Ownly uses your account details and the documents you choose to upload to organize information and provide agent-assisted results. We do not sell your personal information for money. AI output can be wrong, so review important results before acting.
1. Scope and controller
This Privacy Policy explains how OwnlyAI (“Ownly,” “we,” “us”) handles personal information through our Android application, APIs, website, agents, and related services (the “Service”). Ownly is responsible for the processing described here unless a different notice is shown for a specific service.
By using the Service, you acknowledge this notice. Where consent is required, we request it separately and you may withdraw it as described below.
2. Information we collect
Account and authentication information
When you sign in with Google, we receive identifiers and profile details such as your Google subject identifier, name, email address, and profile image. We issue an Ownly authentication token and may record device identifiers and device names for security.
Content you choose to provide
Uploads may include images, PDFs, receipts, invoices, warranty documents, health documents, prescriptions, and other files. We may extract text, barcodes, entities, facts, dates, document types, summaries, and suggested actions. Some content may contain sensitive or special-category information.
Usage, diagnostics, and technical data
We may process IP address, request metadata, timestamps, app version, operating system, device information, security events, audit records, error logs, feature usage, and performance data. Firebase Analytics is used only according to the app’s settings and applicable consent requirements.
Local and offline data
The Android app may retain account state and synchronized records locally to support offline access. Local data remains subject to device security, backups, and settings controlled by you or your operating system.
3. How and why we use information
- Authenticate users and secure accounts, APIs, and uploaded content.
- Upload, store, process, classify, summarize, and retrieve documents.
- Run the agent you select and produce structured facts, reminders, and suggested actions.
- Synchronize records across sessions and provide offline-aware functionality.
- Prevent abuse, enforce rate limits, maintain audit logs, and investigate security incidents.
- Operate, troubleshoot, measure, and improve the Service.
- Comply with law, valid legal process, and enforceable agreements.
Where required, our legal bases may include performing our contract with you, your consent, compliance with legal obligations, and legitimate interests such as security, reliability, and product improvement. We balance legitimate interests against your rights.
4. AI and automated processing
Ownly may send uploaded content, extracted text, relevant context, and instructions to configured AI providers, including Google Gemini, to generate structured results. The backend selects the agent workflow and may reduce repeated processing through stored records and prior results.
AI output is probabilistic and may be incomplete or incorrect. Ownly does not provide medical, legal, financial, or other regulated professional advice. Health and prescription outputs must be reviewed with a qualified professional. Ownly does not make solely automated decisions that produce legal or similarly significant effects about you unless we provide a specific notice and legally required safeguards.
Provider handling, retention, and training restrictions depend on the applicable provider agreement and configuration. We aim to transmit only information reasonably needed for the selected task.
6. International transfers
Ownly and its providers may process information outside your country. Where required, we use recognized transfer safeguards, contractual protections, adequacy decisions, or another lawful mechanism. You may contact us for information about safeguards relevant to your data.
7. Retention and security
We retain information for as long as reasonably necessary to provide the Service, maintain account and record history, comply with law, resolve disputes, prevent abuse, and enforce agreements. Retention varies by data type, user settings, legal requirements, and whether you delete content or your account. Backups and audit records may remain for a limited period after deletion.
We use measures designed to protect information, including authenticated APIs, access controls, encryption in transit, controlled storage credentials, rate limiting, and audit logging. No system is completely secure. Protect your device and credentials and contact us if you suspect unauthorized access.
8. Your choices and rights
Depending on your location, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or an appeal. We may verify your identity and apply lawful exceptions. Authorized agents may submit requests where local law allows.
You can manage or delete some content in the app, sign out to remove the active token, adjust analytics settings, and revoke Google account access through Google. To submit a formal privacy request, email [email protected].
9. Children
The Service is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect a child’s personal information without legally sufficient authorization. Contact us to request review or deletion.
United States state privacy notice
Applicable U.S. state privacy laws
We do not sell personal information for money. If a state law treats certain advertising disclosures as a sale or sharing, you may opt out. We do not use sensitive data to infer characteristics for targeted advertising.
- Request access to or confirmation of personal information we process.
- Request correction or deletion, subject to legal exceptions.
- Obtain a portable copy where required.
- Opt out of sale, sharing, targeted advertising, or qualifying profiling where applicable.
- Appeal a denied request where your state provides that right.
- Receive equal service and pricing for exercising privacy rights.
Regulator: Your state attorney general or applicable state privacy regulator.
10. Changes to this policy
We may update this Policy as the Service, providers, and law change. We will update the date above and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.
11. Contact us
Privacy questions and rights requests: [email protected]
General support: [email protected]
Include your country or region so we can route the request correctly. Do not email sensitive documents unless requested through a secure channel.