Privacy Policy for OTSAT - Oturuponsa Temple
Last Updated:
1. INTRODUCTION
OTSAT (Oturuponsa Temple Spiritual Advisory Tool) ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.
IMPORTANT NOTICE:
- WE DO NOT SELL YOUR PERSONAL DATA
- WE DO NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES
- To opt-out of targeted advertising: See Section 6.2 below
- To opt-out of data sharing: See Section 6.1 below
- Data Controller: Oturuponsa Temple (contact: privacy@oturuponsa.com)
By using OTSAT, you consent to the data practices described in this policy.
2. INFORMATION WE COLLECT
2.1 Personal Information We Collect and Disclose
We collect and may share the following categories of personal information:
- Identifiers: Name, email address, phone number, unique device identifiers, IP address
- Account Information: Username, password (encrypted), profile photo, display name
- Communications: Messages, consultation history, chat transcripts, call recordings (with consent)
- Payment Information: Billing address, payment method details (processed securely through third-party payment processors - we do not store complete credit card numbers)
- Audio/Visual Information: Profile photos, voice recordings during calls, video during consultations
- Geolocation Data: Approximate location (with your permission)
- Internet Activity: App usage data, browsing history within the app, interaction patterns
- Device Information: Device type, operating system, app version, unique device identifiers
- Professional Information: For spiritual advisors - credentials, certifications, professional background
2.2 How We Collect Information
We collect information when you:
- Create an account or update your profile
- Use our services and features
- Communicate with spiritual advisors
- Make payments or transactions
- Grant permissions (camera, microphone, location)
- Interact with push notifications
2.3 Automatically Collected Information
Our app automatically collects:
- Device information and identifiers
- Usage analytics and app performance data
- Log files (IP addresses, timestamps, actions)
- Crash reports and diagnostic data
3. WHY WE REQUEST PERMISSIONS
3.1 Camera Permission (android.permission.CAMERA)
Required for:
- Video consultations with spiritual advisors
- Taking profile photos
- Uploading images during consultations
You can deny this permission if you only want audio consultations.
3.2 Microphone Permission (android.permission.RECORD_AUDIO)
Required for:
- Audio and video calls with spiritual advisors
- Voice messages
Cannot opt-out if you want to use calling features.
3.3 Storage Permission (READ_EXTERNAL_STORAGE)
Required for:
- Selecting profile photos from your gallery
- Sharing documents during consultations
- Saving consultation notes locally
You can deny this if you don't want to upload images/files.
3.4 Notification Permission
Required for:
- Incoming call alerts
- Message notifications
- Appointment reminders
Can be disabled in device settings.
3.5 Location Permission (Optional)
Required for:
- Finding nearby spiritual advisors
- Personalized service recommendations
Completely optional - you can use the app without this.
4. HOW WE USE YOUR INFORMATION
We use collected information for:
- Providing consultation services between users and advisors
- Processing payments and managing subscriptions
- Sending service notifications (calls, messages, appointments)
- Improving app functionality and user experience
- Analytics and performance monitoring
- Preventing fraud and ensuring security
- Customer support
- Legal compliance
- Marketing (with your consent)
We DO NOT:
- Sell your personal information to third parties
- Use your data for targeted advertising without consent
- Share your consultation content with unauthorized parties
5. DATA SHARING AND DISCLOSURE
5.1 Who We Share Data With
- Spiritual Advisors: Name, profile information, consultation messages (necessary for service delivery)
- Firebase/Google Cloud: Authentication, database, storage, analytics, push notifications
- Payment Processors: Billing information for transaction processing
- Cloud Service Providers: Secure data storage and backup
- Analytics Services: Aggregated usage data for app improvement
- Legal Authorities: When required by law or to protect rights
5.2 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for monetary consideration.
6. OPT-OUT AND YOUR CHOICES
6.1 How to Opt-Out of Data Sale/Sharing (Not Applicable)
We do NOT sell your personal information. However, you have the following opt-out rights:
- Analytics: Disable in app settings → Privacy → Analytics
- Marketing Emails: Click "unsubscribe" in any marketing email
- Push Notifications: Disable in device settings or app settings
- Location Tracking: Disable location permission in device settings
- Data Sharing with Advisors: Delete your account to stop future sharing
6.2 How to Opt-Out of Targeted Advertising
We use Firebase Analytics which may be used for personalized experiences:
- Go to app settings → Privacy → Disable personalized ads
- Visit your device's advertising settings
- Android: Settings → Google → Ads → Opt out of Ads Personalization
- iOS: Settings → Privacy → Advertising → Limit Ad Tracking
6.3 Do Not Track
We honor Do Not Track signals. When you enable DNT in your browser or device settings, we will not track your activity for advertising purposes.
7. DATA SECURITY
We implement industry-standard security measures:
- End-to-end encryption for messages and calls
- TLS/SSL encryption for data in transit
- Firebase Authentication with secure token management
- Encrypted data storage
- Regular security audits and updates
- Access controls and authentication
- Secure API endpoints
However, no transmission method is 100% secure. Use strong passwords and keep your account secure.
8. DATA RETENTION
We retain your data:
- Account Data: Until you delete your account
- Messages/Calls: 90 days after consultation ends (unless you request deletion)
- Payment Records: 7 years (legal requirement)
- Analytics: 26 months (Firebase default)
- Backup Data: 30 days after deletion request
9. YOUR PRIVACY RIGHTS
9.1 General Rights (All Users)
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Export your data (data portability)
- Withdraw consent
- Object to data processing
- Restrict processing
- Opt-out of marketing communications
To exercise these rights, email: privacy@oturuponsa.com
9.2 California Rights (CCPA/CPRA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or shared
- Right to opt-out of sale/sharing (we don't sell data)
- Right to deletion
- Right to correction
- Right to limit use of sensitive personal information
- Right to non-discrimination
To submit a CCPA request: ccpa@oturuponsa.com
9.3 Virginia Rights (VCDPA)
Virginia residents have the right to:
- Confirm whether we process your personal data
- Access your personal data
- Correct inaccuracies in your personal data
- Delete your personal data
- Obtain a copy of your personal data (data portability)
- Opt-out of:
- Targeted advertising
- Sale of personal data (we don't sell)
- Profiling in furtherance of decisions with legal or similarly significant effects
To exercise your VCDPA rights, contact: privacy@oturuponsa.com
If your request is denied, you may appeal by emailing: appeals@oturuponsa.com
9.4 European Rights (GDPR)
For users in the European Economic Area:
- Legal basis for processing: Consent, contract performance, legitimate interest
- Right to access, rectification, erasure ("right to be forgotten")
- Right to data portability
- Right to object and restrict processing
- Right to withdraw consent
- Right to lodge a complaint with your supervisory authority
EU Representative: [If applicable]
Contact: gdpr@oturuponsa.com
9.5 Brazil Rights (LGPD)
For users in Brazil, under the Lei Geral de Proteção de Dados (LGPD), you have the right to:
- Confirmation of processing and access to your data
- Correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion of unnecessary or excessive data
- Data portability to another service provider
- Deletion of data processed with your consent
- Information about public and private entities with which we share data
- Information about the possibility of not providing consent
- Revocation of consent
To exercise your LGPD rights, contact: lgpd@oturuponsa.com
Brazilian users can also contact ANPD (National Data Protection Authority) for complaints.
9.6 Other Jurisdictions
We comply with applicable privacy laws in your jurisdiction. Contact us for information about your specific rights.
10. CHILDREN'S PRIVACY
Our service is NOT intended for children under 13 years of age (or 16 in Europe). We do not knowingly collect personal information from children.
If you are a parent/guardian and believe your child provided us with personal information, contact us immediately at: privacy@oturuponsa.com
We will delete such information within 30 days.
11. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in:
- United States (Firebase/Google Cloud servers)
- Other countries where our service providers operate
We ensure appropriate safeguards through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Your explicit consent
12. THIRD-PARTY SERVICES
We use third-party services that may collect information:
These services have their own privacy policies and are not covered by this policy.
13. COOKIES AND TRACKING
We use:
- Essential Cookies: Required for app functionality
- Analytics Cookies: Firebase Analytics for usage insights
- Preference Cookies: Remember your settings
You can manage cookies through your device settings.
14. DATA BREACH NOTIFICATION
In case of a data breach:
- We will notify affected users within 72 hours
- We will notify relevant authorities as required by law
- We will provide information about the breach and steps to protect yourself
15. CHANGES TO THIS PRIVACY POLICY
We may update this policy. Changes will be communicated through:
- In-app notification
- Email notification (for material changes)
- Updated "Last Updated" date
- Posted notice in the app
Continued use after changes constitutes acceptance.
17. CONSENT AND ACCEPTANCE
By using OTSAT, you acknowledge that you have read, understood, and agree to this Privacy Policy.
If you do not agree, please do not use our services.
Last Updated: