Privacy Notice

This notice explains how Sean Busuttil Cordina (MT19181713), trading as Oi Amigo ("we", "us") collects and uses personal data when you use Oi Amigo (the "Service"). We act as the data controller for the personal data described below. Payments are processed by Stripe, which handles card data as a separate controller.

1. Data we collect

• Account data: email, display name, username, password hash, language preferences, age confirmation.
• Profile & learning data: avatar, interests, level, saved phrases, progress, streaks, achievements.
• Communications: chat messages with AI partners and other users, reports, support messages.
• Usage & device data: session activity, feature usage, device type, browser, IP address, approximate timezone.
• Payment data: handled directly by Stripe. We receive subscription status, plan, and customer/subscription IDs — not card details.

2. How we use it & legal basis

• Provide and operate the Service, including AI features and matching — performance of contract.
• Security, abuse prevention, content moderation, and enforcing our Terms — legitimate interests.
• Customer support and service communications — performance of contract.
• Product analytics and improvement — legitimate interests.
• Legal and tax compliance — legal obligation.
• Optional marketing emails — consent (you can withdraw at any time).

3. AI processing

Text you send through chat, translation, and practice features is processed by AI providers (such as the Lovable AI Gateway) acting as our processors, solely to generate responses, suggestions, and feedback. We do not sell your data, and we instruct our AI providers not to use your content to train their models.

4. Who we share data with

• Service providers / sub-processors: hosting and database (Supabase / Lovable Cloud), AI inference (Lovable AI Gateway), analytics and error tracking, customer support tooling.
• Payment processor: Stripe, Inc., for processing subscription payments and storing card details.
• Other users: your display name, username, avatar, level, equipped cosmetics, and messages you send in shared threads are visible to the people you interact with.
• Professional advisers (legal, accounting) and authorities where required by law.

5. International transfers

Some of our processors operate outside the EEA/UK. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above. Account and learning data are retained while your account is active and for up to 30 days after deletion to allow recovery, then permanently deleted or anonymised. Billing records are retained as required by tax law (typically up to 10 years). Backups are purged on rolling cycles.

7. Your rights

Depending on where you live (including under UK/EU GDPR), you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You can also lodge a complaint with your local supervisory authority — in Malta this is the Information and Data Protection Commissioner. To exercise your rights, email support@oiamigo.app; we respond within one month. You can delete your account directly from Profile → Account.

8. Security

We use industry-standard technical and organisational measures — encryption in transit (HTTPS/TLS), encryption at rest, role-based access controls, row-level security on user data, audit logs, and least-privilege secret management. No system is 100% secure; report suspected vulnerabilities to support@oiamigo.app.

9. Cookies

We use strictly-necessary cookies and local storage to keep you signed in and to remember your preferences. We may use limited analytics cookies to understand product usage in aggregate; you can manage these in your browser settings.

10. Children

Oi Amigo is not intended for users under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact support@oiamigo.app and we will delete it.

11. Changes

We may update this notice. Material changes will be communicated via the Service or by email. The "last updated" date above always reflects the current version.

12. Contact

Controller: Sean Busuttil Cordina (MT19181713), trading as Oi Amigo. Privacy contact: support@oiamigo.app.