Privacy policy

01Who is responsible for your data

OpicApp is operated from Argentina by the OpicApp team, who decides how and why your personal data is used (the “controller”). You can contact us about anything related to your data at opicapp2000@gmail.com.

02What data we collect

Data you give us:

• Account data: your email address and username, and your password (which is handled by our authentication provider; we never see it or store it ourselves). If you sign in with Google, we receive the email address from your Google account (and, depending on your Google settings, your name and profile picture) and use the email to create your account and a username.
• Profile data: your bio, profile photo and cover photo, if you add them.
• Content: your posts, photos, videos, comments, likes, and private messages.
• Your private gallery: the files and folders you save there, the settings of your folders (such as blurring) and the share links you create. For each file we also keep a “fingerprint” (a technical summary of its content) that we use only to detect duplicates in your own gallery.
• Your relationships on the platform: who you follow, who follows you, and who you have blocked.
• Reports you send or that others send about you or your content.

03Usage and traffic data

When you open a page, we record basic information to understand how the platform is used and to detect problems and abuse:

• The page you visited, the date and time, and whether you were logged in (and, if so, which account).
• The approximate country the request came from, the type of device (phone, tablet or computer) and the browser.
• Where you came from: the website that linked to us (for example Google or Instagram) and any campaign tag in the link (such as “utm_source”).
• An anonymous visitor code. It is created from a one-way (hash) calculation that mixes technical request data with the current day, and it changes every day. We do not store your IP address, and the code cannot be used to follow a person across different days.

We do not use third-party analytics or advertising trackers. Known bots and automated scans are not counted. We use this information in aggregate, and we only look at individual activity when it is necessary for moderation, security or support.

For security, we also keep a short-lived counter of failed login attempts per email address, to limit password guessing.

04What we use your data for

• To provide the service: show your profile and posts, build your feed, run your gallery, deliver messages and notifications, and let you share files.
• To keep OpicApp safe: prevent spam, bots and abuse, enforce our terms, handle reports and respond to legal requests.
• To send you account emails: sign-up confirmation and password recovery. We do not send marketing emails.
• To understand and improve the platform, using the aggregated traffic data described above.
• To comply with the law and defend our rights.

We do not sell your data and we do not use it for advertising.

05Legal bases

Where the law requires us to state them (for example for people in the European Union or the United Kingdom), we process your data: to perform our agreement with you (provide the service you asked for); for our legitimate interests (security, preventing abuse, and understanding in aggregate how the service is used), balanced against your rights; to comply with legal obligations; and, where needed, with your consent, which you can withdraw at any time. For people in Argentina, we act in line with Law 25,326 on the Protection of Personal Data.

06Who we share data with

We use service providers who process data on our behalf, only to provide their service to us:

• Supabase: database, authentication and file storage.
• Vercel: hosting and delivery of the website.
• Resend: sending account emails.
• Cloudflare: anti-spam verification (Turnstile) when you sign up or log in.
• Google: only if you choose to sign in with Google.

We may also disclose data when the law requires it, to respond to valid requests from authorities, to protect the safety of people, or to enforce our terms. If the service is transferred to another operator, your data may be transferred with it, and we will tell you.

What you make public is visible to anyone, including people without an account and search engines. Share links give access to the file to anyone who has the link until it expires or you revoke it.

07Your content and its visibility

You choose the visibility of each post (public, followers only or private). Private content can only be seen by you, and your gallery is private to you. In exceptional cases, authorized OpicApp staff may access content of any visibility, including private messages, to review a report, enforce our terms, protect safety, or respond to a legal request. That access is limited to what is necessary and is not used for anything else.

08International transfers

Our providers may process data in countries other than yours, including the United States and countries in Europe. Where this happens, we rely on the safeguards offered by these providers, such as contractual commitments, to protect your data.

09How long we keep data

• Account, profile, content, gallery and messages: while your account is open. When you delete something it stops being shown; copies may remain for a limited time in backups until the normal backup cycle removes them.
• Traffic and usage data: only for a limited period needed for statistics and security; we aim to remove it after about 90 days.
• Failed login counters: a few minutes to hours.
• Data we must keep for a legal obligation or an ongoing investigation: for as long as that requires.

10Cookies and local storage

We use only cookies that are strictly necessary: one that keeps your session open, and one that remembers the language you chose (“opic_lang”, for one year). The anti-spam check from Cloudflare may use technical cookies or tokens to work. We do not use advertising or tracking cookies, and we do not use third-party analytics. Your browser may also store small files (such as the installed app data) on your device so the site loads faster.

11Your rights

You can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or give you a copy in a portable format, and you can withdraw consent you gave. You can edit or delete your posts, comments and gallery files at any time in the app. To delete your account and data, or to use any other right, write to opicapp2000@gmail.com. We will answer within the time limits set by law. We may need to verify your identity first.

In Argentina, the Agencia de Acceso a la Información Pública is the authority that oversees compliance with Law 25,326; you can file a complaint with it. If you live in the European Union or the United Kingdom, you can also contact your local data protection authority.

12Children

OpicApp is not intended for people under 13, or under the age required by the law of their country. If we learn that a child has created an account, we will close it and delete the data. If you think this has happened, please tell us.

13Security

We take reasonable measures to protect your data: passwords handled by our authentication provider, row-level access rules in the database so that each person can only reach what they are allowed to, access limited to authorized staff, protections against automated attacks, and encrypted communication (HTTPS) across the platform. Even so, no system is 100% secure; we cannot guarantee that incidents will never happen, especially those caused by third-party attacks or by failures of our infrastructure providers. If an incident affecting your data occurs, we will notify you as required by applicable law. Please also protect your account with a strong, unique password.

14Changes to this policy

We may update this policy as OpicApp changes. When the changes are important, we will tell you in the app or by email. The date at the top shows the latest update. This policy works together with our Terms and conditions.

15Contact

For any question about privacy or your data, write to opicapp2000@gmail.com.