1. Who We Are
Olonara AI operates the Olonara platform — a collaborative audio content application available as a mobile app and web application at https://www.olonara.ai. Olonara enables users to create, share, and discover authentic voice-based content across multiple languages, participate in collaborative audio sessions, and connect their perspectives with communities and businesses.
For the purposes of applicable data protection laws, Olonara AI is the data controller responsible for your personal information.
2. Information We Collect
We collect only the information necessary to operate the platform and provide our services.
2.1 Information You Provide Directly
- Account information: When you create an account, we collect your email address, display name, and account type (personal or business). Phone number is optional and may be used for account recovery if you choose to provide it.
- Content you create: Audio recordings, perspectives, podcast episodes, jam entries, daily drop responses, collaborative story contributions, and any other content you produce on the platform.
- Profile preferences: Your preferred language for the app interface and content discovery.
2.2 Information Collected Automatically
- Usage and interaction data: Content you listen to, how much of each piece you play, whether you like, skip, or share content. This data helps us improve recommendations and understand how the platform is used.
- Device and technical information: Device type, operating system, browser type, IP address, and app version. This information is used for security, crash reporting, and ensuring the app functions correctly on your device.
- Session data: Login timestamps and session duration used for security and account management.
2.3 Information from Third-Party Sign-In
- Google Sign-In: When you sign in using your Google account, we receive your name, email address, and profile photo from Google. We do not receive your Google password.
- Google Contacts (optional): With your explicit permission, we may access your Google contact list solely to help you find friends who are already using Olonara. We display matches within the app but do not store your contact list on our servers. You can revoke this permission at any time through your device's app settings or Google account settings.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and operate the platform: Creating and managing your account, processing your audio content, enabling collaboration features, and delivering the core functionality of the app.
- To personalise your experience: Showing content in your preferred language, surfacing sessions relevant to your interests, and improving content recommendations based on your listening behaviour.
- To communicate with you: Sending account-related notifications such as password resets, security alerts, or platform updates. We do not send marketing emails without your explicit consent.
- To maintain platform safety and security: Detecting and preventing fraud, abuse, spam, and other harmful activity. Enforcing our Terms of Service.
- To improve the platform: Analysing aggregated, anonymised usage patterns to understand how people use Olonara and identify areas for improvement.
- To process brand and business requests: If you participate in brand campaigns, your audio content may be shared with the sponsoring business as described at the time of participation. You will always be informed before this happens.
- To comply with legal obligations: Responding to valid legal requests, court orders, or regulatory requirements.
4. Audio Content and Recordings
Audio is at the heart of Olonara. We take the handling of voice recordings seriously.
- Storage: All audio files you create are stored securely on Amazon Web Services (AWS) S3 infrastructure located in the United States (us-east-2 region). Files are stored with server-side encryption at rest.
- Access: Your audio content is accessible to other users of the platform according to the sharing settings you choose when creating it. Content marked as public can be listened to by other users. Content within closed sessions is only accessible to session participants.
- Processing: Where you use AI-assisted creation features, your audio or text input is processed to generate the requested output. These inputs are not used to train AI models without your explicit consent.
- Deletion: When you delete a recording or your account, audio files are permanently removed from our storage systems within 30 days.
- Voice data sensitivity: We recognise that voice recordings may be considered biometric data in certain jurisdictions. We handle all audio data with heightened care and do not use voice recordings to build biometric profiles or for identification purposes beyond the audio content features you actively use.
5. Third-Party Services
We work with trusted third-party service providers to operate Olonara. Each provider processes your data solely to perform their specific service function. We do not permit them to use your data for their own independent purposes.
| Service | Provider | Purpose |
|---|
| Authentication | Amazon Web Services (Cognito) | Secure user login and session management |
| Google Sign-In | Google LLC (Firebase Authentication) | Social login and identity verification |
| Audio & Media Storage | Amazon Web Services (S3) | Storing audio recordings and media files |
| Backend Infrastructure | Amazon Web Services | Application servers, database, and API hosting |
Each of these providers maintains their own privacy policy. We encourage you to review the privacy policies of Google (policies.google.com/privacy) and Amazon Web Services (aws.amazon.com/privacy) for further information.
6. Data Sharing
- We do not sell your personal data. Your information is never sold, rented, or traded to any third party for commercial purposes.
- We do not share your data for advertising. We do not work with advertising networks and do not allow third parties to track you across other websites or apps.
- Service providers: We share data with the third-party providers listed above only to the extent necessary for them to perform their service.
- Brand campaigns: If you voluntarily participate in a business or brand campaign and your submission is selected, your audio content (and display name, if you consent) may be shared with the brand. This is always opt-in and disclosed at the point of participation.
- Legal requirements: We may disclose your information if required to do so by law, court order, or valid government authority, or when we believe disclosure is necessary to protect our rights or the safety of others.
- Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.
7. Data Storage and Security
- Data location: Your data is stored on servers operated by Amazon Web Services in the United States (us-east-2 region).
- Encryption in transit: All data exchanged between your device and our servers is encrypted using HTTPS/TLS.
- Encryption at rest: Audio files and sensitive data stored on AWS S3 are encrypted at rest using AES-256 server-side encryption.
- Access controls: Access to user data is restricted to authorised personnel who require it to operate and maintain the platform.
- Authentication security: User authentication is managed through AWS Cognito with industry-standard token-based session management.
- Limitations: No method of electronic transmission or storage is 100% secure. While we apply appropriate safeguards, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify affected users in accordance with applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data. We honour these rights for all users regardless of jurisdiction.
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Correction: You can update your display name and profile information directly within the app at any time. For other corrections, contact us.
- Right to Deletion: You can delete your account and all associated data directly within the app (Profile → Delete Account) or by contacting us.
- Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format by contacting us.
- Right to Withdraw Consent: Where processing is based on consent (such as Google Contacts access), you can withdraw that consent at any time through your device or Google account settings without affecting prior processing.
- Right to Object: You can object to processing of your personal data for analytics or behavioural tracking purposes by contacting us.
- Right to Restrict Processing: In certain circumstances you can request that we restrict processing of your data while a dispute is being resolved.
To exercise any of these rights, contact us at rujutaranade@gmail.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
9. Account and Data Deletion
You have the right to permanently delete your Olonara account and all associated data.
How to delete your account
You can delete your account directly from within the app by navigating to your Profile and selecting Delete Account. You may also submit a deletion request by emailing rujutaranade@gmail.com from the email address associated with your account.
What gets deleted
- Immediately upon request: Your authentication credentials (Firebase Auth and AWS Cognito user records) are revoked so you can no longer log in.
- Within 30 days: Your user profile (display name, email, phone), all audio recordings and media files stored on AWS S3, all content you created (perspectives, podcasts, jams, drops), and your interaction history are permanently deleted.
- Anonymised analytics: Aggregated, anonymised data that cannot be linked back to you may be retained for platform improvement purposes.
What we may retain after deletion
- Records required by law or for legitimate legal purposes for the minimum period required by law.
- Backup copies of data may persist in encrypted backup storage for up to 30 days before being permanently overwritten.
You will receive a confirmation email once your account deletion is complete.
10. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services.
- Account data: Retained for the duration of your account. Deleted within 30 days of account deletion request.
- Audio recordings: Retained while your account is active. Deleted within 30 days of account deletion or manual content deletion.
- Interaction and usage data: Retained for up to 12 months for the purpose of improving content recommendations. Anonymised or deleted upon account deletion.
- Authentication logs: Retained for up to 90 days for security and fraud prevention purposes.
11. Children's Privacy
Olonara is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at rujutaranade@gmail.com. We will promptly investigate and delete any such information.
If we become aware that we have collected personal data from a child under the applicable age limit, we will take immediate steps to delete that information from our systems.
12. International Data Transfers
Olonara is operated from and stores data in the United States (AWS us-east-2 region). If you are accessing the platform from outside the United States — including from the European Union, United Kingdom, or India — your data will be transferred to and processed in the United States.
For users in the European Economic Area (EEA) or United Kingdom, such transfers are carried out pursuant to Standard Contractual Clauses (SCCs) and the data processing agreements maintained by AWS and Google with their customers, which provide appropriate safeguards for cross-border transfers.
By using Olonara, you acknowledge that your data may be transferred to and processed in countries outside your own.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make material changes to this policy, we will notify you by:
- Posting the updated policy on this page with a new last updated date.
- Sending an in-app notification to active users.
- Sending an email notification to the email address associated with your account, where required by law.
Your continued use of Olonara after the effective date of a revised policy constitutes your acceptance of the changes. If you do not agree to the revised policy, you should stop using the platform and delete your account.