Privacy Policy

Last updated: 5/19/2026

Article 1 — Data controller

Olowave, whose contact details appear in the Legal Notice, is responsible for processing your personal data.

Article 2 — Data collected

We collect the following data:

At registration

• Phone number (authentication)
• Age range
• Gender
• Country of residence
• Preferred language
• IP address and detected country (security, anti-fraud)

During use

• Polls created, votes cast, shares, interactions
• Connection data (IP, device type, application version)
• Approximate location (IP-based, optional GPS)
• If you enable identity verification: ID documents via our partner Didit

Article 3 — Legal bases

In accordance with Article 6 of the GDPR, we process your data on the following bases:

• Contract performance: providing the service;
• Legitimate interest: security, fraud prevention, internal audience measurement;
• Consent: third-party analytics (Google Analytics), marketing notifications;
• Legal obligation: retention to respond to authority requests.

Article 4 — Processing purposes

Your data is used to:

• Identify you and secure your account;
• Provide and personalize the service;
• Measure audience and improve the Platform;
• Inform you (with your consent);
• Comply with our legal obligations.

Article 5 — Retention period

• Active account: throughout the duration of use;
• Deleted account: 30 days to allow restoration, then permanent deletion;
• IP addresses: anonymized after 30 days;
• Security logs: 12 months;
• Accounting data: 10 years (legal obligation).

Article 6 — Recipients

Your data is never sold. It may be transmitted to:

• Our technical providers (Firebase/Google Cloud, hosting) under confidentiality agreement;
• Didit (identity verification, if you enable it);
• PayPal (payments, if you purchase);
• Competent authorities in case of legal request.

Article 7 — Transfers outside EU

Some providers (Google, Didit) may store data outside the EU. These transfers are governed by the standard contractual clauses of the European Commission.

Article 8 — Your rights

In accordance with GDPR, you have the following rights:

• Access: obtain a copy of your data;
• Rectification: correct your data;
• Erasure: delete your data ("right to be forgotten");
• Restriction: restrict processing;
• Portability: retrieve your data in a structured format;
• Objection: object to certain processing;
• Withdrawal of consent: at any time.

To exercise your rights: privacy@olowave.com

You also have the right to file a complaint with your local data protection authority.

Article 9 — Cookies

See our Cookie Policy.

Article 10 — Security

We implement technical (encryption, access controls) and organizational measures to protect your data.

Article 11 — Minors

The Platform is prohibited for those under 13. For minors between 13 and 16 (depending on country), parental authorization is required.

Article 12 — Modifications

Any substantial modification will be notified to you and will require a new acceptance.

Article 13 — Contact

privacy@olowave.com