Olen ("Olen", the "App", "we", "us", "our") is a paddling companion app for stand up paddleboard, kayak, and surf-ski enthusiasts. This Privacy Policy explains what information we handle, how we use it, when it may be shared, and the choices you have.
By using Olen you confirm that you have read this Policy. If you do not agree, please stop using the App and uninstall it.
Questions or requests: service@olen.cloud
1. Information We Collect
- Account information. Sign in with Apple identifier, and an email address if you choose to share one (Hide My Email is supported). Optional profile details such as display name, avatar, and bio.
- Activity data. Paddle sessions you log, including time, duration, distance, derived metrics, and any notes or mood you add.
- Location data. Optional. Requested only when you tag a session or a post with a place. We do not collect location in the background.
- User generated content (UGC). Posts, photos and videos, comments, gear entries, direct messages, and reports you submit. Media is read only for the items you select after you grant photo access.
- Device and technical information. Device model, operating system, language and region, app version, and diagnostic or crash data.
- Usage information. Which features and screens you use, in aggregated or pseudonymised form.
- Purchase information. Your in-app Coin balance and transaction history. We never receive your card number, bank details, or billing address; payments are handled by Apple or Google.
- Support correspondence. The email address and message content you send us.
We do not collect biometric, health, or special category data, contact lists, messages, call logs, or calendar entries.
2. How We Use Information
- Provide the service: create and maintain your account, store and display your sessions, gear, posts, and messages.
- Operate core features: statistics, personal bests, charts, water spot pages, and guide content.
- Personalise your experience: order feed content, surface relevant spots and guides, and remember preferences.
- Keep the community safe: handle reports and blocks, review flagged content, and enforce our Terms of Service.
- Run the Coin system: verify balances, apply charges, and keep an accurate transaction history.
- Improve the product: diagnose crashes, measure performance, and analyse aggregate usage.
- Communicate with you: answer support requests and send essential service notices.
- Comply with law and respond to lawful requests.
We do not sell your personal information, and we do not use it for third party advertising or cross-context behavioural advertising.
3. Information Sharing and Disclosure
- With other users. Content you publish is public by design, including your profile, posts and media, comments, likes, and any tags or location you attach. Direct messages are visible to the recipient. Do not publish anything you would not want seen publicly.
- With service providers. Vendors that host, store, or analyse data on our behalf, under contract and only as needed to perform their function.
- With Apple and Google. For sign in, distribution, and payment processing, under their own privacy policies.
- For legal and safety reasons. To comply with law or lawful requests, enforce our Terms, investigate fraud or security issues, prevent harm, and make reports we are required to make, including those described in Section 5.
- Business transfers. In a merger, acquisition, or sale of assets, with the same commitments carried over.
- At your direction. When you choose to share content outside the App.
4. Your Rights and Choices
Depending on where you live, you may request access to your personal information, correction, deletion, portability, restriction of or objection to processing, and you may lodge a complaint with your local authority. We do not discriminate against users who exercise these rights.
- Edit your information directly in the App: profile, sessions, gear entries, posts, and comments.
- Delete your account at any time from Me → Settings → Delete Account. This removes your profile, activity, and content; server-side deletion or anonymisation follows within 30 days, unless a longer period is required by law or for safety and dispute resolution. Unused Coins are forfeited and are not refundable.
- Withdraw consent at any time by turning off location, photo, camera, or notification permissions in your device settings. The App remains usable; only the dependent feature is affected.
- Manage your community experience with the report and block controls available on every post, comment, chat, and profile (blocked users: Me → Settings → Blocked Users).
To exercise a right, email service@olen.cloud from the address linked to your account. We respond within 30 days and may ask reasonable questions to verify your identity.
We keep information for as long as your account is active, and afterwards only as long as needed for legal, accounting, or safety purposes.
5. Children's Privacy and CSAE
Olen is intended exclusively for users who are 18 years of age or older. You confirm your age at first launch. We do not knowingly collect information from anyone under 18, and any account found to belong to a minor is terminated and its data deleted. If you believe a person under 18 is using Olen, contact service@olen.cloud.
Child Sexual Abuse and Exploitation (CSAE)
Olen has a zero tolerance policy toward child sexual abuse and exploitation.
- Prohibited without exception: child sexual abuse material (CSAM) in any form, including illustrated, animated, or AI generated depictions; sexualisation of minors; grooming; sextortion; and the solicitation, advertising, linking, or trading of such material.
- Every post, comment, chat, and profile carries a report control, and CSAE reports are prioritised above all other queues. You may also report directly to service@olen.cloud with the subject line "CSAE Report".
- On credible report or detection we remove the content, permanently terminate the account, preserve the relevant records in restricted storage, and report to the National Center for Missing and Exploited Children (NCMEC) and other competent authorities as required or permitted by law.
- Terminated CSAE accounts are not eligible for reinstatement, and we take reasonable measures to prevent re-registration. We protect the identity of good faith reporters to the extent the law allows.
6. User Generated Content
- You own your content. By publishing in Olen you grant us a worldwide, non-exclusive, royalty free, sublicensable licence to host, store, reproduce, and display it for the purpose of operating and improving the App. The licence ends when you delete the content or your account, except for backup copies pending deletion and copies kept for legal or safety reasons.
- You are responsible for what you publish. You must hold the rights to it, and it must not infringe anyone's intellectual property, privacy, or publicity rights. Do not upload photos of identifiable people without their consent.
- Not permitted: CSAE material as described in Section 5; sexually explicit or gratuitously violent material; harassment, threats, or hate speech; promotion of self harm or dangerous water challenges; illegal activity; another person's private information; spam, impersonation, or manipulated media presented as authentic; and content that infringes intellectual property rights.
- Moderation. Reported content is reviewed and removed where a violation is confirmed. Depending on severity and history we may warn, remove content, restrict features, or suspend or terminate an account. Where required by law we explain the action taken and offer a route to contest it at service@olen.cloud; CSAE cases are excluded from reinstatement.
- Copyright complaints. Email service@olen.cloud identifying the protected work, the infringing content and where it appears, your contact details, a good faith statement that the use is unauthorised, and your signature. We remove infringing material promptly and terminate repeat infringers.
7. Data Security and Storage
We use administrative, technical, and physical safeguards, including encryption in transit, platform secure storage for credentials, access controls, monitoring, and data minimisation. Some data is stored on your device; data that must be shared or synced is stored on servers operated by us or our hosting providers, which may be located in other countries with appropriate transfer safeguards in place.
No system is completely secure. Please keep your device locked and updated and protect the Apple ID used to sign in. If a breach is likely to affect your rights, we will notify you and the relevant authority as required by law.
8. Permissions
| Permission | Why | Required |
|---|---|---|
| Location | Tag a session or post with a place | Optional |
| Photo library | Attach photos or videos | Optional |
| Camera | Take a photo for a post, gear entry, or avatar | Optional |
| Notifications | Replies, messages, and service notices | Optional |
| Network access | Sync content, load media, process purchases | Required |
Every optional permission can be granted or revoked at any time in device settings.
9. Analytics and Third Party Links
We use only first party or aggregate analytics to understand feature usage and stability. We do not embed advertising SDKs and do not use the advertising identifier for cross-app tracking. The App may link to external resources such as weather or water safety services; we do not control those destinations or their privacy practices.
10. Changes to This Policy
We may update this Policy as the App or the law changes. We revise the "Last Updated" date, and for material changes we give notice in the App and, where we hold a usable address, by email, normally at least 7 days before the change takes effect. Where the law requires your consent, we will ask for it first. Continued use after an update takes effect means you accept the revised Policy.
11. Contact Us
Email: service@olen.cloud
Helpful subject lines: "Privacy Request", "Data Deletion", "CSAE Report", "Copyright Notice".
We acknowledge messages within 5 business days and aim to resolve them within 30 days.
This Privacy Policy is written in English. Where a translation is provided and a conflict arises, the English version prevails.