PRIVACY POLICY

1. OVERVIEW

This Privacy Policy explains what information ODPSI collects through the PR|FIS app and the ODPSI web platform (the "Service"), how we use it, and the choices you have. We collect only what we need to operate the Service.

2. INFORMATION WE COLLECT

Account information: your email address and optional display name.

Investigation data you choose to sync: session details, event logs, EMF readings, EVP audio recordings, and photo/video evidence. This data stays on your device unless you sign in and use cloud backup.

Payment information: subscriptions are processed by Stripe. We do not receive or store your full card number — Stripe handles payment data under its own privacy terms. We retain limited records such as your subscription status and customer identifier.

Limited technical data necessary to operate and secure the Service.

3. MICROPHONE, CAMERA & SENSOR ACCESS

With your permission, the app uses your device microphone for EVP audio recording, your camera for photo/video evidence, and motion/magnetic sensors for EMF detection. These are used only while you are using the relevant feature. Recordings and sensor data remain on your device and are uploaded only if you enable cloud backup (a paid feature).

4. HOW WE USE INFORMATION

We use your information to provide and maintain the Service, sync and back up your investigations when you choose, process subscriptions, secure accounts, respond to support requests, and comply with legal obligations.

5. HOW YOUR DATA IS STORED & PROTECTED

Synced data is stored with our infrastructure provider, Supabase. Access is restricted by row-level security so that you can access only your own data. Data is encrypted in transit. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

6. HOW WE SHARE INFORMATION

We share information only with service providers that help us operate the Service — currently Supabase (hosting and database) and Stripe (payments) — and only as needed to provide it. We may disclose information if required by law. We do not sell your personal information.

7. DATA RETENTION & DELETION

Local sessions are retained on your device (up to a fixed number of recent sessions). Synced data is retained while your account is active. You can delete individual sessions, and you may request deletion of your account and associated data at any time.

8. YOUR RIGHTS

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the address below.

9. CHILDREN'S PRIVACY

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Material changes will be posted with a new effective date.