Privacy policy
Last updated:
Oluno is a mobile app that finds the same product or a close match from a photo, a screenshot or a link, and shows offers from stores that ship to you. This policy explains what we collect when you use the app and oluno.app, and what we do with it.
Who we are
Oluno is operated by Kaan Akın. For anything about your data, write to privacy@oluno.app.
What we collect
- Account: your email address. If you sign in with Apple, the identifier Apple gives us and the email Apple shares, which can be a private relay address.
- Sign-in security: sign-in codes are stored only as one-way hashes and expire after 5 minutes. For each session we keep the platform, operating system version, app version, IP address and browser or app identifier, and a log of sign-in events.
- Searches: the photo you share, or the link you paste, an optional note, your delivery country, your language and the results we found. Before we store a photo we re-encode it, remove its metadata, including location, and limit its size.
- Subscriptions: if you subscribe, the store's transaction identifier, the plan, its status and renewal date. We never receive your card details.
- Notifications: if you allow them, a push token for your device.
What we do not collect
- We do not use analytics, advertising or tracking tools, and we do not sell or share your data for advertising.
- We do not ask for your location. Your delivery country comes from your phone's region setting.
- The camera is used only when you take a photo, and the clipboard is read only when you tap to paste.
Why we use it
- To sign you in and keep your account secure.
- To run your searches, show results and offers, and keep your search history in the app.
- To track your free searches and your subscription.
- To prevent abuse, such as automated sign-in attempts or excessive searches.
- To answer you when you contact us, and to meet legal obligations.
Who processes it for us
We share only what each provider needs to do its job:
- Cloudflare stores the photos you share in a private storage bucket.
- OpenAI receives your photo, the cropped product, your note, country and language to identify the product and compare it with store results.
- Our search provider (Serper or SearchAPI) receives a link to the cropped product image that expires after 10 minutes, or the product image from your link, together with search terms, country and language.
- An email provider sends your sign-in codes.
- Apple and Google handle Sign in with Apple and in-app purchases.
- Expo delivers push notifications if you turn them on.
- Our hosting provider runs our servers and database.
Stores and links you open
When you paste a link, the app reads that page directly from your phone to show a preview. When results show store images or you open a store, those sites receive your IP address and handle data under their own policies. Oluno does not see what you buy.
Transfers abroad
Some providers process data outside your country, including in the United States. We use providers that offer contractual safeguards for these transfers.
How long we keep it
- Sign-in codes: until they expire, at most 5 minutes.
- Sessions: at most 30 days. IP addresses and app identifiers are removed after 30 days, and sign-in events are deleted after 90 days.
- Photos: deleted 30 days after the search. The cropped copy used during a search is deleted when the search ends.
- Search history (links, notes and results): until you delete your account.
- Store notifications about your purchases: 30 days.
- Subscription records: kept after account deletion without your email or account, for accounting and fraud prevention.
Deleting your account
You can delete your account in the app or by following the steps on our account deletion page. We erase your account, sessions, photos and search history. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play.
Your rights
Depending on where you live, you can ask to see, correct, export or delete your data, and object to or limit how we use it. Write to privacy@oluno.app from the email address on your account. You can also complain to your data protection authority. If you are in Türkiye, our KVKK notice explains your rights under Turkish law.
Children
Oluno is not meant for anyone under 13, and we do not knowingly collect their data.
This website
oluno.app sets no cookies and loads no analytics or third-party scripts.
Changes
If we change this policy, we update the date above. If the change is significant, we tell you in the app before it takes effect.