Last Updated: October 22, 2026
1. Introduction
Welcome to Ondit (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, and protect your information when you use our website, our iOS and Android apps, and our services.
2. Age Restriction
You must be 13 years or older to use Ondit. If you are under 13, please do not use our services or provide any personal information.
3. Information We Collect
3.1 Information You Provide
- Account information (first name, last name, birthday, display name, email)
- Optional profile information (biography, sex)
- Collections and rankings you create
- Images you upload
- Tags you create or use
- Following relationships with other users
3.2 Automatically Collected Information
- Browser local storage data for saving draft collections
- Basic device information like browser type for browser specific features and limitations
- IP addresses, which our infrastructure providers process to deliver the service and keep it secure
3.3 Third-Party Advertising (Website)
We use Google AdSense to display advertisements on our website. Our mobile apps do not show ads. Google AdSense may collect:
- Cookie data
- IP addresses
- Device information
- Browsing behavior
- Other data as outlined in Google's Privacy Policy
3.4 Mobile Apps
- Camera and photo library: only when you choose to take or pick a photo (for an item, a template cover, or your profile picture). Photos are resized on your device and uploaded only when you save them.
- On-device storage: lists you make while signed out are stored only on your device until you sign in, when they are added to your account.
- Sign-in protection: we use Cloudflare Turnstile on the sign-in screen to block automated abuse. It processes device and network signals for that purpose.
- App updates: the app checks for and downloads updates through Expo (EAS Update), which receives basic information such as the app version and platform.
- The mobile apps do not use advertising identifiers and do not track you across other companies' apps or websites.
3.5 Safety Reports and Blocks
- When you report content or a user, we store the report and its reason so our team can review it. The person you report is not told who reported them.
- When you block a user, we store the block. It is private to you: the blocked user is not notified and cannot see it.
4. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Create and manage your account
- Display your collections and rankings
- Enable social features like following
- Review reports and keep Ondit safe, including removing content and accounts that break our Terms of Use
- Send service-related communications
- Analyze and improve our services
5. Information Sharing and Disclosure
5.1 Public Information
The following information is publicly visible:
- Your display name
- Your first and last name
- Your biography
- Your public collections and rankings
- Your following/follower relationships
- Images you upload
5.2 Private Information
The following information is kept private:
- Your email address
- Your birthday
- Your sex
- [Future] Your private collections
5.3 Third-Party Sharing
- We do not sell your personal information
- We share necessary information with Supabase, our infrastructure provider
- Google AdSense may collect and process data on our website according to their privacy policy
- We use Cloudflare (Turnstile) to protect sign-in and Expo to deliver mobile app updates
- Apple and Google distribute our mobile apps and may collect information under their own privacy policies
6. Image Usage
6.1 User-Uploaded Images
- When you upload an image for an item or collection, it becomes publicly available
- Other users may use your uploaded image for the same item or collection
- You cannot delete images once uploaded
- You are responsible for ensuring you have the right to upload and share any images
6.2 Copyright
- Users must respect copyright laws when uploading images
- We reserve the right to remove images that violate copyright laws
7. Data Retention and Deletion
- When you delete your account, all your personal data is permanently deleted
- This includes your profile information, collections, rankings, and audit logs
- Public images you've uploaded remain available for other users
- We do not maintain backups of deleted account data
- You can delete your account in the app (Profile, then Delete account) or on the website in your profile settings. See ondit.io/delete-account for step-by-step instructions.
8. Security
We implement security measures including:
- Supabase authentication systems
- Row-level security in our database for fine grained access control
- Secure data transmission
- Regular security updates
9. Your Rights
You have the right to:
- Access your personal information
- Delete your account and associated data
- [Future] Opt-out of non-essential communications
- Block other users, which removes any follows between you and stops them following you
- Report content or users you believe break our Terms of Use
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.