics for Firebase may collect the Android advertising ID where Android makes it available. I do not use that ID to show you third-party advertising.

These legal pages are static. They do not set cookies, run analytics, or use cross-site tracking. If you open a third-party page through Ovation, that site may use cookies or other technologies under its own policy. Your browser’s Do Not Track signal does not change how these static pages work because they do not track you.

12.Automated moderation

I may use automated tools to detect spam, fraud, malware, and prohibited content. Automated tools can make mistakes. Reports and significant enforcement decisions may be reviewed by me, and you can appeal using the contact details below. I do not make decisions with legal or similarly significant effects about you based solely on automated processing without a way to request a review.

13.Changes

I may update this policy as Ovation changes or as the law changes. I will post the new version here and update the effective date. If a change is material, I will make reasonable efforts to tell you in the app or by email before it takes effect, unless a change is needed sooner for safety, security, or legal reasons. The new policy applies from the date shown at the top.

14.Contact and complaints

For privacy questions, requests, or complaints, contact me:

Please include your account number and enough detail for me to understand the request. Do not send your password or full payment card details. If you are not satisfied with my response, you can complain to your local data protection authority or another regulator with jurisdiction.

Ovation is operated by an individual developer. This page is part of the Ovation legal documents.