Privacy Policy

Effective date: September 20, 2026

This Privacy Policy explains what personal data Olla (“Olla”, “we”, “us”) collects when you use the Olla app, why we collect it, who we share it with and what choices you have. We keep it as simple as we can: we collect what the app needs to work, we do not sell your personal data, and you can control the social parts of your profile.

1. Who is responsible

Olla is the controller of your personal data for the Olla Service. You can reach us at [email protected].

2. What we collect

Data you give us

• Account: username, e-mail address and password (stored only as a one-way hash, never in readable form).
• Sign-in with Google or Facebook: the account identifier, e-mail address, name and profile photo link those services share with us.
• Profile: the profile photo you choose, and privacy settings you set.
• Your content: playlists and the songs in them, your favorite radio stations count, who you follow and who follows you, and playlist invitations you send or receive.
• Messages to us: anything you write to our support address.

Data collected automatically

• Usage: what you play, search and open, and how long you listen (so we can offer recommendations, count plays for artists and improve the app).
• Device and technical data: app version, device model and Android version, language, IP address, advertising identifier (for free users, where allowed), and diagnostic and crash information.
• Push notification token: an identifier that lets us deliver notifications to your phone.
• Subscription status: whether your Premium subscription is active and when it ends. We receive this from Google Play; we do not receive your payment card details.

3. How we use your data

• to create and secure your account and let you sign in;
• to provide the Service: streaming, playlists, sharing, following, offline listening and notifications;
• to verify Premium purchases and unlock Premium features;
• to send service messages such as password resets and the notifications you allow;
• to understand how the app is used, fix crashes and improve it;
• to show advertising to free users, where applicable;
• to prevent abuse and fraud, enforce our Terms and meet legal obligations.

4. Legal bases (EEA, UK and similar laws)

We process your data because it is necessary to provide the Service you asked for (contract); because we have a legitimate interest in keeping the Service secure, working and improving; because you gave consent (for example for push notifications or personalised ads, which you can withdraw at any time); and to comply with the law.

5. What other people can see

• Other signed-in users can see your username, profile photo, e-mail address, and the counts of your followers, following, playlists and favorites on your profile card, and in playlists you share.
• Your followers and following lists are visible to other users unless you switch on Hide followers & following in Settings.
• If you switch on Hide profile, you no longer appear in people search. People who already follow you or share a playlist with you can still see you.
• Your listening history is not shown to other users.

6. Who we share data with

We do not sell your personal data. We share it only with service providers that help us run Olla, under contracts that limit how they may use it:

• Google (Firebase Cloud Messaging for notifications, Firebase Analytics and Crashlytics for usage and crash reports, Google Play for billing, Google Sign-In, and Google advertising services for free users);
• Meta / Facebook (only if you use Facebook sign-in);
• Cloudflare and our hosting provider (to deliver and protect the Service; they process technical data such as your IP address);
• Jamendo and radio stream providers (they receive the request to fetch music or a stream, which includes your IP address).

We may also disclose data when the law requires it, to protect rights and safety, or in a business transfer, with the same level of protection.

7. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

8. How long we keep data

We keep your account data while your account exists. When you delete your account we delete or anonymise your personal data, except what we must keep for legal, tax, security or fraud-prevention reasons. Push tokens are removed when you sign out. Technical logs are kept for a limited period.

9. Your choices and rights

Depending on where you live (for example under the GDPR, the UK GDPR, the Turkish KVKK, or state laws), you may have the right to access, correct, delete, restrict or object to the processing of your data, to receive a copy in a portable format, and to withdraw consent. In the app you can:

• edit your profile and photo (Settings → your profile);
• hide your profile and your followers and following lists (Settings);
• turn push notifications off (Settings) or in your phone’s system settings;
• reset advertising personalisation in your phone’s Google settings;
• sign out at any time.

To exercise a right, or to ask us to delete your account and data, write to [email protected] from the e-mail address of your account. You also have the right to complain to your data protection authority.

10. Children

Olla is not directed to children under 13 (or the higher age of digital consent in your country). We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

We protect data with measures such as encrypted connections (HTTPS), hashed passwords, access controls and encrypted offline files. No system is perfectly secure, so please use a strong, unique password.

12. Changes to this policy

We may update this policy. When the change is important, we will tell you in the app or by e-mail before it takes effect. The effective date at the top shows when it was last changed.

13. Contact

Questions about privacy? Write to [email protected].