OMW Privacy Policy
Effective date: TBD
OMW ("we", "us", "the app") is a civic-impact tracking platform that helps people, organizations, and programs coordinate real-world action aligned with the UN Sustainable Development Goals. This policy explains what we collect, how we use it, and how to exercise your rights.
1. What data we collect
- Account identifiers: Firebase Auth user id (UID), sign-in method, and optionally email address or Apple/Google account identifier.
- Profile information you provide: name, role, stakeholder type, sectors, SDG focus, country/city, bio, organization affiliation.
- User-generated content: actions, asks, endorsements, reviews, map pins, and fundraising campaigns you create or participate in.
- Device and usage data: app build number, OS version, anonymized crash reports, analytics events (e.g.
sign_in_succeeded,onboarding_completed) — never linked to free-text content. - Location: when you explicitly grant location permission, OMW uses your coarse location to center the map on nearby actions and orgs.
2. How we use it
- Personalize the home feed, map view, and country hub.
- Aggregate anonymous analytics to measure feature adoption and crash rates (≥99.5% crash-free sessions is our quality bar).
- Moderate user-generated content via the in-app report flow.
- Send push notifications for events you opted into (action responses, endorsements received, ask responses).
3. How we store it
OMW uses Google Firebase for authentication, Firestore for data storage, Cloud Storage for media uploads, and Cloud Functions for server-side logic. Firestore data is encrypted at rest in a US multi-region. We do not sell your data or share it with advertising networks.
4. How long we keep it
We retain your account data until you request deletion. Inactive accounts (no sign-in for 18 months) are archived and then purged on a rolling basis.
5. How to delete your data
Open the app, go to Me → Settings → Delete account. The in-app flow invokes the deleteAccount callable, which soft-deletes your profile, nulls ownership on your public artifacts, purges your private subcollections, terminates your session, and removes your Firebase Auth user. This complies with Apple App Store Review Guideline 5.1.1(v).
You may also email the support address below to request deletion.
6. How to revoke consent
Signing out revokes local session consent. Deleting your account (per section 5) permanently revokes all consent and removes your data.
7. How to export your data
Open Me → Settings → Export my data to receive a signed URL that expires in 24 hours and contains your profile plus all public artifacts you authored. This satisfies GDPR Article 20 (data portability).
8. Children's privacy
OMW is not directed to children under 13. If we learn we have collected data from a child under 13, we delete it promptly.
9. Contact
Email: contact@onmyway-app.com