Privacy Policy

This Privacy Policy for Opinionly LLC ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you download and use our mobile application ("Opinionly"), when you use our websites, or when you respond to something someone shared with you, even if you do not have an Opinionly account.

Opinionly is a mobile app for giving and receiving honest feedback. You can post with your name or anonymously, and the people you are connected to can respond anonymously. We also offer a separate product for employers, described in section 4.

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@opinionly.io.

Summary of Key Points

This summary gives you the shape of the policy. Every point is explained in full in the numbered sections below.

What we collect. Your account details, your profile, and everything you write in the app, including content you post anonymously, plus anything you send us through our website forms or by email. We also collect some information automatically, such as your device type, how you use the app, and crash reports. Section 1.

Anonymous does not mean anonymous to us. Other people cannot find out who wrote your anonymous content. We can. We keep a record of who wrote what, and we need it to run the service and to respond to lawful requests from authorities. Sections 4 and 10.

We use AI on what you write, in five ways, and you cannot turn it off. One checks what you post, comment, send as feedback, write in a connection request, or send through a shared link, before anyone else sees it. One offers you a reworded version of a post, a comment, or a reply to a shared post when it looks likely to be blocked. Two read feedback, posts, and comments later, to label them (what they are about, who they seem to be about, and whether replies agree or disagree) and to write summaries. One uses records of past checks to improve our own checking model. Section 6.

Some of what we do with your words is not obvious. Feedback you send someone, and comments you leave on their posts, can become records filed under that person when our AI reads them as being about them. The same happens with what other people write about you. Where an employer is involved, those records become statistics an administrator at that employer can read, along with summaries our AI writes about patterns in what people said about work there. Those summaries can be based on what only a few people wrote. Your feedback can be counted in those statistics even if you never joined anything, for example when you answer a link tied to a company. Turning participation off does not remove what was already counted. Section 4.

Who we send information to. Google, Apple, Microsoft, Vercel, and Resend (our email delivery provider) help us run Opinionly. Meta, the company behind Facebook and Instagram, gets a record of the pages you visit on our websites and of some buttons and forms you use there. Starting with version 1.2 of our iPhone app, if you allow tracking when your iPhone asks, Meta also gets a record when you install and open the app, with a random ID for that install, your advertising identifier, and basic details about your phone. If you do not allow it, our app sends Meta nothing about your use of it. We use what Meta receives to measure our own ads, and Meta may also use it for its own advertising. Nothing at Meta is tied to your Opinionly account. We do not sell your personal information, and Opinionly shows no ads. Section 4.

Deleting your account. It is immediate and permanent. Some records stay. It also deletes things other people wrote: their side of your private feedback conversations, their comments and replies on your posts, answers sent to your posts through a link, and their replies under your comments on other people's posts. Counts other people see can go down. Sections 9 and 11.

Your rights. You can ask what we hold, ask for a copy, ask us to correct it, or ask us to delete it, wherever you live. Some places give you additional rights on top. Starting with version 1.2 of our iPhone app, your iPhone also asks whether our app may track you, and you can change your answer at any time in your iPhone's Settings, under Privacy & Security, then Tracking. Sections 11 and 13.

How to reach us. Email hello@opinionly.io. A person reads it.

1. What Information Do We Collect?

Personal Information You Disclose to Us

In Short: We collect the information you give us, and everything you write in the app.

We collect the personal information you give us when you create an account, when you use the app, when you respond to something shared with you, when you use a sign-up form on our websites, when you sign in to our employer dashboard, and when you contact us.

Personal Information Provided by You. What we collect depends on how you use the app. It includes:

• first and last name
• email address
• username. We create it for you when you sign up: from the name Google gives us if you sign in with Google, and otherwise from the part of your email address before the @. Other people can see it.
• password, only if you sign up with an email and password. Your password is handled by our sign-in provider. We never see it and never store it.
• your profile bio, if you write one
• a link to your profile photo, if you sign in with Google. The photo itself stays with Google and we only store the web address. There is no photo upload in the app.
• the posts, comments, and feedback messages you write, including ones you post anonymously
• messages you write when you ask to connect with someone
• who you connect with, who you mute, who you block (including the name that was shown for them at the time and any note you add), and what you like. If you later remove a block you placed on anonymous content, we keep a record that it existed.
• if you tag someone with @ in a comment or feedback message, which account you tagged. Someone tagged in a comment may be notified.
• reports you send us: the reason you pick and any note you write. We record which account filed the report so we can act on it.
• if you take part in the employer product: which organization (usually an employer) your account is linked to, your team there, whether you are an administrator for that organization (administrators can see its dashboard), and the work email address you verify, if you verify one. Our team sets your team and administrator status. Our team can also invite your account to an organization before you do anything; the invitation waits until you accept it or verify a work email there. Section 4 explains what is counted and when.
• who you choose to show each post to, including a company or team where that option is offered
• share links you create, and any employer or team a link is tied to
• a record of activity involving you, such as who liked or commented on your posts and comments, and whether you have seen it. When you do those things to someone else's content, a record of it goes into their activity list.
• when you last opened each feedback conversation
• posts you have muted notifications for
• which lessons you have finished
• which version of our rules and policies you accepted, and when

Content checks and their records. Everything you post, comment, send as feedback, write in a connection request, or send through a shared link is checked automatically before it appears. We keep a record of the text and the result of every check, including checks that passed. In that record, common contact details such as email addresses, phone numbers, @handles, and web links are masked, and the masking can miss some. Section 6 explains how the check works and section 9 explains how long we keep those records.

Sensitive information. We do not ask for sensitive information. We do not collect your precise location, your contacts, photos from your camera roll, your camera or microphone, health data, financial data, browsing history, or your date of birth. We do not collect advertising identifiers, except that, starting with version 1.2 of our iPhone app, Meta receives yours if you allow tracking when your iPhone asks. If you do not allow it, our app does not start Meta's software and sends Meta nothing. Apple may still tell Meta that one of our ads on Facebook or Instagram led to an install; that report does not identify you or your phone. You can change your answer at any time in your iPhone's settings. Section 4 explains what Meta receives and why. The app asks for no permissions other than notifications and, from that version on iPhone, the tracking permission. Your answer changes nothing you see in the app, and Opinionly shows no ads.

Our App Store privacy label lists photos as collected because of the profile picture web address described above, which is the only photo-related information we hold.

Please keep in mind that anything you type into a post, comment, or feedback message is stored by us, and that we cannot tell in advance what you will write. Please do not include sensitive details about yourself or anyone else.

Signing in with Google or Apple. You can sign in with your Google account or your Apple ID instead of creating a password. When you do, we receive your email address. If you use Apple's Hide My Email, that is the forwarding address Apple gives us. Google also gives us your first and last name and the web address of your profile photo. Apple also gives us your first and last name, if you choose to share it when you sign up. The name we receive is used as the name on your Opinionly profile. We do not receive your contacts or a friends list, and we do not post anything to your Google or Apple account.

Push notifications. If you turn on notifications, we store a device token, which is the address Apple or Google uses to deliver messages to your phone, along with your notification settings. Notification previews are off by default. If you turn previews on, the notification your phone shows can include a short piece of text: a new post from someone you are connected with, a comment or reply on your post or comment, a comment that mentions you, or your own post or comment when someone likes it. That text passes through Google's and Apple's notification services on its way to your phone. You can turn notifications and previews off at any time in the app, or in your phone's settings. One exception: the monthly notice that your reflection is ready has no switch of its own in the app, so only your phone's notification settings control it. That notice never includes the reflection itself.

If you do not have an account. Someone can share a post or a feedback request with you through a link. If you respond, we process what you write in the same way we process an account holder's writing, including the automated check and the records that come with it. We do not collect your name or email address in that case. After you respond, you may be shown a code. If you later create an Opinionly account and enter that code, what you wrote is linked to your account and treated as your content from then on, including for the records described in section 4. Other people still see it under the same stand-in name.

We do not store your network address in our database. As with any internet service, the systems that run Opinionly see it when you connect: our hosting provider's routine logs record it, and our servers use it to limit how many requests one connection can send. We do store a scrambled value worked out from it together with what you are answering: the post, or the person you are writing to. We use that value only to stop the same visitor answering the same post more than once, or opening more than one conversation with the same person. Nobody outside Opinionly can turn that value back into an address. That does not mean the address is gone for good, because we could still tell whether a particular address produced it. On some links we store a random value instead of the scrambled one.

If you sign up on our websites. Our websites have short forms where you can ask us to email you when the Android app is ready, or ask about a pilot for your company. If you use one, we collect the email address you enter and, for a pilot request, the company name. The form sends them to us as an email, which we keep in our inbox. We use them to reply to you, or to send the one email you asked for. You do not need an Opinionly account to use these forms. When you submit one, our website also tells Meta that a form was submitted, as our Cookie Policy explains; it does not send Meta what you typed.

If you sign in to the employer dashboard. Our employer dashboard at dashboard.opinionly.io has its own sign-in page. You can sign in there with Google even if you have no Opinionly account, or with an existing Opinionly email and password. When you sign in with Google, we receive your email address, your name if the account shares it, and the web address of your profile photo. Our sign-in provider keeps that record even if nothing in the dashboard is open to you. If you have no Opinionly account, nothing removes that record automatically; email us at hello@opinionly.io to have it removed.

Information Automatically Collected

In Short: Some information, such as your device type and how you use the app, is collected automatically, by us and by Google's tools. Starting with version 1.2 of our iPhone app, Meta also receives some of it if you allow tracking.

We automatically collect certain information when you use the app. Much of it is not tied to your name or contact details. Some of it records who or what you interacted with, for example the account ID of a profile you viewed or the ID of a post you liked, and we could match those back to real people using our own database.

The information we collect includes:

• Device data. The device model, the operating system version, the app version, your language setting and time zone, and random IDs for your installation of the app. We use one of those IDs to decide which features to switch on; Google's analytics and crash-reporting tools use IDs of their own for your installation. We do not collect advertising identifiers, except that, starting with version 1.2 of our iPhone app, Meta receives yours if you allow tracking when your iPhone asks. Meta uses it to measure our ads and may use it to deliver and personalize ads. Google's tools do not receive it. If you do not allow tracking, your iPhone withholds that identifier from our app.

• Log and usage data. Our servers keep technical logs of each request to our service: the web address that was called, whether it worked, how long it took, and how big the response was. Google, which hosts our servers, keeps its own log of each request, and that log also records your device's network address and basic details about the software that made the request. A web address can include the ID of an account, post, or comment you opened or acted on, a username you looked up, or words you typed into search. These logs do not include the text of what you post or send. These logs are kept for about 30 days. Our error and diagnostic logs can identify the specific piece of content involved in a problem, which we can trace back to a person. We do not store network addresses in our own database, but Google's hosting log described above records them.

• Last active time. When you sign in, and each time you open or return to the app while signed in, we update your account with the current time. We keep only the most recent one. Other signed-in people using Opinionly can receive this time along with your profile, for example when they look you up or search for you, even though the app does not show it to them.

• Feature records. Each time you open or return to the app while signed in, and at a few other points while you use it, the app checks with our servers which features to switch on. We keep a record of every check: each feature and its setting, the time, a random ID for your installation of the app, the app version and build, and the platform. These records are linked to your account, so together they show when you used the app. We keep them while your account is open. When you delete your account, we delete them and remove your account identifier from our feature settings. A historical audit record of changes to those settings can still contain your account identifier. Once your account is gone and our routine backups have expired, nothing else can link that record to a person.

Usage analytics, crash reports, and performance data go from your phone to Google directly, using Google's Firebase tools. We have a data-processing agreement with Google covering what we send. Google may also use some of the analytics information for its own purposes, to maintain and improve its services. Google also works out an approximate location, such as your state or country, from your network address; we do not use your phone's location. We use this information to keep the app running, to fix crashes, and to understand which features people use. We also keep our own copy of the analytics information, stored on Google's cloud, which we use to understand how the app is used and what it costs us to run per person.

Starting with version 1.2 of our iPhone app, the app also includes Meta's software, so that we can measure our ads for Opinionly on Facebook and Instagram. Opinionly shows no ads. In version 1.2 or later, your iPhone asks you once whether to allow the app to track you. If you allow it, the app starts Meta's software, which tells Meta when the app was installed and opened and how long it was used. Each of those records carries a random ID that Meta's software creates for your installation, your phone's advertising identifier, and details about your phone and the app such as the app version, device model, iOS version, language, time zone, carrier, and screen size. Meta also sees your device's network address when the records are sent. Meta uses this to measure our ads and may use it to deliver and personalize ads. We do not send Meta your name, your email address, your Opinionly account ID, or anything you write, so nothing at Meta is tied to your Opinionly account. If you do not allow tracking, the app does not start Meta's software and sends Meta nothing. Whichever you choose, the app tells Apple that it was installed, and Apple may report to Meta that one of our ads on Facebook or Instagram led to an install; that report names the ad campaign, not you or your phone. You can change your answer at any time in iPhone Settings, under Privacy & Security, then Tracking. If you turn tracking off after allowing it, the change takes full effect the next time the app starts.

2. How Do We Process Your Information?

In Short: To run the app, to keep it safe, to notify you, to fix problems, to understand how the app and our websites are used, to improve our own safety systems, to sort and summarize what people write, to run the employer product, to measure our advertising, and to comply with the law.

We process your personal information for these reasons:

• To create and manage your account, so you can sign up, sign in, and keep your account in working order.

• To let you use the app, so you can post, comment, like, connect with other people, send and receive feedback, share posts and feedback requests through links, and answer links other people share with you, with or without an account.

• To send you notifications, if you have turned them on, about activity in the app, including if someone tags you, and about your monthly reflection.

• To keep people safe and enforce our rules. We check posts, comments, feedback messages, connection requests, and anything sent through a shared link before it appears. A check can block the text or hold it until a person at Opinionly reviews it, and we may offer you a reworded version. We also act on reports, apply blocks and mutes, and keep the app secure.

• To improve our own safety systems. We use records of past content checks to test and improve our content check. Common contact details are masked in those records first, and the masking can miss some. Section 6 explains this.

• To sort what people write into themes and write summaries. Our AI reads posts, comments, and feedback messages, labels what each one is about, whether it reads as appreciation or a suggestion, and who it seems to be about, and writes summaries from those labels and the original text, including a monthly reflection written only for you. If you tag someone in a comment or feedback message, we record who was tagged and use that when working out who the writing is about. Sections 4 and 6 explain what this produces and who can see it.

• To run the employer product. If your account is linked to an employer, including through an invite you have not yet accepted, we keep which employer and team you are linked to and whether you are its administrator. If you join by confirming a work email address, we send a code to that address and keep the address. Where participation is on, some of what you write and some of what is written about you is counted into statistics and AI-written summaries that an administrator at that employer can read. Section 4 explains when this happens, including the cases where it happens without the writer having joined.

• To find and fix problems, using crash and performance information from the app and the technical logs our servers and hosting provider keep.

• To understand how the app and our websites are used, so we can improve them.

• To measure our advertising. Our websites tell Meta, the company behind Facebook and Instagram, when someone visits a page, taps the button to download the iPhone app, or submits the Android notify-me or pilot sign-up form. Starting with version 1.2 of our iPhone app, if you allow tracking when your iPhone asks, the app tells Meta when it is installed and opened and how long it was used, with a random ID for that install, basic details about your device, and your advertising identifier. If you do not allow tracking, our app sends Meta nothing about your use of it. We use this information to measure our ads on Facebook and Instagram, and Meta may also use it for its own advertising under its own terms. We do not give Meta your Opinionly account, your name, your email address, or anything you write, so nothing at Meta is tied to your Opinionly account. Opinionly shows no ads. Section 4 explains this.

• To meet our legal obligations, to respond to lawful requests, and to enforce our legal terms.

3. What Legal Bases Do We Rely on to Process Your Personal Information?

In Short: We are a US company and this policy is written for US privacy laws. There are three things you turn on yourself: notifications, Open Door for Feedback, and participation in the employer product. Starting with version 1.2 of our iPhone app, your iPhone also asks whether you allow our app to track you.

Opinionly is a US company. The app is intended for people in the United States, though it can be downloaded in other countries, and this section is written for US privacy laws. Those laws do not require us to name a formal "legal basis" for each use of your information. Our reasons are the ones set out in section 2.

If you are outside the United States and believe your local privacy law applies to you, contact us at hello@opinionly.io.

Permissions and consents. These are the choices you make yourself.

• Notifications. You turn them on, and you can turn them off at any time in your phone's settings. In the app you can turn off notifications about posts, comments, and reactions separately. The notification that tells you your monthly reflection (section 6) is ready has no switch of its own in the app, so your phone's settings are the way to turn that one off.
• Open Door for Feedback. Off unless you turn it on in Settings. While it is on, your connections can send you private feedback, and so can anyone who opens a feedback link you share. Section 4 describes what happens to that feedback.
• Employer participation. Described in section 4, and off unless you turn it on yourself.
• Tracking, on iPhone. Starting with version 1.2 of our iPhone app, your iPhone asks whether you allow our app to track you. It asks once and remembers your answer. If you have turned off tracking requests for all apps in your iPhone's settings, it does not ask and treats your answer as no. If you allow it, the app starts Meta's software, which tells Meta that the app was installed and opened and how long it was used, so Meta can measure our ads, and Meta may use what it receives for its own advertising. Section 4 describes what Meta receives. If you do not allow it, the app does not start Meta's software and sends Meta nothing. Separately, Apple may tell Meta that one of our ads on Facebook or Instagram led to an install; that report names the ad campaign, not you or your device, and it does not depend on your answer. You can change your answer at any time in your iPhone's Settings, under Privacy & Security, then Tracking. A change takes full effect the next time the app starts. Your answer does not change anything you see in the app, and Opinionly shows no ads.

4. When and With Whom Do We Share Your Personal Information?

In Short: Google, Apple, Microsoft, Vercel, and our email delivery provider help us run Opinionly. Our websites also send visit information to Meta, and starting with version 1.2 of our iPhone app, the app sends Meta install and usage reports if you allow tracking. Other people using Opinionly see what you post, and anyone you share a link with can see that post. If you turn on employer participation, statistics built from feedback are shown to an administrator there, and some feedback is counted without the writer joining anything. We do not sell your personal information, and Opinionly shows no ads.

Companies that help us run Opinionly

• Google. Opinionly runs on Google's cloud. Google handles sign-in, hosts our servers and database, delivers notifications (if you turn on previews, that includes a short excerpt of the post or comment the notification is about), provides the AI services we use, and provides our analytics, crash reporting, and performance monitoring. Google may also use some analytics information for its own purposes, as section 1 describes.
• Apple. If you sign in with Apple, Apple handles that sign-in. Apple also delivers notifications to iPhones, including that excerpt if you turn on previews.
• Resend. Our email delivery provider. It sends account emails such as sign-in verification and password resets. If you take part in the employer product, it also sends the code we use to verify your work email address. When you fill in a sign-up form on our websites, it delivers that form to us. So it processes your email address and, if you use those features, your work email address and what you entered in the form, such as a company name.
• Microsoft. Hosts our email. When you write to hello@opinionly.io, including to ask about or delete your information, Microsoft receives and stores your message and your email address, along with our replies.
• Vercel. Hosts our websites, opinionly.io and teams.opinionly.io, and handles what you enter in our website sign-up forms. It receives every visitor's network address and browser details and the pages they view, and it counts visits and measures page speed without using cookies.

We have a data-processing agreement with Google covering the information we send it. These are the companies that run our technology for us. Meta, described next, is different: it receives information for our advertising rather than to run Opinionly.

We do not sell your personal information, and Opinionly shows no ads.

Meta and our advertising

We advertise Opinionly on Facebook and Instagram. Meta, the company behind them, receives information from us so that those ads can be measured, and Meta may also use that information for its own advertising.

Our websites, opinionly.io and teams.opinionly.io, send Meta a record of the pages you visit, including our legal pages, and of some of the buttons and forms you use, such as the button to download the iPhone app and the Android notify-me and pilot sign-up forms. Meta uses this to measure our ads and may also use it for its own advertising, under Meta's Privacy Policy. Section 5 and our Cookie Policy describe the cookies involved.

Starting with version 1.2 of our iPhone app, your iPhone asks you once whether to allow Opinionly to track you. If you allow it, the app starts Meta's software, which tells Meta when the app is installed, when it is opened, and how long it stays open. Those reports carry a random number that identifies this copy of the app, your phone's advertising identifier, and details such as the device model, iOS version, app version, language, time zone, carrier, and screen size. We use this to see which of our ads bring people to Opinionly. Meta also uses it to measure our ads and may use it for its own advertising, under Meta's own privacy policy. If you do not allow tracking, the app does not start Meta's software and sends Meta nothing about your use of it. The app checks your answer each time it starts or comes back to the screen, and you can change it at any time in your iPhone's Settings, under Privacy & Security, then Tracking. If you turn tracking off after allowing it, the change takes full effect the next time the app starts. We do not give Meta your name, your email address, your Opinionly account, or anything you write, so nothing at Meta is tied to your Opinionly account. Separately, Apple's own ad-measurement system can tell Meta that one of our ads on Facebook or Instagram led to an install, whether or not you allow tracking. That report names the ad campaign, not you or your phone.

Anonymous posts and feedback

When you post or send feedback anonymously, other people using Opinionly are not shown your name and cannot find out who wrote it. Your content appears under a stand-in name instead.

What you write can still give you away, for example if you mention something only you would know, or if only a few people could have written it. If you tag someone in a comment or feedback message you send anonymously, that can make it easier to guess who you are.

We still keep a record of who wrote it. We need that record to run the service, to show you your own activity, to act on reports, to apply blocks, to build the counts, reflections, and employer statistics described in this policy, to remove your content if you delete your account, and to respond to lawful requests from authorities. Section 10 explains who at Opinionly can see that record.

What happens to feedback after it is written

This is the part people are least likely to expect, so we want to be plain about it.

Feedback you send to another person, and comments you leave on their posts, can become records filed under that person when our AI reads them as being about that person, including when someone tags them. Feedback sent to you, and comments on your posts, can become records filed under you in the same way. Each of those records carries a theme and a tone that our AI assigned to it, described in section 6.

The running totals you see in the app are plain counts, with no AI labels involved: approved feedback messages you gave and received, and approved comments other people left directly on your posts. Your monthly reflection is different. Its theme and tone numbers come from the records our AI assigned, and so do the employer statistics and summaries described below and in section 6. The reflection, the employer statistics, and the summaries are all running today.

The employer product

Opinionly offers a separate product to employers. Feedback about you is only counted toward it if you turn on participation. What you write is counted only if you turn participation on, except when you answer a link tied to a company, as explained below.

If you connect your account to an employer and turn on participation, some of what you write and some of what is written about you is counted into statistics an administrator at that employer can read. That includes feedback and comments between you and other people there who have also turned participation on, and what you write about the workplace itself, whether in a post, a comment, or a feedback message, anywhere in the app and not only in posts addressed to your company. Posts set to Only me are never counted. If you have turned on participation at more than one employer, what you write can count toward each of them. Those statistics include totals, participation counts, the mix of appreciation and suggestions, trends over time, and breakdowns by theme and by team. An administrator can also read prose written by AI, summarizing patterns in what people described that month, across the whole company and within each team, with suggestions for the employer. Section 6 explains what that AI reads to write it.

What protects you:

• Participation is off by default. In the app, only you can turn it on. Nobody at your employer can turn it on for you, and Opinionly does not turn it on for anyone. Once participation is on, you can tie your feedback link to your employer or team, and Opinionly can do that for you as well. Either way, the page that link opens then shows your employer's name next to your username, and your team's name if the link is tied to a team, and answers sent through it are counted as described below.
• In the employer dashboard, an administrator sees statistics and AI-written prose. They are never shown who wrote an individual piece of feedback, and the dashboard never shows the text of it. The prose is instructed never to name anyone and never to quote anyone, and that instruction is not a guarantee.
• Statistics appear only once enough people in a group have turned participation on, and an administrator can see how many have. An administrator can also see roughly how many people are on each team, whether or not those people have turned participation on. In small groups, or when only a few people wrote about something, someone determined may be able to guess who said it.

Addressing a post to your company is a separate choice from participation. People at your company, or on your team if you picked one, can read that post and the replies to it, and an administrator may be one of them. If you share that post by link, anyone with the link can read it and see your company's name, and your team's name if you picked one. If the post is not anonymous, the link also shows your username. People with the link can reply, and people at your company can see those replies in the app. If you have turned on participation, what you write there can also be counted into that company's statistics and summaries.

Some writing is counted without the writer turning anything on. If someone answers a link tied to a company, whether or not they have an Opinionly account, what they write is labeled by our AI and counted into that company's statistics. Feedback about a person sent through their link is counted because that person has turned on participation, not because the writer has. The writer's own participation setting, if they have one, makes no difference here. What people say about the workplace when they answer a link to a post addressed to a company can be counted even if nobody involved in that exchange has turned participation on.

Three limits are worth stating plainly.

Turning participation off stops new feedback from you, or about you, being counted, but does not remove what was already counted. There are two exceptions. If you address a post to your company and share a link to it, the answers people send through that link are counted in that company's statistics about the workplace whether or not your participation is on. And if you are signed in and answer someone else's link that is tied to a company, what you write is counted based on that person's participation, even if your own participation is off.

Turning participation off does not stop your writing being read by our AI, because that reading happens for everyone.

Turning participation on is not only about the future. Feedback you wrote, or that others wrote about you, shortly before you turned it on can be counted, and so can what you said about the workplace in that time, in posts, comments, and feedback messages. When an employer is first set up on Opinionly, that first count can reach further back.

Other situations where your information is shared

• Other users. Other people using Opinionly can see your profile, your posts and comments, and can interact with you.

• People you share a link with. If you share one of your posts by link, anyone who opens the link can read the post and see your username, or the stand-in name if you posted anonymously, even without an Opinionly account. If the post is addressed to your company, the page also shows your company's name, and your team's name if you addressed it to a team. If you share your feedback link, anyone who opens it can see your username, and your employer's name and your team's name if the link is tied to them.

• Reports you make. If you report someone, we can see who filed the report and what you wrote. We do not tell the person you reported who reported them. If we are required to disclose it by law, we will.

• Lawful requests. If we receive a valid legal request from authorities, we may disclose information we hold, including the record of who wrote anonymous content.

• Business transfers. If Opinionly is ever sold, merged, or acquired, your information may transfer to the new owner. The same applies while we are negotiating a deal like that.

5. Do We Use Cookies and Other Tracking Technologies?

In Short: The app sets no cookies of its own. Our websites use Google Analytics and the Meta Pixel. The Pixel sets Meta's cookies and tells Meta which of our pages you visit, and Meta may use that for its own advertising. Starting with version 1.2 of our iPhone app, if you allow tracking when your iPhone asks, the app also tells Meta when it is installed and opened. Opinionly shows no ads.

In the app

The Opinionly app does not set cookies of its own. If you sign in with Google, Google's own sign-in page opens in a secure sheet inside the app. That page is Google's, and it uses Google's cookies under Google's policies. If you sign in with Apple, Apple's own sign-in screen handles it, under Apple's privacy policy.

We do use Google's analytics, crash-reporting, and performance tools inside the app, to understand how the app is used and to find and fix problems. Opinionly shows no ads.

Starting with version 1.2 of our iPhone app, the app also includes software from Meta, the company behind Facebook and Instagram. It runs only while you allow tracking in your iPhone's settings. When it runs, it tells Meta when the app is installed and opened and how long it was used, along with details about your phone such as its model and system version, your advertising identifier, and a random ID for your copy of the app. Like any internet service, Meta also sees your phone's network address when the app connects to it. Section 4 describes what Meta receives. We do not give Meta your Opinionly account, name, or email, or anything you write, so nothing at Meta is tied to your Opinionly account. Meta uses this to measure our ads on Facebook and Instagram, and Meta may also use it for its own advertising under its own terms. If you do not allow tracking, the app does not start Meta's software and sends Meta nothing about your use of it. Apple can still tell Meta that one of our ads on Facebook or Instagram led to an install; Apple's report names the ad campaign, not you or your phone. Your answer does not change anything you see in the app, and you can change it at any time in your iPhone's Settings, under Privacy & Security, then Tracking.

On our websites

Two tools from other companies set cookies on our websites, opinionly.io and teams.opinionly.io. Both run on every page, including our legal pages.

• Google Analytics counts visits and shows us how the site is used. It sets two cookies, _ga and _ga_0LTL8FYB47, and keeps a record of each visit under a random ID, not your name: the pages you view, how far you scroll, links you click to leave our site, when you start or submit a form, how you arrived, your browser and device type, and your approximate location, such as your city, state, or country. We have not turned on Google signals, Google's feature for advertising across devices.
• The Meta Pixel, from Meta, the company behind Facebook and Instagram, tells Meta which of our pages you visit and the buttons you tap, such as the button to download the iPhone app, and when you submit the Android notify-me or pilot sign-up forms. It does not send Meta what you type into those forms. It sets a Meta cookie called _fbp, plus a second one, _fbc, if you arrive from a link on Facebook or Instagram, including one of our ads. Meta uses this to measure our ads on Facebook and Instagram, and Meta may also use it for its own advertising under its own terms, including choosing which ads you see there.

Our website host also counts page visits and measures page speed without using cookies. Our Cookie Policy lists these cookies, how long each lasts, and where to find Google's and Meta's own privacy policies.

We also operate dashboard.opinionly.io for the employer product, and pages for shared links. The dashboard sets no analytics cookies; when you sign in there, your browser stores your sign-in session so you stay signed in. Section 9 explains what we keep if you sign in there without an Opinionly account. The shared-link pages set no cookies at all.

If you want to stop Google Analytics from measuring your visits to websites, you can install the Google Analytics Opt-out Browser Add-on. It works in desktop browsers, and it does not affect the Opinionly app. You can also block or delete cookies in your browser's settings. Our websites work without cookies. Blocking them stops the cookies above from recognizing you as a returning visitor, but it does not stop Google Analytics or Meta from receiving your page views. If you have a Facebook or Instagram account, Meta offers its own settings for how it uses information it receives from websites like ours; see Meta's Privacy Policy. For more on how Google handles information, see the Google Privacy & Terms page.

6. Do We Offer Artificial Intelligence-Based Products?

In Short: Yes. AI reads what you write, in five different ways. You cannot turn it off. Google provides the AI services, and one of the models is our own.

We use AI on what you write. It is not an optional feature you choose to try, and you cannot turn it off. Below is every use, what it reads, and whether it is running today.

1. Checking what you write, before it appears

Everything you post, comment, send as feedback, write in a connection request, or send through a shared link goes through an automated check before anyone else sees it. This runs on everything, always.

The check has two stages.

The first stage uses a publicly available model that we trained further ourselves, running on our own systems on Google's cloud. It receives your text exactly as you wrote it, with nothing masked.

The second stage uses Google's AI, and it only sees content the first stage could not resolve on its own. Before this stage, we automatically mask common contact details, such as email addresses, phone numbers, @handles, and web links. The masking can miss some. Everything else, including any names you mention, goes as you wrote it. Any text you submit can reach this stage.

Masking contact details does not make your text anonymous. Please keep that in mind when you write.

Our agreement with Google does not allow Google to use your text to train its AI models.

What is not checked. Your profile bio, your name, your username, the stand-in name shown on your anonymous content, any note you write when you report someone, and any note you add when you block someone.

If the check finds a problem, your text can be blocked, or held until a person at Opinionly reviews it and decides whether it can appear. No one else sees held text until then. Someone at Opinionly may read text that was checked, including text that passed. If you think a check got something wrong, email us at hello@opinionly.io and we will look at it.

2. Offering you a rewrite

If something you write in a post, a comment, or a response to a shared post looks like it may be blocked, we may offer you a reworded version. You can accept it, edit your own text, or do nothing. On a post or comment, you can also keep your original wording. If you do, it is held until a person at Opinionly reviews it, and no one else sees it until then. If you were editing something people could already see, it is hidden from them until then.

On a post or comment, we keep a copy of your original wording, with nothing masked, while you decide. We delete that copy as soon as you accept the suggestion or keep your original. If you edit your text instead, or never answer, the copy stops being usable after an hour. We delete it later, though not always right away. Deleting your account deletes it too. The reworded version the AI produced is kept in the record of the check.

3. Improving our content check

We use the records described above, with common contact details masked (some can slip through), to test and improve our content check. That involves sending those records to Google's AI a second time, for scoring, and adding some of them to the material we train our own model on.

Copies of that material live outside our main database, and account deletion does not reach them. The training files carry no name and no account details. The working files we produce along the way carry a reference number for the original check. While your account exists, that number can lead us back to you. Once you delete your account and our routine backups expire, about a week later, it cannot. The text in all of them is kept as you wrote it apart from the contact details we masked, so anything identifying that you wrote is still in it.

4. Sorting feedback into themes

Our AI reads what people write to and about each other: feedback messages, posts, and the comments on them. Answers people send through shared links can be read too. It labels what each piece is about, with a theme, whether it reads as appreciation or as a suggestion, and who it appears to be about. The person a piece appears to be about can be the writer. If someone is tagged in a piece, that is taken into account. For a piece about a workplace rather than a person, the label also records how serious it reads. For personal feedback, it records how strongly it is worded. It also notes when a piece agrees or disagrees with a point someone else made. When that point was made by the author of the post, or by the person the feedback conversation is with, the note is filed under that person. Other notes are kept without an account attached. Nobody is shown these notes today.

It reads whole conversations at a time, so it sees what everyone in that conversation wrote, not only the person being described. It reads these conversations for everyone, whether or not anyone in them has connected an employer account. That means your comment on someone else's post can be read along with the rest of that conversation. It does not read posts set to Only me. The text it receives is the text as written, with nothing removed.

These labels are what section 4 describes as records filed under a person. The theme and tone breakdowns, the statistics, and the summaries are built from them.

5. Writing summaries

Two kinds of summary are written by AI from those labels and from the text itself.

A personal monthly reflection, written for you, about how people described you that month, from the feedback you received. It can also draw on comments on your posts. No other user and no employer can see yours. It is written to leave out quotes, names, and stand-in names, and that is not a guarantee. In a quiet month it may hold numbers and no written summary. It is kept as a record of your themes month by month.

Employer summaries, described in section 4, written for an administrator at an employer about patterns across the whole company and within each team, with suggestions for the employer. To write them, our AI reads whole conversations, so it also sees words that were not counted, for example a reply from someone who has not turned on participation. The AI is instructed not to describe words that were not counted, and that instruction is not a guarantee.

Status. Use 1 runs today on everything it lists. Use 2 runs today on posts, comments, and replies sent through a shared post link. Where the check would offer a rewrite on anything else, the text is held for review or sent back to you instead. Uses 4 and 5 run automatically once a month, and we can also run them by hand. The monthly reflection covers the month that just ended. Use 3 runs from time to time, when we work on the checking model.

7. How Do We Handle Sign-In With Google or Apple?

In Short: We receive a limited amount of information from them, and we do not post anything to your Google or Apple account.

You can create an account and sign in using your Google account or your Apple ID, instead of setting up a password with us.

What we receive is limited. From both: confirmation of who you are and your email address. From Google: your name, and the web address of your profile picture. We show that picture on your own account screen and in the connections lists of the people you are connected to. Each phone that shows it loads it from Google. Other signed-in people can also receive that web address along with your profile, for example when they look you up, even where the app does not show it. From Apple: your first and last name, if you choose to share it at sign-up. If you use Apple's Hide My Email, the email address we receive is the forwarding address Apple creates for you, not your real one.

We do not receive your contacts or a friends list, and we do not post anything to your Google or Apple account. We use what we receive only for the purposes described in this policy.

Google and Apple also hold their own information about you, from the account you have with them. What they do with it is governed by their own privacy policies, not this one.

8. Is Your Information Transferred Internationally?

In Short: Our servers and our database are in the United States. The companies that help us run Opinionly may also process some of your information in other countries.

Our servers and our database are in the United States. If you use Opinionly from outside the United States, your information is sent to the United States, and that is where we store it.

The companies named in section 4 operate around the world. Information we send them, or that the app or our websites send them directly, may be processed outside the United States.

Opinionly is intended for people in the United States, though the app can be downloaded in other countries. If you are in the European Economic Area, the United Kingdom, or Switzerland, using Opinionly sends your information to the United States, which may not have data protection laws as comprehensive as the ones where you live. Section 11 describes the additional rights people in those places may have, and you can email us at hello@opinionly.io with any question about this.

9. How Long Do We Keep Your Information?

In Short: We keep your account for as long as it is open. Some things outlive it, and we describe them below rather than list them, so that the description stays true.

We keep your account and the things you make in the app, including your profile, your posts and comments, your likes, your connections, and your feedback messages, for as long as your account is open. When you delete your account, we delete them right away.

If you signed in on our employer dashboard but never made an app account, our sign-in provider keeps a record of that sign-in, with your email address and the details the account you signed in with gave us. Nothing deletes it on its own. Email hello@opinionly.io and we will delete it.

What deletion does not reach

Deleting your account does not reach everything. It is easier to describe the categories honestly than to list items, because a list goes out of date silently. The categories are:

• Records of content checks. The text you submitted and the result, including checks that passed and content that was never published. These carry no account identifier. While your account exists we can trace a record back to the content and therefore to you. After you delete, we cannot. We keep these to review our own decisions, to improve the checking model, and to respond to lawful requests. We have not set an end date for them.

• Material used to train our own checking model, which is derived from those records and lives outside our main database. The training files carry no account details, but the text in them is kept as you wrote it apart from contact details, so anything identifying that you wrote is still in it. The working files kept with them carry the reference number of the original check: while your account exists that number can lead us back to you, and after you delete it cannot.

• Reports. If you filed a report, we remove the link to your account but keep the report and your note. Reports other people filed about you stay in full. Deleting an account does not erase the record of complaints about it.

• Decisions our team made about content, and why we made them.

• Statistics and counted records. Where something written on Opinionly (feedback, a post, or a comment) was counted toward an employer's statistics, the counted record stays so that totals do not change retroactively. That is true whether you wrote it or it was about you. The record keeps the theme it was counted under, when it was written, internal references to the accounts involved, and, for some records, the team the writer was on at the time. We never publish those references, and once an account is gone its reference no longer leads to a person.

• Employer summaries already written. These are short pieces of AI-written prose about what people in a workplace, or one of its teams, described in a given month. Some are based on what very few people wrote, sometimes a single person. Once written, a summary is kept whether or not anyone has read it, and earlier versions are kept when a summary is rewritten. Deleting your account does not change them.

• Analytics, crash reports, and performance data already sent to Google before you deleted, and the copy of that analytics information we keep for our own analysis. Some of those records include the account ID of a profile someone viewed.

• Email delivery logs kept by our email delivery provider, which include your email address, for a limited time that provider sets (about 30 days when we last checked).

• Our server logs, described in section 1, including the error logs that can identify a piece of content.

• The audit record of changes to our feature settings, described in section 1, which can keep your account identifier.

• Emails you send us and sign-ups made on our website, including an email asking us to delete your account. They arrive in our email inbox, and deleting your account does not delete them.

• Anything held in our routine backups, which are kept for about a week.

• Records our iPhone app already sent to Meta. Starting with version 1.2 of our iPhone app, if you allowed tracking when your iPhone asked, the app tells Meta when it is installed and opened, as described in section 4. Those records stay with Meta after you delete your account. The app does not send Meta your Opinionly account ID, your name, your email address, or anything you write, so nothing at Meta is tied to your Opinionly account, and deleting your account does not reach Meta. Meta keeps those records under a random ID for your copy of the app, which stays on your phone until you delete the app, and under your iPhone's advertising identifier, which belongs to the phone rather than to the app. If you keep the app after deleting your account, later records use the same IDs. Meta may connect what it receives with information it already holds about you. To ask Meta about those records, see Meta's Privacy Policy.

Some things people expect to survive do not. Your personal monthly reflections are deleted with your account. So is the record of which version of our policies you accepted and when.

If you responded without an account

We keep what you wrote, the stand-in name shown with it, the value described in section 1, and the code we showed you after you responded, for as long as the post or conversation you answered exists. They are deleted when that post or conversation is deleted, including when the person who shared it deletes their account. If you later create an account and use that code to claim what you wrote, it becomes part of your account and is deleted with it.

Two things can stay after that: the record of the automatic check on what you wrote, described above under "What deletion does not reach," and, if what you wrote was counted toward an employer's statistics, the counted record.

To ask us to delete something you wrote, email hello@opinionly.io with the link you used, roughly when you responded, and the code we showed you if you still have it.

What deletion takes from other people, and what it leaves with them

A few things are worth knowing.

Deleting your account deletes your private feedback conversations, including the messages the other person wrote in them, so they lose that conversation too. The themes we had assigned to those messages go as well, and the counts we show that person go down.

Deleting your account also deletes your posts. Every comment other people wrote on them, every reply under those comments, and every response someone left on them through a link without an account go with the post.

It also deletes the comments you wrote on other people's posts, together with any replies other people wrote under them. The themes we had assigned to your comments go as well, and where a comment was left directly on someone's post, the counts we show that person go down.

Some things do stay with other people. Where something you wrote (feedback, a post, or a comment) was already counted toward an employer's statistics, that counted record stays, so totals do not change retroactively. Any summary or monthly reflection already written for someone stays written. And if someone tagged you in a comment on another person's post, or in a feedback message between two other people, the name they typed stays in their text after you delete your account. It is your username or the stand-in name you were using there. Everyone who can see that comment or message still sees it, and it no longer points to your account.

Deleting a single post or comment

You can delete one post or comment without deleting your account. We delete it right away, along with what is attached to it. For a post, that is the comments and replies other people wrote under it, responses from people without an account, likes, shared links to it, the labels we had given it, and any tags people added in those comments. For a comment, it is the replies under it, their likes, and any tags in them. This means other people lose what they wrote there too.

Some things stay: the record of the automated check, any reports about it, any decisions our team made about it, and any summary or reflection already written from it. If it was already counted toward an employer's statistics, that counted record stays too, so totals do not change. Because your account is still open, that counted record still matches your account, though it is never shown to the employer.

10. How Do We Keep Your Information Safe?

In Short: We use reasonable security measures, but no system can be guaranteed secure.

We use appropriate and reasonable security measures, both technical and organizational, designed to protect the personal information we hold. But no way of sending information over the internet, and no way of storing it, can be guaranteed to be 100% secure. So we cannot promise that someone will never defeat our security and improperly access, steal, or change your information.

Who at Opinionly can see your information. Access is limited to the people who run Opinionly. They can see what you write, including anonymous content, who wrote it, and content-check records. We look at it when there is a reason to, for example to look into a report, to check a decision about content, or to improve our content check.

Other people using Opinionly cannot find out who wrote content you post anonymously. We can. We cannot offer you anonymity from Opinionly itself.

11. What Are Your Privacy Rights?

In Short: Wherever you live, you can ask what we hold, ask for a copy, ask us to correct it, or ask us to delete it. Some places give you more rights on top of that.

Rights we offer everyone. Whoever you are and wherever you live, you can:

• ask what personal information we hold about you, and ask for a copy of it
• ask us to correct information that is wrong
• ask us to delete your personal information

To make any of these requests, email us at hello@opinionly.io. We handle them by hand. You can also delete your account yourself in the app once you have confirmed your email address.

If you answered a shared link without an Opinionly account, we hold no email address for you. To make a request, email us with the code we showed you after you sent your answer, even if it has expired. If you no longer have the code, tell us which link you used and roughly what and when you wrote. We may not be able to confirm the answer is yours, and if we cannot, we may decline to delete it.

Additional rights depending on where you live. In some regions, including the European Economic Area, the United Kingdom, Switzerland, and Canada, data protection law gives you further rights. These may include the right to:

• ask us to limit how we use your personal information
• ask us to send a copy of your personal information to another company
• object to how we use your personal information, in certain circumstances
• not have decisions about you made only by automated means

If you live in the United States, section 13 describes the rights US state laws give you.

We will consider and act on any request in line with the law that applies to you. These rights are not absolute and in some cases we may decline a request where the law permits it. If we do, we will tell you why.

Automated checks and labels. Several kinds of automated decision affect you. Text you post, comment, send as feedback, write in a connection request, or send through a shared link is checked automatically. Depending on the result, it can be blocked, held back until someone at Opinionly reviews it, or offered back to you with a suggested rewording. Feedback, posts, and comments are labeled automatically with what they are about, including a theme, a tone, and who they seem to be about. Monthly reflections for the person being described, and employer statistics and summaries where an employer is involved, are built from those labels. And if enough different people report the same piece of your content, it is collapsed or hidden automatically until we review it. If you think any of these got something wrong, email us at hello@opinionly.io and a person will look at it.

If you are located in the European Economic Area or the United Kingdom and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State Data Protection Authority or UK Data Protection Authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

There are three things you turn on yourself: notifications, Open Door for Feedback, and participation in the employer product. Starting with version 1.2 of our iPhone app, there is a fourth: permission for Opinionly to track you, which your iPhone asks you for.

Notifications. You can turn all notifications off at any time in your phone's settings. In the app, under Settings, then Notifications, you can turn off notifications about posts, comments, and reactions, and turn off previews. The notification about your monthly reflection has no switch of its own in the app; your phone's settings turn it off along with the rest.

Open Door for Feedback. This lets other people send you private feedback. It is off until you turn it on in the app, under Settings, then Privacy, and you can turn it off there at any time.

Employer participation. You can turn it off in the app. Turning it off stops new feedback being counted. It does not remove what was already counted, and turning it back on can count recent feedback, including some written while it was off.

Tracking, on iPhone. Starting with version 1.2 of our iPhone app, your iPhone asks you once whether Opinionly may track you. If you allow it, the app starts Meta's software, and Meta receives records that the app was installed and opened and how long it was used; section 4 describes what those records contain. If you do not allow it, the app does not start Meta's software and sends Meta nothing about your use of the app. Apple can still tell Meta that one of our ads on Facebook or Instagram led to an install, and that report names the ad campaign, not you or your phone. Your answer changes nothing you see in the app, and Opinionly shows no ads. You can change your answer at any time in your iPhone's Settings, under Privacy & Security, then Tracking. The app checks your answer each time it starts or comes back to the screen.

Account information

You can see your account details in the app, under Settings, then Account. Tap Personal Information there to change your first name, last name, and bio. Your username, your email address, and the profile photo link we receive from Google cannot be changed in the app. If you signed up with a password, you can reset it from the sign-in screen by tapping "Forgot username or password?". To correct anything else, email us at hello@opinionly.io.

You can delete your account in the app, under Settings, then Account, once you have confirmed your email address. Deleting is immediate and permanent. There is no waiting period and no way to undo it or recover your account afterward. Your profile, posts, comments, likes, connections, and feedback messages are erased right away. Section 9 describes what deletion does not reach.

If something goes wrong while your account is being deleted, email us at hello@opinionly.io and we will finish it by hand.

Cookies. You can set your browser to remove or reject cookies. opinionly.io and teams.opinionly.io work without them. If you block all cookies and site data, signing in to the employer dashboard at dashboard.opinionly.io may fail or may not keep you signed in. Rejecting cookies does not stop Google Analytics or Meta's Pixel from receiving your visits to our website. If you have a Facebook or Instagram account, Meta offers its own settings for how it uses information it receives from websites like ours; see Meta's Privacy Policy. For more, see our Cookie Policy.

12. Controls for Do-Not-Track Features

Some web browsers can send a Do-Not-Track or Global Privacy Control signal, asking websites not to track you or not to sell or share your information. We do not respond to those signals, and our websites send information to Google and Meta either way. California law requires us to tell you that.

To be clear about what this means for you: our websites at opinionly.io and teams.opinionly.io load Google Analytics and Meta's Pixel on every page, including our legal pages, and those signals do not change that. Meta may use what it collects for its own advertising, under its own terms. Section 5 describes these tools, and our Cookie Policy lists their cookies and the choices Google and Meta offer.

Starting with version 1.2 of our iPhone app, there is one choice of this kind that our app does respond to. Your iPhone asks whether Opinionly may track you. If you allow it, the app runs Meta's software, which tells Meta when the app is installed and opened. Meta uses this to measure our ads and may use it for its own advertising; section 4 describes what Meta receives. If you do not allow it, the app does not start Meta's software and sends Meta nothing about your use of the app. The app checks your answer each time it starts or comes back to the screen, and you can change it at any time in your iPhone's Settings, under Privacy & Security, then Tracking. Separately, and whatever you choose, Apple can report to Meta that one of our ads on Facebook or Instagram led to an install. That report does not name you or your device. Opinionly shows no ads.

13. Do United States Residents Have Specific Privacy Rights?

In Short: Depending on the US state you live in, you may have specific rights over your personal information under that state's privacy law. These rights may be limited in some circumstances by applicable law.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Your name, username, email address, account ID, the stand-in name shown on your anonymous content, a random ID for your copy of the app that we use to decide which features to switch on, and the random IDs and cookies that our analytics tools, and the ad-measurement tools described below, use to tell one browser or app install from another (see below and sections 4 and 5)	YES
B. Personal information as defined in the California Customer Records statute	Name and contact information	YES
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Information about how you use our app and our websites, such as which features you use, which pages you visit, and which buttons you tap. Some of this is sent to Meta to measure our ads, as described below.	YES
G. Geolocation data	Precise location from your device. We never ask for it.	NO
H. Audio, electronic, sensory, or similar information	Your profile photo, if you sign in with Google. We store only a link to it and show it with your name, on your own account screen and in connection lists. There is no photo upload, and we collect no audio, video, or call recordings.	YES
I. Professional or employment-related information	The organization you are linked to through the employer product (usually an employer), your team, whether you are an administrator or a member of its workspace, and the organization email address you give us to confirm that you belong there. We hold these if you take part in the employer product, if we have added your account to an organization's workspace as an invitation (even if you have not answered, or you declined), or if you took part in the past.	YES
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Labels our AI gives to what people write, including what is written about you: what it is about, whether it reads as appreciation or as a suggestion, who it seems to be about, how serious a workplace concern (such as workload, pay, or well-being) seems, and whether a reply agrees or disagrees with something you wrote. Also the counts built from those labels, and the summaries our AI writes from the labels and from the original text.	YES
L. Sensitive personal Information	The contents of private feedback conversations between people; your password, if you sign up with an email and password, which our sign-in provider (Google) stores for us and we never see; and sensitive things people choose to write, such as stress or burnout at work, or harassment, which our AI can label. We do not ask for government identifiers, precise location, racial or ethnic origin, or religious beliefs.	YES

We do not ask for sensitive information. People sometimes write about sensitive things anyway, such as stress or burnout at work, or harassment, and our AI can label that when it reads posts, comments, and feedback. Please do not include sensitive details about yourself or anyone else.

Google, which provides our analytics, works out an approximate location, such as your country or city, from your network address. We never ask for your device's location.

Two of these categories also reach Meta, the company behind Facebook and Instagram, which uses them to measure our ads and may use them for its own advertising. Our websites, opinionly.io and teams.opinionly.io, send Meta some category F information (which of our pages you visit, which buttons you tap, and when you submit a form) and some category A information (a random ID Meta gives your browser), as section 5 describes. Starting with version 1.2 of our iPhone app, if you allow tracking when your iPhone asks, the app sends Meta some category A information (a random ID created for the app on your phone, and your iPhone's advertising identifier) and some category F information (when the app is installed and opened, and how long it was used), along with basic device details such as phone model, iOS version, language, and time zone. We do not send Meta your name, your email address, or anything that identifies your Opinionly account, so nothing at Meta is tied to your Opinionly account. In that version, if you do not allow tracking, the app does not start Meta's software and sends Meta nothing. Apple may still tell Meta that one of our ads on Facebook or Instagram led to an install; that report names the ad campaign, not you or your device. You can change your answer in your iPhone's Settings, under Privacy & Security, then Tracking. Section 4 describes this in full.

We may also collect personal information you send us directly when you email us for help at hello@opinionly.io.

Sources of Personal Information

We get personal information from these places:

• From you, when you fill in your profile; write posts, comments, feedback messages, and connection requests; like, connect, mute, or block; tag someone; file a report; create a share link; give us an organization email address to join the employer product; respond to something shared with you by link, even without an account; fill in a form on our websites; or email us.
• From your device, which automatically sends information about how the app is used, along with crash reports.
• From your browser, when you visit opinionly.io or teams.opinionly.io, which send visit information to Google and to Meta as section 5 describes, and when you answer a shared link without an account, where we work out a scrambled value from your network address, as described in section 1.
• From the account you sign in with, if you sign in with Google or Apple.
• From other people, which is what other people write about you or in reply to you, including if someone tags you, reports other users file about you, and the labels our AI gives to what they wrote.
• From us, when we add your account to an organization's workspace as an invitation. Feedback written about you is not counted for that organization unless you turn participation on.

How We Use and Share Personal Information

Section 2 describes how we use your personal information.

Will your information be shared with anyone else?

These are the companies that run our technology for us, and we disclose personal information to them:

• Google. Opinionly runs on Google's cloud. Google handles sign-in, hosts our servers and database, delivers notifications (including preview text, if you turn previews on), provides the AI services we use, and provides our analytics, crash reporting, and performance monitoring. We have a data-processing agreement with Google covering the information we send it.
• Apple. If you sign in with Apple, Apple handles that sign-in. Apple also delivers notifications to iPhones, including preview text if you turn previews on.
• Resend. Our email delivery provider. It processes your email address to send account emails, your work email address if you verify one for the employer product, and what you enter in the sign-up forms on our websites, which reach us as email.
• Microsoft. Hosts our email. It holds any email you send us, such as a request to see or delete your information, and our replies.
• Vercel. Hosts our websites at opinionly.io and teams.opinionly.io, and the sign-up forms on them. It receives every visitor's network address and browser details and the pages they view, and it counts visits and measures page speed without using cookies.

If you take part in the employer product, statistics and AI-written summaries built from feedback are shown to an administrator at your employer, and a summary can be written from what only a few people wrote. Some writing is counted into a company's statistics without the writer's participation: answers to a feedback link tied to a company, with or without an account, and answers through a link to a company post. Turning participation off does not remove what was already counted or any summary already written. Section 4 describes this in full.

We also make personal information available to Meta, the company behind Facebook and Instagram. Meta is different from the companies above: it does not act only for us, and it can use what it receives for its own purposes. Our websites at opinionly.io and teams.opinionly.io have sent Meta information since July 2026: the pages you visit, when you tap the button to download the iPhone app, and when you submit the Android notify-me or pilot sign-up forms, along with an ID for your browser. Starting with version 1.2 of our iPhone app, if you allow tracking when your iPhone asks, the app also tells Meta when it is installed and opened and how long it was used, along with a random ID for that install, your device model, iOS version, language, time zone, carrier, screen size, app version, and your device's advertising identifier. Meta uses this to measure our ads and may use it for its own advertising. Some state privacy laws treat this as sharing personal information for targeted advertising. We do not give Meta your Opinionly account, name, or email, or anything you write, so nothing at Meta is tied to your Opinionly account. Section 4 describes this in full, and the paragraph on the right to opt out below explains your choices.

We do not sell your personal information, and Opinionly shows no ads. We have not sold personal information in the past twelve (12) months.

Your Rights

You have rights under certain US state data protection laws. These rights are not absolute, and in some cases we may decline your request as permitted by law. They include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California's privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

On the right to opt out: we do not sell your personal information, and Opinionly shows no ads. What we send Meta is described above, and some state privacy laws treat that as sharing personal information for targeted advertising. These are your choices. Starting with version 1.2 of our iPhone app, your iPhone asks you once whether to allow tracking, and you can change your answer at any time in Settings, then Privacy & Security, then Tracking. If you do not allow it, the app does not start Meta's software and sends Meta nothing. If you allowed it and later turn it off, that takes full effect the next time the app starts. Apple may still report to Meta that one of our ads on Facebook or Instagram led to an install; that report names the ad campaign, not you or your device. Anything sent to Meta while tracking was allowed stays with Meta. Our websites have no setting of their own for Meta's tools, and blocking cookies in your browser does not stop Meta receiving your page views. Meta offers its own choices for how it uses information it receives from businesses like us; see Meta's Privacy Policy. You can also email us at hello@opinionly.io.

We do build a picture of how people describe you. Our AI labels what people write with a theme, a tone, how serious it reads, and who it seems to be about, including when someone tags you, and it records whether replies agree or disagree with things you wrote. Counts are built from those labels, and written summaries from the labels and the original text. Nothing shows the agree-or-disagree records to anyone today. The themes, counts, and summaries exist to show you your own feedback and, in the cases section 4 describes, to produce statistics for an employer.

The opt-out right above covers profiling used to make decisions that have legal or similarly significant effects on you. We do not use it that way. Nothing we work out from your feedback decides anything about you: it is shown to you, and in aggregate to an employer, in the cases section 4 describes. Turning participation off stops new feedback from being counted for that employer, but what was already counted, and any employer summary already written, stays. Answers people send through a link to a company post you shared keep counting, and turning participation back on can count recent feedback from before you turned it on.

When you delete your account. Deletion is immediate and permanent. Section 9 describes what deletion reaches and what it does not.

How to Exercise Your Rights

To ask about the information we hold, request a copy, or ask us to correct or delete something, email us at hello@opinionly.io. We handle these requests by hand. You can also delete your account yourself in the app at any time once you have confirmed your email.

Request Verification

When you email us a request, we need to check that you are who you say you are. We do that by matching the details in your request against what we already hold, usually the email address on your account. If we cannot tell that it is you, we may ask you for more information. We only use what you send us to check your identity and to handle your request. If you have an account, we reply only to the email address on your account. If you signed up with Apple's Hide My Email, that is the address Apple made for you, and our reply reaches you through it. If you responded through a link without an account, we have no name or email address for you. After you sent your response, we showed you a short code. Please include it in your request. Without the code, we may not be able to act on your request.

Under certain US state data protection laws you can designate an authorized agent to make a request for you. If someone makes a request on your behalf, we will ask for written permission signed by you, and we may ask for more information to confirm your identity. We may deny a request from an agent who does not provide it.

Appeals

Under certain US state data protection laws, if we decline to act on your request, you can appeal by emailing us at hello@opinionly.io. We will write back to tell you what we decided and why. If we deny your appeal, you can complain to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, lets California residents ask us once a year, free of charge, what personal information we gave to other companies for their own direct marketing, and who those companies were.

We do not share your personal information with anyone else for their direct marketing, so there is nothing to report. If you are a California resident and would like to make a Shine The Light request anyway, email us at hello@opinionly.io.

14. Do We Make Updates to This Policy?

In Short: Yes. The date at the top shows when it last changed. If you have an account, the app asks you to accept each new version.

We may update this Privacy Policy from time to time. The date at the top shows when it last changed. You can always read the current version at opinionly.io/privacy and in the app, under Settings. When we publish a new version, the app shows it to you if you have an account and asks you to accept it before you continue using Opinionly. If you use Opinionly without an account, for example when you answer a link someone shared with you, the date at the top of this page is how you can tell it has changed. We do not revise this policy for small corrections such as fixing a typo.

15. How Can You Contact Us About This Policy?

If you have questions or comments about this policy, email us and a person will read it:

Opinionly LLC, Michigan, United States, hello@opinionly.io

16. How Can You Review, Update, or Delete the Data We Collect From You?

Section 11 sets out your rights and how to use them, and section 9 explains what deletion reaches. To make any request, email hello@opinionly.io. Once your email address is confirmed, you can delete your account yourself at any time in the app, under Settings, then Account. If you cannot reach that screen, email us and we will delete it for you by hand.

17. Do We Collect Information From Minors?

In Short: Opinionly is not for people under 16.

Opinionly is not intended for people under 16. The App Store lists Opinionly as 16+.

We do not knowingly collect information from anyone under 16. We do not ask for your date of birth, so we do not check your age in the app.

If you believe someone under 16 is using Opinionly, email us at hello@opinionly.io and we will remove the account.