Privacy Policy

This Privacy Policy explains what information Owy ("we", "us") collects when you use the Service, how we use it, who we share it with, and the choices you have. We designed Owy to collect as little personal information as we need to run the Service.

Account information. When you sign in with Google, Facebook, or Apple, the provider sends us your name, email address, and a stable user ID. We store these so you can access your account. We do not see or store your password for those providers.

Workspace and content data. Anything you create in Owy — workspaces, lenders, loans, terms, notes, member invites — is stored on our servers so the Service can show it back to you and the people you've invited.

Technical data. Our servers may log standard request information such as IP address, user-agent, and timestamps for security, debugging, and abuse prevention. We do not use third-party analytics or advertising trackers.

• To authenticate you and keep your account secure.
• To provide, operate, and improve the Service.
• To communicate with you about your account or important changes.
• To prevent fraud, abuse, and unauthorized access.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

We share information only when necessary:

• With other workspace members. Anyone in a workspace you join can see the workspace's content and the names of other members.
• With service providers that host our infrastructure or send transactional emails on our behalf. They handle data only to provide their service to us.
• For legal reasons, if required by law or to protect the rights, safety, or property of Owy, our users, or the public.

When you sign in with Google, Facebook, or Apple, those providers receive information about your sign-in attempt (such as the fact that you're signing in to Owy). What they collect and how they use it is governed by their own privacy policies:

• Google Privacy Policy
• Facebook (Meta) Privacy Policy
• Apple Privacy Policy

Your data is stored on servers operated by our hosting provider in [Region]. We keep your data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we're required to keep it for legal reasons (such as financial or audit records).

We use industry-standard practices to protect your data — encrypted transport (HTTPS), hashed credentials where applicable, scoped access tokens, and least- privilege access for our team. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Export your workspace data in a portable format.
• Object to or restrict certain processing.

You can exercise any of these by emailing us at the address below. We may need to verify your identity before acting on a request.

Owy is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has used Owy, please contact us so we can remove the account.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via email or in-app notice before they take effect. The "Last updated" date at the top tells you when this version was published.

Questions or requests about your privacy? Email us at owyappph@gmail.com.