Privacy Policy

1. Who we are

The data controller is Another SaaS EOOD, Alabin Street 33, Floor 3, Office 318, 1000 Sofia, Bulgaria, the operator of Owe Me One. For any privacy question, reach us at privacy@oweme.one.

2. Data we collect

We keep this to a minimum:

• Account — your display name, username, email, and optional profile photo.
• Shop activity — the shops, gifts, Favor points, orders and notes you create.
• Device & usage — basic technical data and crash diagnostics that keep the app stable.

When you contact us by email, we also process your name, email address and the content of your message. This website itself does not use cookies, tracking pixels or third-party analytics; our hosting provider may briefly record standard server logs (such as IP address and browser type) for security.

3. How we use it

To run your shops, deliver Favor points and orders, send the notifications you choose, keep accounts secure, respond to your enquiries, and improve the app. We process data to provide the service (Art. 6(1)(b) GDPR), with your consent where required (Art. 6(1)(a)), and for our legitimate interest in a safe, working product (Art. 6(1)(f)). We do not use your data for marketing without your consent.

4. Sharing

We never sell your data. Within a shop, members see shared activity such as gifts given and orders placed. We rely on a small number of trusted processors — hosting, push notifications and crash reporting — under data-processing agreements, and we may disclose data where legally required or as part of a business transfer.

5. Retention

We keep your data while your account is active. Delete your account and we remove your personal data within 30 days, except where law requires us to keep certain records longer. Server logs are typically deleted within 30 days.

6. Your rights

Under the GDPR you can access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent at any time. Email privacy@oweme.one and we'll help within 30 days. You may also lodge a complaint with your local data protection authority.

7. Security & children

Data is encrypted in transit (HTTPS), and an optional Face ID lock protects the app on your device. No method of transmission or storage is completely secure, but we use appropriate safeguards. Owe Me One is not directed to children under 16, and we don't knowingly collect their data.

8. International transfers

We are based in the EU and host data within the EU/EEA where possible. Where a processor operates outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Changes

If we update this policy, we'll revise the date above and, for significant changes, let you know in the app.