Privacy Policy
Effective Date: 10 Jul 2026
OLLYEO PRIVACY POLICY
Effective Date: 10 Jul 2026 Last Updated: 10 Jul 2026
This Privacy Policy explains how Ollyeo, Inc. (“Ollyeo,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information about you when you use our mobile application(s), websites, and related services (collectively, the “Service”).
This Privacy Policy is part of our Terms of Service, and it also works alongside any additional notices we provide at the time we collect data (for example, when you RSVP to an event or share an event publicly).
Important: The Service is intended for individuals 18+ only.
1) AT A GLANCE
We do not sell personal information.
We do not currently use or share personal information for targeted advertising, and the Service contains no third-party advertising.
We do not collect, use, or sell personal data to train large language models. We may use de-identified data — data that no longer reasonably identifies you — to develop, train, and improve our systems (Section 4.7).
Location features use the town or area you select. The app does not collect continuous or background location (Section 3.2).
Olly is an AI system (Sections 4.2–4.4 and 6 describe the related processing).
The Service is for adults 18 and older.
The sections below are the complete statement of our practices. If our practices change materially, we will update this Policy as described in Section 16.
2) WHO WE ARE AND SCOPE
Controller (U.S.): Ollyeo, Inc. (a Delaware corporation) is the data controller of — and, for purposes of the California Consumer Privacy Act, the “business” responsible for — personal information processed through the Service.
Contact: support+privacy@ollyeo.com
This Privacy Policy applies to information we collect: when you create an account, build a profile, or use features like “Olly” AI; when you message, RSVP, create events, attend events, or otherwise interact on the Service; when you visit our website(s) or communicate with us; when you buy or sell event tickets through the Service; and when we communicate with venues and their staff on behalf of gatherings.
This Privacy Policy does not apply to information you provide directly to third parties or that third parties collect independently (for example: a venue’s own systems, Stripe’s own processing of your payment details, or another user’s off-platform communications).
3) INFORMATION WE COLLECT
We collect information in three ways: (A) information you provide; (B) information collected automatically; and (C) information from third parties.
3.1 Information You Provide
Account & Profile Information - name, email address, unique @handle, profile photo, age, gender (optional), bio - the town or area you choose as your home location - interests and hobbies, availability, and preferences you share
Profile Information Built From Your Conversations With Olly This is central to how Ollyeo works, so we want to be explicit about it. As you talk with Olly, we build a structured profile about you that can include: - your interests (both ones you state and ones Olly reasonably infers from what you say, each marked by its source), with per-interest controls over what is publicly visible - personality characteristics (for example, scores in the “Big Five” personality model), social energy, preferred group size, communication style, planning style, and pace of life - your typical weekly availability - life-circumstance flags you share so gatherings fit your life — for example, having young children, not drinking alcohol, being under 21, having mobility limitations, dietary needs, or having a dog - a short AI-written summary of you used to plan compatible gatherings
Some of this information may be considered sensitive under the laws of certain states (see Section 12). You choose what to tell Olly; the profile is built from what you share.
Event & Community Information - events you create or organize, event descriptions, location/time details - RSVPs, attendance, and invitations - follows, blocks, and people you invite (including email addresses you enter to invite someone)
Communications - your messages in Ollyeo chats (private chats with Olly, group event chats, and game threads) - during a live gathering, private messages you send Olly about how it’s going (see Section 4.3 on “mood signals”) - reports, support requests, and feedback submissions
Feedback & Private Reflections - ratings and notes you leave about events, venues, and organizers, with per-field controls over what (if anything) is public; feedback is private by default - private reactions and notes about people you met, which are visible only to you in the app (your private reflections journal) and are not shown to the person or other users; our staff may access them only as described in Sections 4.4 and 5.6
Payments & Purchases - ticket order records (event, amounts, order status, receipts) and, if you buy for guests, the guest names you enter - if you become an organizer: your Stripe account identifier and account status
Note: Payment card details are collected and processed directly by Stripe under its own privacy policy. Ollyeo does not receive or store your full card number. If you become an organizer, identity and banking information for payouts (including tax information) is collected by Stripe, acting as an independent controller for its own compliance obligations.
3.2 Information We Collect Automatically
Device & Usage Information - device identifiers, OS and app version, device model, language, time zone - IP address - logs of feature usage, crash reports (Firebase Crashlytics), and app performance/analytics data (Firebase Analytics)
Location Information - your chosen town or area, which we convert to approximate coordinates to match you with nearby gatherings - if you grant the App device-location permission (used, where available, to help find events near you or set an event location while you are using the app), the location your device reports at that time - coarse location inferred from your IP address We do not collect continuous, background, or movement location data.
Cookies & Similar Technologies (Website) Our website uses cookies and similar tools for functionality, security (bot protection), and analytics. Analytics cookies are used only with your consent where required. See Section 8.4.
3.3 Information We Collect From Third Parties
- Authentication providers (Firebase Authentication, including any sign-in provider you choose to connect) relating to account sign-in - Stripe relating to payment status, organizer account status, and risk signals - Other users (for example, if another user reports you, invites you, or mentions you) - Venues and their staff, when their responses to our coordination messages or calls concern a gathering you are part of
4) HOW WE USE INFORMATION
We use information to operate, improve, and protect the Service. In plain terms:
4.1 Provide and Maintain the Service
- create and administer accounts and profiles
- enable messaging, RSVPs, event creation, ticketing, and participation
- provide customer support and respond to requests
- send service-related notices (account, safety, technical, administrative)
4.2 Matching and Gathering Planning (Profiling)
This is the heart of the product, and it involves automated processing of your information:
- We convert your profile (interests, personality characteristics, preferences, availability, approximate location) into numerical representations (“embeddings”) and use them to estimate compatibility between members and to match gatherings and venues to groups.
- Automated pipelines use this information — together with things like weather, venue characteristics, and your life-circumstance flags — to generate, rank, and filter gathering proposals (for example, not proposing a bar night to someone who told Olly they don’t drink).
- Olly uses your conversation inputs to provide AI-assisted suggestions, introductions, icebreakers, and coordination.
These recommendations are suggestions only: whether to accept a proposal, attend a gathering, or connect with anyone is always your decision, and AI outputs may be inaccurate or incomplete. We do not use automated processing to make decisions about you with legal or similarly significant effects (such as decisions about credit, housing, employment, insurance, or healthcare).
4.3 During Live Gatherings (“Mood Signals”)
During a gathering, Olly acts as a host. To do that, it processes the group chat and any private messages you send it during the event to estimate, in the moment, how the gathering is going for each participant — for example, noticing that someone has gone quiet and checking in privately. These in-the-moment signals are used to run the gathering experience. They are not health assessments, and they are not shared with other participants or venues or used for advertising.
4.4 Safety, Integrity, and Enforcement
- detect, investigate, and prevent fraud, abuse, scams, spam, and illegal activity
- moderate content: profile text, images, handles, event details, and messages may be screened by automated AI moderation tools
- enforce our Terms of Service and Community Guidelines
- our staff may review conversations and account information for safety investigations, support, quality assurance, and to supervise or take over Olly’s conversations where human judgment is needed
4.5 Communications
- send event-related communications (proposals, RSVP confirmations, updates, reminders) by push notification and email
- send marketing or newsletter messages where permitted and according to your choices (Section 8.2)
4.6 Analytics and Improvement
- understand usage patterns, measure performance, fix bugs, and improve features
- run pilots, tests, and new feature experiments
4.7 AI Providers; No LLM Training on Your Personal Data
Olly is powered by third-party large language models — principally Google Gemini models via Google Cloud Vertex AI (which also processes voice audio for AI phone calls and voice features) and, for limited functions, OpenAI models. Your inputs (such as messages and profile context) are processed by these providers as our service providers to generate Olly’s responses.
We do not use your personal information to train large language models, and we do not permit our AI providers to use your personal information to train their models. We may use de-identified and/or aggregated information (which no longer reasonably identifies you) for analytics and to develop, train, evaluate, and improve our services and AI systems.
4.8 Legal Purposes
- comply with legal obligations, respond to lawful requests, establish and defend legal claims, and keep records we are required to keep (for example, financial records of ticket sales)
5) HOW WE SHARE INFORMATION
We do not sell personal information, we do not currently share it for targeted advertising, and we do not disclose it except as described below.
5.1 With Other Users (Your In-App Visibility)
Certain profile information may be visible to other users depending on your settings and participation. Your public profile shows only the fields flagged public (with some coarsening — for example, age shown as an age range). If you RSVP to a gathering, other attendees and the organizer can see information necessary for participation (for example, your name/handle, profile photo, and limited profile details). Messages you send in a group chat are visible to that group. If you block someone, they see an anonymized placeholder instead of your profile.
5.2 With Event Organizers
If you join an event, the organizer may receive relevant attendee information to run the event (for example, the attendee list and basic profile details). Organizers have their own obligations and practices; information you share with an organizer is also subject to their handling and applicable laws.
5.3 With Venues (Logistics Only — Not Your Identity)
When Olly coordinates a gathering with a venue (through the venue’s Ollyeo inbox or by phone), we share gathering logistics: date, time, party size, the nature of the gathering, and reservation details. We do not share attendee identities or profiles with venues. Venues with an Ollyeo dashboard see attendance counts, not names.
5.4 Public Event Pages (Organizer Choice)
If an organizer chooses to share an event publicly, a public web page is created showing the event details (title, description, photo, time, location, price if ticketed) and the organizer’s display name. Attendee information is not shown on public pages. Public pages exist only while shared, use unguessable links, are not listed in any public directory or sitemap, and can be revoked.
5.5 With Service Providers and Vendors
We share information with vendors that help us run the Service, and only as needed for them to provide services to us:
- Google Cloud / Firebase — hosting, databases, authentication, file storage, push notifications, crash reporting, and app analytics - Google Cloud Vertex AI and OpenAI — AI model processing (Section 4.7) - Stripe — payment processing and organizer accounts - Twilio — telephony for AI phone calls to venues - Mailjet — email delivery
They are authorized to use personal information only as needed to provide services to us.
5.6 For Legal, Safety, and Compliance Reasons
We may access, preserve, and disclose information if we believe it is necessary to: comply with law, legal process, or lawful requests; protect the rights, safety, and security of Ollyeo, users, or others (including reporting suspected child exploitation or credible threats of harm to authorities); or investigate and prevent fraud or abuse.
5.7 In Connection With Corporate Transactions
If we are involved in a merger, acquisition, reorganization, bankruptcy, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy or successor commitments.
5.8 With Your Consent or at Your Direction
We may share information when you explicitly ask us to or otherwise direct us to do so.
5.9 De-Identified and Aggregated Information
We may use and share information that has been de-identified or aggregated so that it does not reasonably identify you (for example, attendance counts shared with a venue). We take reasonable measures to ensure that such information cannot be associated with you, we publicly commit to maintaining and using such information only in de-identified form and not to attempt to re-identify it (except as permitted by law to test whether our de-identification processes satisfy legal requirements), and we contractually require any recipient of such information to comply with these same obligations.
6) AI PHONE CALLS AND VENUE CONTACTS
Olly can telephone venues to check availability and coordinate reservations. If you are a venue contact who has spoken with Olly:
- every call begins with a disclosure that the caller is an AI assistant calling on behalf of Ollyeo, and Olly will confirm it is an AI if you ask;
- calls are not audio-recorded; a text transcript of the conversation is generated and retained for coordination, quality, and record-keeping purposes;
- calls are placed only to U.S./Canadian numbers, during business hours, subject to daily limits.
If you are a venue partner using the Ollyeo partner app, information you provide about your venue (hours, policies, offers) is processed to represent your venue accurately in gathering planning. Voice updates you record in the partner app are processed by our AI providers to transcribe and apply your changes; transcripts are kept in your update thread. Questions or requests: support+privacy@ollyeo.com.
7) DATA RETENTION
We retain personal information for as long as reasonably necessary to provide the Service and maintain your account, and afterward as needed to comply with legal, tax, accounting, and regulatory obligations, prevent fraud, enforce our policies, resolve disputes, and maintain records.
Specific practices worth knowing:
- Chats and profile data are retained while your account is active and are deleted or anonymized through the account-deletion process (Section 10).
- Payment webhook records containing billing metadata are pruned on a rolling ~90-day schedule; ticket order and refund ledgers are retained as financial records.
- Venue coordination threads are archived on rolling schedules after they become inactive.
- Deletion records: when an account is deleted, we keep a minimal audit ledger of the deletion itself, with residual identifying fields scrubbed after a legal-hold window.
When we no longer have a legitimate business need to process your information, we delete it or de-identify it, subject to legal requirements.
8) YOUR CHOICES AND CONTROLS
8.1 Profile and Visibility
You can review and change your profile in the app, including which interests are publicly visible and what appears on your public profile. Some information may be limited for integrity and safety reasons.
8.2 Email Preferences
You can choose between receiving all email, essential-only email, or no email at https://www.ollyeo.com/email-preferences, via the manage/unsubscribe links included in every email we send, or in the app. Our emails support one-click unsubscribe. Certain non-promotional service and security notices may still be sent where permitted by law.
8.3 Push Notifications and Location
You can control push notifications and location permissions in your device settings. Notifications are batched, rate-limited, and silenced during quiet hours by design. If you disable location or don’t set a town, certain features may not work properly.
8.4 Cookies and Analytics (Website)
You can manage cookies via your browser settings and our cookie controls; website analytics run only with consent where required. We do not currently sell or share personal information (as those terms are defined by applicable law), so there is no sale or sharing for an opt-out preference signal to stop; where a universal opt-out preference signal such as Global Privacy Control applies to our processing, we honor it as required by law.
8.5 Blocking and Reporting
You can block other users and report users or content in the app.
9) SECURITY
We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, encryption at rest on our cloud infrastructure, role-restricted administrative access, and audit logging of sensitive administrative actions.
However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential. If you believe your account has been compromised, contact us immediately at support+privacy@ollyeo.com.
10) DELETING YOUR ACCOUNT AND DATA
You may request deletion of your account and personal information at any time by contacting support+privacy@ollyeo.com (and through in-app controls where available). For your protection, we may need to verify your identity before acting on a request.
When your account is deleted, we run a deletion process that disables your login, deletes or anonymizes your profile, interests, embeddings, contacts, and chats, removes your photos and files, and cancels scheduled communications. Our approach is “delete the person, preserve the world”: your personal information is removed, while records that other people rely on (for example, a group event’s existence, or another member’s own private notes) are retained without your identifying information. We retain what the law requires us to keep (for example, ticket purchase ledgers as financial records, and minimal deletion audit records), and deleted handles are permanently retired rather than recycled.
11) YOUR PRIVACY RIGHTS
Depending on where you live, you may have rights regarding your personal information, such as: access (request a copy), correction (fix inaccurate data), deletion (request deletion, subject to exceptions), portability (receive certain data in a usable format), and opt-out of certain processing (such as targeted advertising, sale, or certain profiling — we do not currently sell personal information or use it for targeted advertising).
To exercise your rights, contact us at support+privacy@ollyeo.com. We may need to verify your identity. Applicable law prohibits discrimination against you for exercising these rights; note that certain features cannot function without the data that powers them.
11.1 Connecticut Residents (CTDPA)
If you are a Connecticut resident, you have the rights, subject to the CTDPA’s conditions and exceptions, to: confirm whether we process your personal data and access it; correct inaccuracies; delete your personal data; obtain a copy of personal data you provided to us in a portable and, to the extent technically feasible, readily usable format; and opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of any automated decision that produces a legal or similarly significant effect concerning you. We do not currently sell personal data, process personal data for targeted advertising, or engage in such profiling, so there is currently no such processing to opt out of; if this changes, we will update this Policy and provide the opt-out mechanisms required by law. We process sensitive data (see Section 12) only with your consent, which you provide through the clear affirmative act of choosing to share that information with Olly; you may revoke that consent by editing your profile or deleting your account. We do not collect, use, or sell personal data for the purpose of training large language models (see Section 4.7). To exercise these rights, contact support+privacy@ollyeo.com. If we decline to take action on a request, you may appeal by replying to our decision; if your appeal is denied, you may contact the Connecticut Attorney General.
11.2 California Residents (CCPA/CPRA)
If the CCPA applies to our processing of your information, you have: the right to know what personal information we collect, use, and disclose, and to receive a copy of it (including in a portable and, to the extent technically feasible, readily usable format); the right to correct inaccurate personal information; the right to delete personal information; the right to opt out of the “sale” of personal information or the “sharing” of personal information for cross-context behavioral advertising, as those terms are defined by the CCPA (we do not currently sell or share personal information as so defined); the right to limit the use and disclosure of sensitive personal information (we do not use or disclose sensitive personal information for purposes other than providing the Service you request, as permitted by the CCPA regulations); and the right to non-discrimination for exercising your rights. You may submit requests to support+privacy@ollyeo.com. We do not currently sell or share personal information (as those terms are defined by applicable law), so there is no sale or sharing for an opt-out preference signal to stop; where a universal opt-out preference signal such as Global Privacy Control applies to our processing, we honor it as required by law.
11.3 Other State Privacy Rights
If you are a resident of another state with a comprehensive privacy law, you may have similar rights (access, deletion, correction, portability, opt-out of targeted advertising/sale/profiling), and in many states an appeal right if we deny a request. The mechanisms above apply.
12) SENSITIVE INFORMATION AND WELLBEING DATA
Ollyeo exists to help people build real-world social connection. Some information involved in that can be sensitive:
- Life-circumstance flags (such as not drinking alcohol or having mobility limitations) may relate to, or be treated by law as revealing, health information or disability status.
- In-the-moment signals about how a gathering is going for you (Section 4.3) reflect your engagement and comfort during an event.
- Precise device location, when you grant it, is treated as sensitive under several state laws.
Our commitments for this category: we collect it only when you choose to share it (or, for device location, when you grant permission); we use it only to plan and run gatherings that fit you and to operate the Service; we do not sell it, do not use it for advertising, do not share it with venues or other members, and do not use it to train LLMs. Ollyeo is not a healthcare or mental-health service and does not diagnose, treat, or assess any condition. If you do not want us to process this kind of information, do not share it with Olly, or contact us to remove it.
13) CHILDREN’S PRIVACY
The Service is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. In particular, the Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share the personal information of consumers under 16. If we learn that we have collected personal information from someone under 18, we will take steps to delete it and terminate the account. If you believe a minor is using the Service, contact support+safety@ollyeo.com.
14) INTERNATIONAL USERS
Ollyeo is based in, and the Service is currently offered in, the United States. Information is processed and stored in the U.S. (and in other countries where our service providers operate), which may have different data protection laws than your jurisdiction. Where required, we implement appropriate safeguards for cross-border transfers.
15) THIRD-PARTY LINKS AND PRACTICES
The Service may link to third-party services (for example, venue websites). We are not responsible for the privacy practices of third parties. Information you make available to other users, organizers, or venues may be processed by them as independent controllers; review their policies where relevant.
16) CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last Updated” date. If changes are material, we will provide additional notice (such as in-app notice or email) before they take effect.
17) CONTACT US
Questions, requests, or complaints about privacy:
Email: support+privacy@ollyeo.com
Mail: Ollyeo, Inc., 550 Summer St, Unit 75, Stamford, CT 06901-1412