Privacy Policy
This Privacy Policy explains how we collect, use and protect your information.
We don't sell your data
Your information is never sold or rented.
8 kinds of data
Each one is listed below with the reason we need it.
5 services involved
Named below, with links to their own policies.
Delete on request
Ask us and we delete your account and its data.
Contents
Who we are
onTest is made by onTest ("we", "us" or "our"). This policy explains what information the app handles, why, who receives it and the choices you have. It applies to the onTest app and this website.
Information we collect
Here is everything the app collects, why we need it and who receives it:
| Data | What it includes | Why we use it | Who receives it |
|---|---|---|---|
| Name | The name you enter or your sign-in account shares | Personalize the app and your account, and for sign-in | Sign in with Google |
| Email address | The email address you sign up or contact us with | Create your account and contact you, and for sign-in | Sign in with Google |
| User IDs | An identifier for your account | Recognize your account on your devices, and for sign-in | Sign in with Google |
| App interactions | Screens you open and features you use | Analytics | Google Analytics for Firebase |
| Content you create | Posts, notes, comments, prompts or other content you create | Save and show your content | Only us, stored with Supabase |
| Crash logs | Technical details when the app crashes | Crash reports | Firebase Crashlytics |
| Diagnostics | Performance data, device model and system version | Crash reports | Firebase Crashlytics |
| Device or other IDs | Identifiers such as your advertising ID or an app installation ID | Notifications, analytics and crash reports | Firebase Cloud Messaging, Google Analytics for Firebase, Firebase Crashlytics |
We get this information from you, when you enter it or allow a permission, and automatically as you use the app, through the services named above. If you contact us, we also keep your message and email address so we can reply.
Payments
The app does not take payments. Testing packages are bought on ontest.app, where Paddle, our reseller and merchant of record, processes the payment. We never see your full card number. Paddle's own privacy policy applies to the payment: https://www.paddle.com/legal/privacy
How we use information
We use information only to:
- provide the app and its features
- create your account and keep you signed in
- send notifications you agreed to receive
- understand how the app is used so we can improve it
- find and fix crashes and performance problems
- answer your questions and support requests
- keep the app secure and prevent misuse
- meet our legal obligations
How we share information
We share information only in these cases:
- with the service providers listed below, who help us run the app and may use it only for that
- when the law requires it, such as a valid court order
- to protect the rights, safety and security of our users and others
- as part of a merger or sale of the app, under this policy
- with your consent
Services we use
| Service | What it does | Data it receives | Privacy policy |
|---|---|---|---|
| Supabase | Store your data and keep it in sync | The data you store in the app | supabase.com |
| Sign in with Google | Let you sign in with your Google account | Name, email address and user IDs | policies.google.com |
| Firebase Cloud Messaging | Send notifications | Device or other IDs | firebase.google.com |
| Google Analytics for Firebase | Understand how the app is used | App interactions and device or other IDs | firebase.google.com |
| Firebase Crashlytics | Find and fix crashes | Crash logs, diagnostics and device or other IDs | firebase.google.com |
Permissions
The app asks for these permissions only when you use a feature that needs them:
| Permission | Why we ask |
|---|---|
| Notifications | To send you notifications, which you can turn off at any time |
You can turn any permission off at any time in your device settings. The rest of the app keeps working.
How long we keep information
- Account information: until you delete your account.
- Content and messages you create: until you delete them or your account.
- Crash logs and diagnostics: for up to 90 days.
- Messages you send to support: as long as needed to help you.
- Everything else: only as long as needed for the purposes in this policy.
After that, we delete information or make it anonymous.
Deleting your account
You can ask us to delete your account without opening the app: contact us by email at hello@ontest.app from the email address on your account.
We delete your account and its personal data within 30 days. Some records, such as purchase records, may be kept longer when the law requires it.
Security
We protect your information with measures such as encryption in transit and access controls. No system is completely secure, so we can't guarantee absolute security.
Your choices and rights
- Ask us for a copy of your personal information, or to correct or delete it, by contacting us by email at hello@ontest.app.
- Turn off permissions such as location or camera in your device settings.
- Ask us to stop using your information for analytics.
Additional rights by region
Depending on where you live, you may have extra rights. This section covers the European Union and the United Kingdom and the United States.
European Union and United Kingdom
onTest is the data controller for your personal information. We use it on these legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the app and its features | Performing our agreement with you |
| Your account | Performing our agreement with you |
| Analytics, crash reports and improving the app | Our legitimate interest in a reliable app |
| Support requests | Our legitimate interest in helping you |
| Meeting legal requirements | Legal obligations |
You have the right to:
- access the personal information we hold about you
- have inaccurate information corrected
- have your information deleted
- restrict or object to how we use it
- receive your information in a portable format
- withdraw consent at any time, without affecting earlier use
To use these rights, contact us by email at hello@ontest.app. You can also complain to your local data protection authority. When your information is transferred outside the EU or UK, we rely on safeguards such as the European Commission's standard contractual clauses.
United States
Residents of California and other states with privacy laws, such as Colorado, Connecticut, Virginia, Utah and Texas, have these rights. In the last 12 months we collected the categories of information in the table above, from the sources and for the purposes described in this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
- Right to know what personal information we collect, use and disclose
- Right to delete your personal information
- Right to correct inaccurate information
- Right not to be treated differently for using these rights
To make a request, contact us by email at hello@ontest.app. We will verify your request using information linked to your account or device. You can use an authorized agent, and if we decline your request, you can appeal by replying to our decision.
Children's privacy
onTest is meant for adults aged 18 and over, and we don't knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
International transfers
The services we use may process information in countries other than yours, including the United States. Wherever it is processed, we protect it as this policy describes and use legal safeguards where the law requires them.
Changes to this policy
We may update this policy as the app changes. When we do, we update the "Last updated" date above, and we tell you in the app or by other means before significant changes take effect.