Terms & Privacy

01

Introduction

Thank you for using OOOPA. Our mission is to give humans back control of their attention. We believe real focus comes from accountability, not willpower alone — and that technology should support human well-being rather than exploit it.

We believe in clear and unambiguous rules when it comes to privacy. The principles above drive every decision we make about how we collect, use, and handle your personal data.

OOOPA SAS ("we," "us," "our," "OOOPA") is the owner of the OOOPA Application (the "App"). OOOPA is a mobile application that allows users to lock distracting apps with the help of a trusted human validator (the "Service").

This Privacy Policy goes hand-in-hand with our Terms of Use. Please read them together. If you have any questions at any time, please contact us.

02

Data we collect

Here are the three types of data we collect across all platforms:

1 — Data linked to you

Contact information, user identifiers, phone number (if you use Validator features)

This information is used to connect your payment information to an account so you can use OOOPA across devices. We also use it when you file bug reports so we can correspond with you to resolve issues.

2 — Data not linked to you

Usage data, diagnostics

We use this information to improve OOOPA for all our users. This generally includes:

• Crash reports
• Most commonly used features
• Install date and app open count

This allows us to quickly identify and fix issues and understand which features people find valuable.

3 — Validator data (opt-in only)

Unlock requests, session names, hashed phone numbers

If you opt in to the Validator feature, your unlock requests and focus session names are shared with your chosen validator via our servers. Contact phone numbers are hashed on-device before transmission for validator discovery. See the Validator Features section for full details.

03

End User Licence Agreement

Apps made available through the App Store are licensed, not sold, to you. Your licence to each App is subject to your prior acceptance of either this Licensed Application End User Licence Agreement ("Standard EULA"), or a custom end user licence agreement between you and the Application Provider ("Custom EULA"), if one is provided.

a. Scope of Licence

OOOPA grants you a nontransferable licence to use the Licensed Application on any Apple-branded products that you own or control and as permitted by the Usage Rules. You may not copy, reverse-engineer, disassemble, attempt to derive the source code of, modify, or create derivative works of the Application.

b. Consent to Use of Data

You agree that OOOPA may collect and use technical data and related information — including but not limited to technical information about your device, system and application software, and peripherals — gathered periodically to facilitate software updates, product support, and other services related to the Application. OOOPA may use this information, in non-personally-identifying form, to improve its products or provide services to you.

c. Termination

This Standard EULA is effective until terminated by you or OOOPA. Your rights under this Standard EULA will terminate automatically if you fail to comply with any of its terms.

d. External Services

The Application may enable access to OOOPA's and/or third-party services and websites ("External Services"). You agree to use External Services at your sole risk. OOOPA is not responsible for the content or accuracy of any third-party External Services.

e. No Warranty

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE APPLICATION AND ANY SERVICES PERFORMED OR PROVIDED BY THE APPLICATION ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. OOOPA HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS WITH RESPECT TO THE APPLICATION AND ANY SERVICES, EITHER EXPRESS, IMPLIED, OR STATUTORY.

f. Limitation of Liability

TO THE EXTENT NOT PROHIBITED BY LAW, IN NO EVENT SHALL OOOPA BE LIABLE FOR PERSONAL INJURY OR ANY INCIDENTAL, SPECIAL, INDIRECT, OR CONSEQUENTIAL DAMAGES WHATSOEVER, INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, LOSS OF DATA, BUSINESS INTERRUPTION, OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES, ARISING OUT OF OR RELATED TO YOUR USE OF OR INABILITY TO USE THE APPLICATION.

g. Governing Law

This Agreement shall be governed by the laws of France. If you are a resident of the European Union, the governing law and forum shall be the laws and courts of your usual place of residence.

04

Privacy Policy

This Privacy Policy explains how we collect, use, maintain, and disclose your information. This includes information that could be used to identify a specific user ("Personal Data"), and other information that does not constitute Personal Data ("Non-Personal Data").

All members of OOOPA's team with access to your Personal Data are required to follow this policy, effective June 2025.

OOOPA SAS is the responsible party / data controller regarding Personal Data collected through our Service. If you have questions at any time about your data, privacy, or these terms, please contact us.

05

Refund Policy

Purchases through the OOOPA website

We can generally accommodate refund requests made within 30 days of purchase. Please contact us to request a refund. We can only process requests sent from the email address used for the original purchase.

Purchases through the App Store or Google Play

OOOPA does not collect your payment information when you purchase through the App Store or Play Store, so we are unable to provide refunds directly. For refund requests, please contact Apple or Google directly through their support channels.

06

A note about children

Consistent with the Children's Online Privacy Protection Act (COPPA) and applicable European law, we do not knowingly collect Personal Data from children under the age of 13. If you believe a child under 13 has provided Personal Data to us, please contact us and we will work to delete that information from our systems.

07

Information we collect & how

Without limitation, the types of information we may collect are:

Information is typically collected when you create an account, contact us, use the Service, or opt in to specific features. We use cookies and similar technologies solely for product analytics and session management — never for third-party advertising.

08

Safety & security of personal data

We use industry-standard encryption technologies and procedures to protect your Personal Data from unauthorised access, use, or disclosure.

No method of transmission over the Internet is 100% secure. Therefore, while we take every reasonable precaution, we cannot guarantee absolute security. If you suspect any misuse, loss of, or unauthorised access to your Personal Data, please let us know immediately.

We are not responsible for the privacy or security practices of any third party. We do not control, and are not responsible for, the privacy and security of your Personal Data once it is provided to a third party by you or in accordance with your instructions.

09

Use & disclosure of personal data

We use your information to operate our business, including to provide the Service, verify identity, communicate with you about your account, and improve the product.

We may share some or all of your Personal Data in connection with any merger, financing, acquisition, or dissolution transaction. If another company acquires our business, that company will assume the rights and obligations regarding your Personal Data as described in this Privacy Policy.

We will never

• Sell, trade, or rent your Personal Data to third parties
• Share your Personal Data with advertisers
• Share app-level usage data (which apps you use, how long)

We may disclose data only

• Where required by law or lawful requests by public authorities
• To protect the rights, property, or safety of another user or the public
• In response to a physical threat to you or others
• In the event of a corporate restructuring as described above

10

Your choices regarding your information

Email communications

We may periodically send newsletters or promotional emails. You can opt out at any time by following the unsubscribe instructions in the email. We may still send service-related communications (e.g. security notices, policy updates).

Changing or deleting your Personal Data

You may change any Personal Data in your account by editing your profile within the App or by contacting us. You may request deletion of your Personal Data, and we will use commercially reasonable efforts to honour that request, subject to any legal retention requirements.

EU / EEA residents

If you are a resident of the European Economic Area, you have the right to object to processing of your Personal Data, request restriction of processing, or request portability of your Personal Data. You can exercise these rights by contacting us. You also have the right to lodge a complaint with your local data protection authority.

Withdrawing consent

If we have collected and processed your information with your consent, you can withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing conducted prior to withdrawal.

Do not track

Your browser may allow you to transmit a "Do Not Track" signal. There is currently no industry consensus on how to respond to these signals. Unless the law requires otherwise, our systems do not specifically honour "Do Not Track" requests. You may, however, disable cookies at any time in your browser or device settings.

11

International & European users

OOOPA is incorporated in France. If you access our Service from outside France, please be aware that you may be sending information (including Personal Data) to servers located in France or the European Union. We hold and process your Personal Data in accordance with applicable EU/EEA data protection laws, including the General Data Protection Regulation (GDPR).

Our lawful bases for processing Personal Data under GDPR include: contractual necessity (delivering the Service), legal compliance, legitimate interests (fraud prevention, product improvement), and, where required, consent.

We will ensure that any transfer of Personal Data from countries in the EEA to countries outside the EEA is protected by appropriate safeguards, for example by using standard contractual clauses approved by the European Commission.

12

Additional disclosures for California residents

These additional disclosures apply only to individuals who reside in California. The California Consumer Privacy Act of 2018 ("CCPA") provides additional rights to know, delete, and opt out.

Notice of collection

In the past 12 months we have collected the following categories of Personal Data:

• Identifiers — name, email address, account name, IP address
• Commercial information — purchases and engagement with the Service
• Internet activity — interactions with our Service
• Inferences — information about your preferences and focus goals

Right to know and delete

You have the right to request information about the categories of Personal Data we have collected, the categories of sources, the business purpose for collecting it, and the specific pieces of Personal Data we have collected. You also have the right to request deletion. To exercise either right, please contact us.

Right to opt out

To the extent OOOPA sells Personal Data as defined under CCPA, you have the right to opt out. We do not sell Personal Data. You may still contact us to confirm this.

Right to non-discrimination

You have the right not to receive discriminatory treatment for exercising any of your rights under the CCPA.

13

Validator features & data sharing

What the Validator feature is

OOOPA's Validator feature lets you designate a trusted person (your "validator") who can approve or deny your requests to temporarily unblock apps. This feature is entirely opt-in and is not required to use any core OOOPA functionality.

Contact information & validator discovery

To find a validator, you can grant access to your device contacts. When you do, OOOPA reads only the phone numbers from your contact list. These numbers are hashed on your device before being sent to our servers — we never see or store raw contact lists. Our server checks the hashed values against existing OOOPA users and returns any matches. Hashed contact data is discarded immediately after matching and is not permanently stored.

To use the Validator feature, you must link a phone number to your OOOPA account. Your phone number is stored in hashed form only, is never displayed to other users, and is never shared with third parties for marketing.

What your validator sees

Your validator sees only:

• Your display name
• Your unlock request message and the name of the focus session
• The name of the app or category you are requesting to unblock (optional — you control this)

Your validator does not see your full screen time, app usage breakdown, or any other personal data.

Consent & legal basis

All Validator features require your explicit consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time by removing your validator or deleting your account. Withdrawal takes effect immediately.

Opt out / remove validator / delete data

• Remove a validator: Connection severed immediately for both parties. Server records deleted within 48 hours.
• Delete account: All social and validator data permanently deleted within 30 days.

14

Changes to this policy

If we change this Privacy Policy, we will post updates on the Service or the App. Modifications are effective thirty (30) days following the "Last updated" date, or the date communicated in any other notice to you. Please review this policy periodically for changes, and especially before you provide any Personal Data.

By continuing to use our Service after the effective date of any modification to this Privacy Policy, you accept those modifications. If any modification is not acceptable to you, you should cease using the Service.