OlioAtlas

1. Who We Are

This privacy policy applies to the OlioAtlas mobile application (the “App”) and the website at olioatlas.org, both operated by Kayla Mackelprang, doing business as OlioAtlas, located at 175 1/2 W Norwalk Rd, Norwalk, CT 06850, United States.

Contact: hello@olioatlas.org

2. Information We Collect

Account information (required)

• Email address — used to create your account, sign in, and recover access.
• Password — stored only as a secure cryptographic hash. We never see your plaintext password.

Profile information (optional, you control)

• Display name — shown on tastings and catalog entries you publish.
• Handle (username) — if you set one, it is public.
• Bio — if you write one, it is public on your profile.
• Public-tasting attribution preference — you choose whether public tastings show your display name or are posted anonymously.

Subscription information (only if you subscribe to OlioAtlas Plus)

• Your subscription tier (free or plus) and expiration date.
• Payment is processed entirely by Apple. We never see your credit card, billing address, or Apple ID.

Catalog contributions

When you add an oil to the shared catalog:

• Oil name, producer name, country, region, harvest year
• Olive variety selections
• Optional product image (uploaded to our cloud storage)

Default visibility: private. Catalog entries you contribute are visible only to you until promoted to public. We may promote well-formed entries to public visibility after review.

Personal oil entries (your private shelf)

• Shelf status (e.g., tried, want to try, exploring)
• Personal notes
• Optional personal image

Always private. Personal oil entries are visible only to you.

Tasting notes

• Tasting date, scored flavor attributes, defect flags, pairings, free-text notes
• Optional photo

Default visibility: private. You may choose to make an individual tasting public; public tastings go through a moderation review before being published.

Optional country suggestions

If you suggest a new country for the canonical catalog, we store the country name you submitted so we can review and add it.

Standard authentication metadata

Our authentication provider (Supabase Auth) records standard sign-in events (timestamps, IP address used to sign in) for security and account-recovery purposes. This information is not used for marketing or analytics.

3. Information We Do Not Collect

• Location data (no GPS, no IP-based geolocation features)
• Device identifiers, IDFA, or advertising IDs
• Contacts
• Health data, fitness data, voice recordings, calendar entries, or reminders
• Your full photo library — only the specific photo you choose to attach is imported, via Apple’s system PhotosPicker
• Third-party analytics — we do not use Firebase, Google Analytics, Mixpanel, Amplitude, Facebook SDK, or any similar service
• Cross-app or cross-website tracking — the App does not track you across other apps or websites

4. Where Your Data Is Stored

Account information, profile, and content you create through the App are stored on Supabase, our cloud backend, in data centers located in the United States. Supabase acts as our data processor under a written agreement.

For offline access and faster loading, the App may also store copies of your own oil entries and tasting notes locally on your device using Apple’s SwiftData framework. Local data is removed when you delete the App from your device.

5. Subscriptions and Payments

OlioAtlas Plus is sold as an auto-renewable subscription via Apple’s In-App Purchase system. Apple processes all payments and is the merchant of record.

When you purchase a subscription:

• Apple confirms the transaction to the App.
• We update your profile to reflect your subscription tier and expiration date.
• We never see your credit card number, billing address, or Apple ID email.

Subscriptions auto-renew until cancelled. You can manage or cancel a subscription at any time in iPhone Settings → Apple ID → Subscriptions. Refund requests are handled by Apple per their refund policy.

6. Photos

When you attach a photo to an oil or tasting, the App uses Apple’s system PhotosPicker. Only the specific image you select is imported — we do not request or receive access to your full photo library, and we cannot see any photos you do not explicitly choose. Imported images are uploaded to your cloud storage on Supabase and referenced from your record. They are private by default and follow the same visibility rules as the record they are attached to.

7. Public vs. Private Content

Most data in the App is private by default:

• Personal oil entries (your shelf): always private.
• Tasting notes: private by default. You may make individual tastings public; public tastings are subject to moderation review before being visible to other users.
• Catalog contributions: private by default. We may promote standout entries to public visibility after review.
• Profile (display name, handle, bio): public if you set them. You can edit or remove them at any time.

Public content is visible to other authenticated users of the App.

8. Third-Party Services

• Supabase (supabase.com) — cloud database, authentication, and file storage. Acts as our data processor; data is stored in the United States.
• Apple StoreKit — processes In-App Purchases for OlioAtlas Plus. Governed by Apple’s privacy policy.
• Apple App Store — distributes the App. May collect basic crash reports and aggregate usage analytics if you have opted in via iOS Settings → Privacy & Security → Analytics & Improvements. We do not see individually identifiable analytics.

We do not integrate any third-party advertising networks, analytics SDKs, or social-media tracking pixels.

9. Affiliate Links and Sponsored Placements

Some product links in the App — primarily in The OlioAtlas Cellar and on individual oil pages in the Atlas — are affiliate links to third-party retailers (such as Amazon Associates, Bona Furtuna, and Olive Oil Lovers). When you tap one, you are redirected out of the App to that retailer. The retailer may use cookies or URL parameters to attribute the referral to OlioAtlas if you make a purchase. We do not receive any of the personal information you provide to the retailer (name, shipping address, payment details). We may only see, in aggregate through the retailer’s affiliate dashboard, whether referrals resulted in commission-eligible purchases.

Some oils featured in The Cellar or on the Atlas tab are sponsored placements — meaning the producer paid a placement fee to be highlighted. Sponsored content is always labeled “Sponsored” in the App.

Every affiliate link is labeled with an “Affiliate” badge inline. For full FTC disclosure language, see the in-app Affiliate Disclosure (Profile → Settings → Affiliate Disclosure).

10. Children’s Privacy

The App is intended for users 18 years of age or older, in accordance with our Terms of Use. The App is not directed at children under 13. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has created an account, please contact us at hello@olioatlas.org and we will delete the account and any associated data.

11. How to Delete Your Data

You can delete your account and all associated data at any time from within the App: tap your profile, then Delete Account. After confirmation, this permanently and immediately:

• Deletes your authentication account (email, password hash)
• Deletes your profile, personal oil entries, tasting notes, and uploaded photos
• Removes your private catalog contributions; public catalog contributions may remain in the shared catalog with your authorship anonymized

Account deletion cannot be undone. If you have questions or need to delete an account you cannot access, contact hello@olioatlas.org.

12. Your Rights

Depending on where you live, you may have the following rights in relation to your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — correct information that is inaccurate or incomplete (most fields are editable directly in the App).
• Deletion — delete your account and associated data (you can do this in-app; see Section 11).
• Portability — request a machine-readable copy of your data.
• Objection — object to certain processing.
• Withdraw consent — stop using the App; combined with account deletion, this removes your data.

To exercise rights that cannot be exercised in-app, contact hello@olioatlas.org. We respond within 30 days.

13. California Residents (CCPA / CPRA)

We do not sell or share your personal information for cross-context behavioral advertising. We have not done so in the preceding 12 months and do not intend to.

California residents have the right to know what personal information we collect (see Section 2), request access, request deletion (see Section 11), request correction, and not be discriminated against for exercising these rights. To exercise these rights, contact hello@olioatlas.org.

14. European Users (GDPR)

If you are in the EU, EEA, or United Kingdom, our legal bases for processing your personal information are:

• Performance of a contract — account creation, providing core App features, processing your subscription.
• Consent — optional photos, optional public tasting publication, optional profile fields.
• Legitimate interest — product improvement, security, fraud prevention.

You have the right to lodge a complaint with your local data protection authority. Our data controller of record is Kayla Mackelprang at the address in Section 1.

15. International Data Transfers

Your data is stored on servers located in the United States. By creating an account and using the App, you consent to the transfer of your information to the United States, which may have data-protection laws that differ from those in your jurisdiction.

16. Data Security

We use industry-standard technical and organizational safeguards:

• TLS encryption for all network traffic between the App and our backend.
• Encrypted password storage (cryptographic hashing via Supabase Auth; we never store plaintext passwords).
• Row-level security on the database, so users can only access their own private data plus public content.

No system is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable law.

17. Changes to This Policy

We may update this policy as the App evolves. The current version’s effective date is shown at the top of this page. Material changes will be communicated via App Store release notes and, where appropriate, an in-app notice. Continued use of the App after the effective date of an updated policy constitutes acceptance of that policy.

18. Contact

Questions or concerns about this policy can be sent to:

Email: hello@olioatlas.org
Mail: Kayla Mackelprang, 175 1/2 W Norwalk Rd, Norwalk, CT 06850, United States