Privacy Policy — Olutax
Last updated: November 1, 2026
This policy describes how data is handled in the mobile app “Olutax” for iOS and Android (identifier com.opharana.olutax) and on the pages of this website that open from its links: the group invitation (together, “Olutax”). The data controller is OPHARANA LLC, located at 99 Wall Street, Suite 1432, 10005, New York, United States, contact email hello@opharana.com.
The essentials
- No mandatory sign-up. Opening the app creates an anonymous account, which is just a random identifier. Linking it to Apple, Google or an email is optional.
- A group's fines are seen by all its members, and nobody else.
- People's names are typed by whoever adds them. Enter only a name or nickname that the person agrees to.
- The money does not go through Olutax. The app only keeps the books: it does not collect fines or move money between people.
- We do not sell your data.
- You can delete your data from the app, in Settings → “Delete my data” (section 8).
1. Data we process
1.1. Account
When you first open the app, an anonymous account is created with our database provider, Supabase: a random identifier and the session data. If you want to keep your account when you change phones, you can link it to Apple, Google or an email address. In that case we process the email (or the private relay email Apple gives you) and the identifier that provider gives us. If you do not link it and you delete the app or change phones, you lose access to the anonymous account and we cannot recover it. Supabase also logs the IP address and technical connection data to protect the service.
1.2. Groups, people and fines
- The group: name, currency, join code, pot goal, who the treasurer is and who the members are.
- The people: the name or nickname and the color of each one, as typed by whoever adds them, and, for a member with the app, which one it is. People who do not use the app can be added.
- The fines and payments: the item, the amount, the note, the date, who it is charged to, who issued it, and the payments the treasurer marks. Voided fines and payments are kept and marked as voided.
Other people's names: when you add or fine someone, you are the one typing their name. Enter only a name or nickname that the person agrees to, without surnames or other details, and, if they are a minor, with the permission of their parent or guardian. If someone has typed your name in a group and you want us to change it, write to us (section 8).
Who sees what: everything above is seen by the members of the group. Anyone with the group's link or code can join, so share it only with your people. The invitation web page does not query the server or show anything about the group, only the code.
1.3. Recommending the app
To apply the month of Plus for inviting (details in the Terms) we store your invite code, which account invited you, whether the reward condition has been met, how many months you have earned and until when you have free Plus. We do not store any contact details of the people you invite.
1.4. Advertising (Google AdMob)
The app shows ads through Google AdMob. Google may process the device's advertising identifier (IDFA on iOS, AAID on Android), device data, approximate location derived from the IP address, ad interactions and diagnostic data, according to Google's privacy policy. With the app in Spanish, ads from TuIAgencia, the owner's agency, are also shown; they do not use the advertising identifier or profile you.
1.5. Purchases (Olutax Plus)
All purchases are processed entirely by Apple or Google. We do not receive or store your card, bank account or billing data. To validate the purchase and be able to restore it we use RevenueCat, which receives an anonymous identifier and the store receipt.
1.6. Reports and messages
If you report content or write to us at hello@opharana.com, we process your email, the reported content and whatever you tell us, only to handle your request or report.
2. Purposes and legal bases (GDPR)
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Create your account, keep your session and, if you ask, link it to Apple, Google or email | Performance of a contract (6.1.b) |
| Create and share groups, log fines and payments, and calculate the pot and the rankings | Performance of a contract (6.1.b) |
| Store the names of people without the app that a member adds | Legitimate interest (6.1.f) of the group in keeping its accounts |
| Apply the invite promotion and purchases | Performance of a contract (6.1.b) |
| Protect the service from abuse and moderate reported content | Legitimate interest (6.1.f) and legal obligation (6.1.c) |
| Personalized advertising | Consent (6.1.a), through Google's form (UMP) and, on iOS, the tracking permission (ATT) |
| Non-personalized advertising | Legitimate interest (6.1.f) or limited consent, depending on your choice |
| Handle your queries and the exercise of your rights | Legal obligation (6.1.c) or legitimate interest (6.1.f) |
3. Advertising and your consent
- EEA, United Kingdom and Switzerland: before loading any Google ad, the app shows Google's consent form (User Messaging Platform). You can accept personalized advertising or decline it; in that case non-personalized ads are shown.
- iOS: in addition, the system shows Apple's tracking prompt (App Tracking Transparency). If you do not allow it, the IDFA is not used.
- Changing your mind: inside the app, in Settings → “Ad privacy”; on iOS, Settings → Privacy & Security → Tracking; on Android, Settings → Google → Ads.
- No ads: with Olutax Plus the app loads no advertising.
4. Recipients of the data
| Provider | Function | More information |
|---|---|---|
| Apple / Google Play | App distribution, optional sign-in and purchase processing | apple.com/legal/privacy · policies.google.com/privacy |
| Google (AdMob / UMP) | Advertising and consent management | policies.google.com/privacy |
| Supabase | Accounts and database of groups, people and fines, on servers in the European Union (Ireland) | supabase.com/privacy |
| RevenueCat | Purchase validation and restoration | revenuecat.com/privacy |
| Expo | App updates: receives the IP address and an installation identifier | expo.dev/privacy |
| Vercel | Hosting of this website | vercel.com/legal/privacy-policy |
We do not sell your data or share it with any third parties other than those listed. The controller is established in the United States and some providers may process data outside the European Economic Area; those transfers are covered by the European Commission's Standard Contractual Clauses and/or adequacy decisions (such as the EU-US Data Privacy Framework).
5. Retention
Your account and your data are kept while you use Olutax. A group, with its people, fines and payments, is kept while it has at least one member; when the last one leaves, the whole group is deleted. The emails you send us are kept while the request is being handled and, afterward, for as long as needed to show that we handled it. Data processed by Google and RevenueCat is kept according to each provider's retention periods.
6. User content and moderation
The names of people, groups and fines, and the notes, are written by users and seen by the members of the group. Fines are a joke between friends and must not humiliate, harass or disclose anyone's personal data. You can report content from the app or by writing to hello@opharana.com; we review it as soon as possible and remove whatever breaches the Terms. The treasurer can void any fine in their group.
7. Security
The app's communications with the services listed are encrypted (TLS). The database cannot be read directly: the app only uses functions that check your session on every call and return only the data of your groups.
8. How to delete your data
From the app: go to Settings and tap “Delete my data”; we will ask you to confirm. Once confirmed, immediately and permanently:
- you leave all your groups;
- your user is deleted, along with your invite code and the promotion data (months of Plus earned by inviting are lost);
- fines and payments that were already in a group stay for the rest of its members, so as not to break their history or their pot, but without your user: your name remains on them as that of a person without the app;
- if you were the last member of a group, the whole group is deleted;
- the data the app stores on your phone is also deleted.
Plus bought in the store is not lost: you recover it with “Restore purchases”. RevenueCat keeps the receipt with the anonymous identifier; if you want it deleted, write to us at hello@opharana.com.
If you want us to remove your name from a group, or someone typed it without your permission, write to us at hello@opharana.com with the group code and the name, and we will change it to a generic one. Deleting your data does not cancel a subscription: it is managed from your Apple or Google account (details in the Terms).
9. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent by writing to hello@opharana.com. We will reply within one month. To locate your data we will ask you for the group code and your name in it. You can also lodge a complaint with the supervisory authority; in Spain, the Spanish Data Protection Agency (aepd.es).
10. Minors
Olutax is not directed at children under 14 and we do not knowingly collect data from minors. We do not verify age. If you are a parent or guardian and believe a minor is using the app, you can prevent it with the device's parental controls or write to us at hello@opharana.com.
11. Changes to this policy
If we change this policy, we will publish the new version at this same URL (https://olutax.com/en/privacidad) and update the date. Substantial changes will be flagged in the app. This policy is published in several languages; in case of discrepancy, the Spanish version prevails.
12. Contact
OPHARANA LLC
99 Wall Street, Suite 1432, 10005, New York, United States
hello@opharana.com