Privacy

Last updated 11 September 2026

OVLP is made by osora ltd. This says what OVLP does with your information, who else handles it, and who can see it.

Before you have an account

If you ask for an invitation at ovlp.io we keep your first name, the phone number or email you gave, which kind of group you said you would use OVLP with, and the page that sent you there if your browser says. We use it to send your invitation and to write to you about OVLP. Nothing on that list is sold or shared, and one reply stops the mail.

What OVLP stores

Your account. You sign in with your phone number and a code sent by text. Clerk, the sign-in service we use, holds the number. OVLP's own database keeps a one-way hash of it (see Contacts), not the number.

Your profile. Your name, a photo if you add one, your home city and its position on the map, and, if you add them, what you are into, the languages you speak and what you do. If you added a short bio or links in an earlier version, they are still stored.

Your world. The trips, gigs, exhibitions, dinners and matches you add: the city, the dates, the name of the thing, its category (music, travel, art, food, sport or other), the link you added it from, and the address of the image that link offered, which becomes its poster. Also whether you said you are in on something one of your people added.

Busy days. The dates, and a note if you write one.

Plans and messages. The plans you make with people, the days you mark in them, and the messages and photos you send in their threads.

Your people. Who you have let in and who has let you in, asks to see somebody's world, the people you have blocked or starred, and the people you invited from your contacts (the name as it appears on your phone), so the list survives a new phone.

Notifications. Your phone's push token and which notifications you have switched on.

Places from earlier versions. A place a friend sent you in an earlier version of OVLP is still stored: a name, a city, coordinates, a category, and whatever the friend wrote. Their note is stored exactly as written and is never rewritten or summarised.

Why we use it

• To run OVLP: to sign you in, to show your world to the people you let in, and to work out when you and your people are in one city or both free.
• To send the notifications you have switched on.
• To read a link you add, or the words you type, so you do not have to fill in every field yourself.
• To find out whether features are used and to fix what breaks.
• To write to people who asked for an invitation.

The legal basis for each, under UK and EU data protection law:

• Running the service you signed up for (contract): signing you in, storing your world, showing it to the people you let in, working out when you are together or both free, and your notifications.
• Your consent: matching your contacts, your location, the microphone, and notifications on your phone. Each is asked for when it is needed, and you can withdraw it in your phone's settings or in OVLP at any time.
• Our legitimate interests: reading what you type or paste so you do not have to fill in every field, keeping OVLP working and secure (crash reports, limits that stop misuse), and understanding which features are used. We only rely on this where it does not override your own interests.

What OVLP does not do

• No advertising, and no advertising identifiers. OVLP does not carry an ad SDK.
• No advertising trackers, no session recording, no screen replay. No Google Analytics and no Facebook SDK.
• Nothing is sold or shared with data brokers. Not now, and this document will change before that ever becomes untrue.
• No AI models are trained on your information by us.
• No profile is built about you from anything outside the app.

Analytics and crash reports

PostHog (on its EU servers) receives a record of actions: a trip was added, a link was read, an invite was sent, a screen was opened. It is tied to your account id so we can tell one person's use from another's. Some events carry a city name, a number of days or a category. It also records which buttons you tap, by the component's name and never its text, and when the app opens and closes, with the device model, operating system and app version. What is never sent: a message, a note, a search, another person's name, or your location.

Sentry (on its servers in Germany) receives a report when the app or one of our server functions fails: the error and, from the app, the device, the app version and your account id. Names, notes and messages are not attached.

Services that handle your information

OVLP relies on these services. Each gets only what is listed here.

• Supabase stores your account's data and your photos.
• Clerk signs you in and holds your phone number.
• Expo delivers notifications to Apple or Google, who deliver them to your phone. A notification's text can include a first name, a city, dates and the words of a message, so those services see it on the way.
• Anthropic runs the Claude AI models described below.
• PostHog and Sentry, as above.
• OpenStreetMap (through Nominatim) turns the name or address of a venue into a point on the map. It receives the name and city, not who asked.
• Photon, run by Komoot, suggests cities as you type one. Your phone sends it what you have typed into the city field.
• Unsplash supplies city photos. Your phone asks it for a city and country by name, and loads the photo from it.
• OpenFreeMap supplies the map. Your phone loads the part of the map on screen from it.
• Event and ticket sites. When you add a link, our server opens that page to read its title, description and image. A poster's image is then loaded by each viewer's phone straight from the site that published it, such as Dice or Resident Advisor.

Every service that loads something onto your phone sees your phone's internet address, as any website does.

Some of these services are run from outside the UK and the European Union, including from the United States.

AI

OVLP uses Claude models made by Anthropic. This is everything it sends them.

• Reading a link. When you paste a link, share one to OVLP from another app, or tap Add the link you copied, our server sends Anthropic the link and the title, description and site name from that page, to find the event or place and its city.
• Understanding what you type. The words you type into Search, or into the box for adding something, are sent with today's date so that "next Saturday" can become a date. Search sends them once you pause typing. Nothing else goes with them: no names, dates or trips of yours or anybody else's. What comes back is used on your phone.

Earlier versions of OVLP had a concierge: place ideas for a trip, answers in a thread, a note before a trip. It is switched off, and nothing is sent to Anthropic for it any more. What it stored is still kept with your account until you delete it: your messages to it and its replies, the place ideas it sent you, and what it noted about you (the interests you picked, and which of its ideas you kept or turned down).

To stop a flood of requests, our server records the internet address of each link or search request. Those records are normally deleted after about a day.

Contacts

If, and only if, you allow it, OVLP reads your address book on your phone. It asks when you reach the step for finding your people after sign-up, and from Allow contacts on People and on the invite screen.

Names and numbers are never uploaded as an address book. To find out which of your contacts are already on OVLP, the app turns each number into a one-way hash on your phone and sends only the hashes. They are compared against the hashes of people who are here, and the answer is the name and home city of the ones that matched. The hashes you send are not stored.

If you invite a particular contact, OVLP saves the name you have for them against your account, so the app can show who you have already invited.

To be matched by anybody else, OVLP keeps a hash of your own number against your account, and nothing else about it. No other account can read it: it is compared on our server, and a match returns your name and home city, never the hash. You can delete it from Settings → Privacy → Delete my match data, and it stays deleted. We keep a note that you asked, so the app does not store it again. Deleting your account removes both for good.

Being honest about what a hash is worth: a phone number is short enough that a hash of one is a pseudonym rather than a secret. What this buys is the thing we promise and nothing more: your address book is not uploaded, and we do not hold a directory of who knows whom.

Nobody is notified because you did this. No message, no email, no notification. Somebody in your contacts who is not on OVLP is never told you looked. The invitation itself goes through your own share sheet, in whichever app you choose, written by you. OVLP cannot message anybody on your behalf.

You can decline, and everything except the matching still works.

Location

If you turn on Nudge me near a place, OVLP uses your location while you are using the app to tell you when you are near a place a friend sent you. If you use the map's locate button, it reads your location once, to centre the map.

Your coordinates stay on the device and are used to measure a distance. The last one is kept on your phone for the next measurement. They are not sent to us or to anybody else. You can decline and the rest of the app is unaffected.

Microphone

In a plan's thread you can dictate a message. Your phone's own speech recognition turns it into text, and depending on your phone, Apple or Google may process the audio to do that. OVLP does not record or keep the audio. Only the text you send reaches us.

Clipboard and sharing

On an iPhone, the screen for adding something checks whether you have copied a link, without reading it. OVLP reads the clipboard only when you tap Add the link you copied. If you share a link or some text to OVLP from another app, OVLP receives what you shared and nothing else.

Who can see what

This is the part that actually matters, so it is stated plainly.

• Your world (what you add, its poster and category, your busy dates, and places from earlier versions) is visible to the people you have let in, and to nobody else. There is no public OVLP, apart from the invite pages below.
• Letting somebody in is one switch, per person. Turn it off any time from their page, or from Settings → Privacy → People you let in. They are not told either way. What they show you is their own switch.
• Both directions are written when you join through a friend's link, or when you accept somebody's ask to see your world. You can turn your side off straight after.
• You can hide one trip from one person with Who sees this trip on the trip. For them it does not exist: no trip, no notification. Those days read to them as Busy, with no city or name.
• Busy days: people you let in see the dates. Only you see the note.
• Plans you make with somebody, their days, messages and photos are visible only to the people in that plan. Nobody else can see who you are going with.
• Your profile (name, photo, home city, what you are into, languages and what you do) is visible to people you have let in and to people who have let you in, and to anybody who was in a group with you before groups were retired. Somebody who has your number in their contacts can see your name and home city when they match, until you delete your match data.
• Suggestions. Friends of your friends can be shown your name and home city and ask to see your world. Turn this off in Settings → Privacy → Suggest me to friends of my friends. It is on to begin with.
• Your photo is stored at a web address that is not listed anywhere, but anybody who has that address can open it.
• Saying you are in on somebody's trip or thing tells its owner.
• One account, the person who made OVLP, is let in both ways for everybody at sign-up so that no first screen is empty. You can turn off that account's view of your world like anyone else's. While it still lets you in, it can see your profile.
• Blocking somebody hides your profile, your world, your busy days and your places from them, and stops either of you starting a plan with the other. They are not told. You can still see their profile, so they can be listed under Blocked for you to unblock. A plan you had already made together is not deleted by a block.

Invite pages. Anybody with one of your invite links can open its page without an account.

• A link to your world shows your first name, your photo, your home city, how many things you have coming up, and their categories and months. It does not show cities, dates or names. A trip hidden from anybody is left out. Your first name is also in the link itself. Once somebody has joined with the link, the page stops showing any of this.
• A link to one trip or thing shows your first name, your photo, what it is, the city, the dates, and how many others are in, never their names.
• We record when a link is opened.

Where it is stored

With an account. Your data is stored on our behalf by Supabase, on servers in London, in the United Kingdom, and access is enforced per row: another account cannot read your world unless you let them in.

On your device. The app keeps your settings, the people you invited and some city photos on your phone. Before 6 September 2026 OVLP could also be used without an account, with everything on the phone. A phone that already holds a world like that keeps it; deleting the app deletes it.

Keeping it, and getting rid of it

We keep your information for as long as you have an account.

Delete your account from Settings → Delete my account, or ask us to, and it goes: your profile and your photo, your world, your busy days, your match data, your notification settings, every switch you turned on for other people, the messages and photos you sent, any record our server kept of an error with your account, and the plans you made with somebody, including the other person's messages and photos in them. Your phone number goes with your Clerk account. If something cannot be removed, the app says so.

That button does not remove analytics and crash reports already sent to PostHog and Sentry, or your settings and invite list on the phone until you delete the app.

You may ask for a copy of what we hold, ask us to correct it, or ask us to erase it. Write to the address below and we will answer within 30 days.

Children

OVLP is not intended for anybody under 13 and we do not knowingly collect information from children.

Changes

If this policy changes in a way that affects what we do with your information, you will be told inside the app before the change takes effect, not after.

Contact

osora ltd rich@osora.ai