Privacy · privacy-v1

Privacy Policy

This policy explains how OWNNOW processes personal data in the mobile application and on ownnow.app.

Effective date: Policy version: privacy-v1

1. Operator and contact

OWNNOW is operated by Adrian Berger, Mühledorfstrasse 2, CH-3018 Bern, Switzerland.

Privacy questions and requests can be sent to contact@ownnow.app.

2. Scope and current business model

This policy covers the OWNNOW mobile application and the public website at ownnow.app.

OWNNOW does not sell or rent personal data. OWNNOW currently does not use personal data for personalized advertising, advertising profiles, or cross-app tracking. The service is currently free, and no advertising, attribution, general analytics, or crash-reporting SDK is currently present in the app.

Subscriptions, paid features, or advertising may be introduced in the future. This policy, relevant app-store disclosures, and any required choices will be updated before materially different tracking or advertising practices become active.

3. Data categories

Account, authentication, and profile

We process account and authentication information, session and security records, and profile settings needed to create, secure, and operate an OWNNOW account. Profile settings can include selected country, language, timezone, notification preferences, quiet hours, and records of accepted policy versions.

Signals, Watches, and matching

We process the Signals, filters, Watches, conditions, and related settings you create. We also process relevance and matching state so source events can be evaluated against your choices.

Feed and service-related activity

OWNNOW stores service-related usage data such as whether feed items were seen, opened, or dismissed, which Signal produced a match, relevance state, and the time a match was recorded. This operational data is not used to build a personalized advertising profile.

Device and notification data

If you enable notifications, OWNNOW processes device and installation information, platform details, push tokens, notification preferences, delivery and receipt state, and limited push-open timestamps. Notification permission is optional.

Country, timezone, and permissions

Country and timezone are selected by you or suggested locally on your device. OWNNOW does not use a GPS/location API or request location permission. The current app does not request camera, microphone, contacts, or photo-library permission.

Feedback and communications

We process feedback you voluntarily submit in the app or communications you send to the contact address, together with the information needed to respond or improve the product.

Local app data

Sessions and some application state are stored locally on your device. Device security and access to the device can therefore affect the confidentiality of this information.

Sources and external websites

OWNNOW retrieves RSS and other source content on the server. If you open an external source website, that website receives the request directly and applies its own terms and privacy practices.

4. Purposes and automated matching

We use personal data to create and secure accounts, maintain sessions, store your settings, operate Signals and Watches, assemble the NOW feed, deliver optional notifications, respond to feedback, prevent abuse, troubleshoot failures, and maintain the reliability of the service.

Signals are evaluated automatically against source events to estimate relevance. Matching can be incomplete or inaccurate, and an automated match should not be treated as a guarantee that an item is complete, correct, or important to you.

Notifications are optional. Delivery is not guaranteed and may be delayed or unavailable.

5. Legal bases

Where applicable data-protection law requires a legal basis, OWNNOW relies on the following bases according to the purpose and context:

  • Contract or pre-contractual measures: account creation and login, Signals, the NOW feed, settings, and delivery of the requested service.
  • Consent: optional push notifications and voluntarily submitted feedback where consent is the applicable basis.
  • Legitimate interests: security, abuse prevention, technical reliability, delivery and receipt metadata, and limited push-open tracking.
  • Legal obligations: processing or retention where it is actually required by applicable law.

6. Service providers and data flows

SupabaseAuthentication, database and storage services, row-level security, Edge Functions, and backend processing.
Expo Push ServiceProcessing needed to route optional push notifications.
Firebase Cloud MessagingDownstream delivery of optional Android push notifications.
Expo EAS BuildInfrastructure used to build the mobile application.
RSS and source providersServer-side retrieval of source updates used by OWNNOW.
External websitesIndependent destinations opened when you choose to follow a source link.

Service providers may process data in locations where they or their subprocessors operate. Their contractual terms, privacy notices, security measures, and available location controls govern their processing. OWNNOW does not claim that processing is limited to Switzerland or the European Union.

7. Website and Cloudflare

Cloudflare provides DNS, hosting, security, and delivery services for ownnow.app. When you access the website, Cloudflare may process normal web-request and network metadata such as IP address, request time, requested resource, browser or user-agent information, and security signals needed to deliver and protect the site.

Cloudflare may process this information in locations where it operates under its own contractual and privacy terms. OWNNOW does not state an exact Cloudflare log-retention period or processing geography.

No advertising or general analytics tools are currently used on this website. The website does not provide an account or password-recovery form.

8. Retention and account deletion

  • Account, profile, Signal, settings, and feed interaction data is retained while the account exists.
  • Push delivery and receipt metadata has a target maximum retention of 90 days.
  • Push-open tracking has a target maximum retention of 90 days.
  • Automated enforcement of the 90-day push-metadata target is not yet implemented, so actual deletion may require operational cleanup.
  • Feedback is retained while needed for product improvement. Attributable feedback is deleted with account deletion where applicable.

Secure self-service deletion is available in OWNNOW under YOU → Settings → Account deletion. Deletion is irreversible and removes the authenticated account and user-owned OWNNOW data.

Shared source and content records may remain because they are not owned by one account. Records required by law and technically necessary provider backups or logs may persist temporarily under applicable provider retention practices. No fixed backup-retention period is stated because one has not been verified. Messages already handed to a push provider cannot necessarily be recalled.

See the account deletion instructions for the exact in-app steps.

9. Security

OWNNOW uses authentication, database access controls, row-level security, restricted backend operations, and other technical and organizational measures intended to protect account data. No system can promise absolute security, and users should protect their password, device access, and authenticated sessions.

10. Your choices and requests

You can decide whether to grant notification permission and can manage notification settings in the app or through your device. You can permanently delete your account using the in-app process.

For privacy questions or requests under applicable law, contact contact@ownnow.app. Safe identity verification may be required before account-specific information is disclosed or changed. Never send passwords, authentication codes, tokens, or other secrets by email.

11. Minimum age

OWNNOW is intended for people aged 16 or older.

12. Changes to this policy

This policy may be updated as OWNNOW changes. Material changes will be communicated as appropriate before they take effect. Relevant privacy and app-store disclosures will be updated before future personalized advertising, advertising profiling, cross-app tracking, or materially different processing becomes active.

Effective date: 14 October 2026. Version: privacy-v1.