Privacy policy

Last updated: 10 November 2026

This policy explains what data the OtoLore app and this website use, why, and what you can do about it. We collect as little as we can: only what is needed for the app to work, to keep your progress, and for subscriptions. There are no ads, no advertising trackers, and we never sell data.

Who is responsible

Mohammad Oumari, Vienna, Austria. Email: support@otolore.com. For anything about your data, write to this address.

What the app uses, and why

• An anonymous user ID. When you first open the app, it gets a random ID from Firebase Authentication. It does not contain your name or email. It lets us save your progress and check which episodes you can open.
• Your learning progress. Which episodes you watched, your answers to the questions, and your review schedule. This is what makes the daily review and the sticker book work, and lets your progress come back on a new phone.
• Sign in with Apple or Google, if you choose it. Then we receive what Apple or Google share: an account ID and, depending on your choice, an email address (with Apple, you can hide it) and a name. We use it only so you can sign in and keep your progress.
• Line reports, if you send one. The line you report, the reason you pick and the note you write, linked to your user ID, so we can fix the line.
• Subscriptions, if you buy one. Payment is handled entirely by Apple; we never see your card. We receive from Apple, through our provider RevenueCat, which subscription you have, and when it started and ends, linked to your user ID, so we can unlock the episodes.
• Technical data. When the app downloads episodes, our providers' servers necessarily see your IP address and device details. They are used to deliver the files and to protect the service from abuse.

The age range you choose when you start, your reading setting and your reminder time stay on your phone. We do not receive them.

Legal basis

We process this data to provide the app you asked for (Article 6(1)(b) GDPR), and to keep it secure and working (Article 6(1)(f) GDPR, our legitimate interest). If we ever add optional analytics, we will ask for your consent first, and not at all below the age of digital consent in your country.

Who processes the data for us

• Google Firebase (Google Ireland Ltd. / Google LLC): sign-in, the database and file storage. Our database and files are stored in the EU (Frankfurt, Germany).
• RevenueCat, Inc. (USA): manages subscriptions.
• Apple: App Store, payments and Sign in with Apple; Google: Sign in with Google.
• Cloudflare: hosts this website.

Some of these companies are based in the USA or may access data from there. Transfers rely on the EU–US Data Privacy Framework where the company is certified, and otherwise on the European Commission's standard contractual clauses.

How long we keep it

We keep your progress and account as long as you use the app. When you delete your account, your progress, reports and sign-in account are deleted. Subscription records may be kept longer where tax and accounting law requires it.

Deleting your data

In the app, go to Settings → Account → Delete account. This deletes your data right away and cannot be undone. You can also ask us by email.

Your rights

You can ask us for a copy of your data, and to correct, delete or restrict it, to receive it in a portable format, and you can object to processing based on our legitimate interest. You can also complain to a data protection authority; in Austria, that is the Datenschutzbehörde (dsb.gv.at).

Children

OtoLore is for people aged 13 and over. The app asks for an age range when it starts and does not let younger children continue. If you believe a child under 13 is using the app, write to us and we will delete the data.

This website

This website uses no cookies and no analytics. Our host, Cloudflare, processes your IP address to deliver the pages and protect them from attacks.

Changes

If this policy changes, we update the date at the top. If a change matters for you, we also tell you in the app.