Buyer's Remorse Log — Privacy Policy

1. Who We Are

Buyer's Remorse Log is a mobile app published by Olaverse Labs ("we", "us", or "our"), which also maintains this website at olaverse.co.uk. This policy covers the app only. Our website privacy policy covers olaverse.co.uk separately.

2. What the App Stores

When you log a purchase, the app saves the following on your device:

• The item description you type.
• The price you enter.
• Your answer to the regret question, and your answer to the follow-up a week later.
• The dates of those entries, so the app can schedule the check-in and show your patterns over time.

This is stored in the app's own storage on your phone. It is not transmitted to us, and it is not transmitted to anyone else. You are the only person with access to it. That remains true whether you subscribe or not — the subscription described in the next section carries nothing about what you logged.

3. Subscription and Payments

The app offers an optional auto-renewing subscription that unlocks the paid features. The app remains usable without it. This is the only part of Buyer's Remorse Log that sends anything off your device, so here is exactly what it involves.

• The payment itself is handled by Apple or Google, not by us. Your card number, billing address, and payment details go to the App Store or Google Play under their own privacy policies. We never see them, and we have no way to charge you directly.
• We use RevenueCat to know whether your subscription is active — including when you reinstall the app or move to a new phone. RevenueCat, Inc. is a subscription management service acting as our data processor.
• What RevenueCat receives: a random app user ID it generates for your installation — a string of characters, not your name, email address, or advertising ID, and not linked to any account, because the app still has none; the purchase receipt from Apple or Google and the renewal, cancellation, refund, and expiry events that follow it; and basic technical context with each request, namely the platform, app version, store country, and the IP address the request comes from.
• What RevenueCat never receives: your log. Not an item, not a price, not a regret answer, not a date. The subscription check knows only whether this installation has paid — nothing whatsoever about what you bought or how you felt about it.
• What we see: subscription counts, revenue, and renewal events tied to those random IDs. We cannot work out who you are from it, and we do not try.

RevenueCat is based in the United States and handles this data under its own privacy policy, alongside our instructions as processor.

Your subscription renews, is priced, and is cancelled through your App Store or Google Play account settings — that is where to go to manage or stop it. Note that deleting the app does not cancel a subscription; you have to cancel it with Apple or Google. If you reinstall, "Restore Purchases" asks the store and RevenueCat whether this device is entitled, which is the one moment the app checks without you subscribing afresh.

4. What We Never Collect

To be specific, rather than vague:

• No account. We do not ask for your name, email address, phone number, or a password, because there is nothing to sign in to. Subscribing does not create one.
• No bank or card data. The app is not connected to your bank, card, or any payment provider, and even when you subscribe your card details go to Apple or Google and never to us. Every purchase in the log is one you typed in yourself.
• No analytics or crash reporting. There is no analytics SDK, no crash reporter, and no telemetry about how you use the app. We do not know how many screens you opened, how often you use it, or what you logged. The only events we receive are the subscription events described in section 3.
• No advertising identifiers. We do not read your IDFA, Android Advertising ID, or any other device identifier.
• No location, contacts, photos, or microphone. The app does not request these permissions.

5. Notifications

The seven-day check-in is scheduled by your phone's own operating system when you log a purchase. It is a local notification: no push server is involved, no device token is sent to us, and the reminder is delivered by your phone to itself. If you decline notification permission, the app still works — you simply will not get the reminder.

6. No Ads, No Trackers

The app contains no advertising and no third-party tracking of any kind. RevenueCat is a billing service, not an advertising or analytics one: it is told whether an installation has paid, and nothing about you or what you log, and it is contractually barred from using that for its own purposes. We do not sell, rent, share, or trade your information.

If we ever introduce advertising or any further feature that transmits data off your device, we will update this policy and the app's App Store privacy disclosures before that version ships, not after.

7. Device Backups

If you have iCloud Backup or Google's device backup switched on for your phone, your phone's backup may include this app's data along with everything else on the device. That backup is created and held by Apple or Google under their own privacy policies and encryption, and we have no access to it and no involvement in it. You can control this in your device settings.

8. Deleting Your Data

You are in full control, and you do not need to ask us:

• Delete an individual entry inside the app to remove that record.
• Delete the app from your phone to remove all of it at once. Uninstalling removes the app's local storage.
• Cancel an active subscription in your App Store or Google Play settings — uninstalling alone does not do this.

There is no "delete my account" request to send us for your log, and no copy on our side to erase. This also means we cannot recover your log for you if you delete the app or lose your phone. The one record that does persist after uninstalling is the subscription record held by RevenueCat and by Apple or Google; you can ask us to erase our side of it by emailing us, though bear in mind it is held under a random ID, so you may need to send us that identifier or your store receipt for us to find it, and we may need to keep the underlying transaction record where tax or accounting law requires.

9. If You Email Us

The one case where we do receive personal information is when you choose to contact us. If you email us for support, we receive your email address and whatever you write. We use it only to reply, we keep it only as long as needed to resolve the matter and for basic records, and we do not add you to a mailing list.

10. Children

The app is not directed at children under 13, and we do not knowingly collect personal information from children. Subscriptions should only be bought by the holder of the App Store or Google Play account, or with the account holder's permission; both stores provide parental controls for purchases.

11. App Stores

Downloading the app and subscribing are transactions between you and Apple or Google. They collect their own data about downloads, purchases, renewals, and crashes under their own policies, which we do not control. Any crash reports Apple or Google share with us are aggregated and provided by the platform, not gathered by the app.

12. Changes to This Policy

If we change this policy, we will update the date at the top of this page, and we will do so before shipping any app version that changes what data is handled.

13. Contact

Questions about this policy: contact@olaverse.co.uk

Appendix: Legal Detail

The sections above are the whole picture in plain English. This appendix restates the same facts in the formal terms that data protection law uses, for anyone who needs them.

A. Controller, Processors, and Scope

For the purposes of the UK GDPR and EU GDPR, the controller is Olaverse Labs, contactable at contact@olaverse.co.uk. Because the app processes your purchase log entirely on your own device and transmits it nowhere, that log is not personal data under our control.

For subscription data we are the controller, and RevenueCat, Inc. acts as our processor under a data processing agreement; Apple and Google act as their own controllers for the payment itself. We are also the controller for correspondence you send us directly.

B. Lawful Basis for Processing

• App use: no lawful basis is required, as we carry out no processing of your purchase log. Processing on your own device, under your sole control, is not processing by us.
• Subscription and entitlement data: performance of a contract (Article 6(1)(b)) — providing, restoring, and maintaining the subscription you purchased — and, for the underlying transaction records, compliance with a legal obligation (Article 6(1)(c)) under tax and accounting law.
• Email correspondence: legitimate interests (Article 6(1)(f)) — responding to a request you chose to send us.

C. Your Rights Under UK and EU GDPR

You have the right to request access to your personal data, and its rectification, erasure, restriction, or portability, and to object to processing. In practice, for the purchase log these rights are exercised directly on your device, since we hold no copy: you already have full access, and deleting an entry or the app is immediate erasure.

For subscription records and for any email correspondence you have sent us, you can exercise all of these rights by writing to contact@olaverse.co.uk. We respond within one month, as required. Because subscription records are keyed to a random identifier rather than to you, we may need you to supply that identifier or your store receipt in order to locate them.

If you believe we have handled your personal data unlawfully, you may complain to the UK Information Commissioner's Office at ico.org.uk, or to your national supervisory authority if you are in the EEA.

D. United States State Privacy Rights

Under laws including the California Consumer Privacy Act as amended by the CPRA, and the comprehensive privacy laws of states such as Virginia, Colorado, Connecticut, Utah, and Texas, we disclose the following:

• Categories of personal information collected through the app: identifiers, limited to a random, app-generated subscriber identifier and the IP address accompanying a subscription request; and commercial information, being your subscription status and transaction history. Both reach us only through RevenueCat. Your purchase log is not collected by us.
• Categories of sensitive personal information collected: none.
• Sold or shared for cross-context behavioural advertising: none. We have never sold or shared personal information, and we do not process it for targeted advertising or profiling. The app contains no advertising.
• Sources: your device, via RevenueCat, for subscription data; and you directly, when you email us.
• Retention: subscription records for as long as the subscription is active and thereafter only as long as tax and accounting law requires; email correspondence for as long as needed to handle your enquiry.

You may exercise your rights of access, correction, deletion, opt-out, and appeal by emailing contact@olaverse.co.uk. We will not discriminate against you for doing so. Because we hold nothing from your purchase log, a request about app content will be answered by confirming that we hold none.

E. International Transfers

Your purchase log is not transferred anywhere: it stays on your device. Subscription data is processed by RevenueCat, Inc. in the United States, relying on the Standard Contractual Clauses with the UK International Data Transfer Addendum where applicable. Email you send us is handled by our email provider in the course of ordinary email delivery.

F. Security

Your purchase log is protected by your device's own security — its passcode, biometrics, and platform encryption. We recommend keeping a device passcode enabled, since anyone who can unlock your phone can open the app. Subscription data travels over encrypted connections to RevenueCat and to the app stores. No system is perfectly secure, but the app's design means a breach of our systems, or of RevenueCat's, cannot expose your purchase log, because it is not there.

G. Automated Decision-Making

The app shows you your own regret patterns over time. This is a straightforward summary of the entries you made yourself, computed on your device. It is not automated decision-making producing legal or similarly significant effects, and it does not involve profiling by us.