Otto Privacy Policy
This policy explains what information Evolui AB ("Evolui", "we", "us") collects when you use the Otto app, how we use it, and the choices you have.
The data controller is Evolui AB, corporate identity number 559345-8705, Pildammsvägen 95F, 215 34 Malmö, Sweden. You can reach us at support@evolui.io.
The short version
Your hearing results stay on your iPhone. We never see them, never sell them, and never use them for ads.
- What you enter in Otto stays on your device unless you choose to export or share it.
- We do not sell your data and we do not show ads.
- We collect limited, pseudonymous usage analytics to see which features work and to fix crashes. They never include the content of your entries.
- Purchases go through Apple. We never see your card details.
What Otto stores and sends
Your hearing results
The thresholds Otto measures for each ear, your hearing number, hearing age and hearing category, your matched tinnitus pitch and your tinnitus check-ins are health information. They are stored only on your iPhone. We cannot see them and they are not uploaded to us. Analytics receive only that a test was completed, how reliable the run was and which headphones were connected, never the result. Deleting the app, or using Reset all data in Settings, deletes them.
Onboarding answers
During setup you answer questions about your age and sex, what you have noticed about your hearing, tinnitus, noise exposure and family history. These answers are stored on your device to personalise the test and the app. They are not sent to analytics; analytics only record that a setup step was completed.
Microphone
Before a test, Otto uses the microphone for a few seconds to measure how loud the room is, so you know whether it is quiet enough to test. The level is calculated on your device and shown to you. Audio is never recorded, saved or uploaded. You can turn microphone access off in iPhone Settings → Privacy & Security → Microphone.
Headphones and volume
Otto reads which audio output is connected, such as the AirPods model, to calibrate the test and to check that the volume is set correctly. The headphone model is included in the analytics event when a test finishes, so we can see which headphones work well.
Relief sounds
Sounds are generated on your device. Your sound settings, sleep timer and how long a session ran are stored on your device; the sound type and session length are included in analytics, without your tinnitus pitch.
Share cards
If you create a card to share your result, it is rendered on your device and goes through the iOS share sheet to the destination you choose. We do not receive it.
Notifications
If you allow notifications, reminders such as the bedtime sounds reminder and an offer reminder are scheduled locally on your device. We do not run a push notification server.
Information we collect
Usage analytics
We use PostHog to understand how Otto is used. This includes events such as which screens are opened and which features are used, along with device type, operating system version, app version, and a random identifier for the install. Analytics are pseudonymous: we have turned off PostHog's IP-based location lookup, and we do not send the content of your entries or any health values to analytics.
Purchases
Subscriptions and one-time purchases are processed by Apple through the App Store. We use RevenueCat to validate purchases and manage subscription status. RevenueCat receives a random app user identifier, the purchase receipt, and subscription status. Neither we nor RevenueCat receive your name, payment card, or Apple ID.
Support
If you email us, we keep the email and the information you include in it so we can help you and improve the app.
Crash reports
If the app crashes, a report containing technical details about the device and the state of the app may be sent to us or to Apple, depending on your device settings.
What we do not collect
- Otto does not require an account, name, or email.
- We do not collect precise location or track you across other apps or websites.
- We do not read your contacts, photos, or other apps' data unless a specific feature asks you for permission.
- We do not use third-party advertising SDKs.
How we use information
We use the information above to operate the app, provide purchases you make, fix bugs, understand which features are useful, and respond to support requests. Where the GDPR applies, our legal bases are performance of a contract (providing the app and your purchases), our legitimate interest in improving and securing the app (analytics and crash reports), and your consent where we ask for it, for example for location or Apple Health access.
Sharing
We share information only with the service providers named in this policy, who process it on our behalf, and with authorities where the law requires it. We do not sell personal information. The providers for Otto are:
- PostHog — usage analytics
- RevenueCat — purchase validation and subscription status
- Apple — App Store purchases and crash reports
International transfers
We are based in Sweden. PostHog and RevenueCat process data in the United States under the EU-US Data Privacy Framework and standard contractual clauses.
Retention
Data on your device stays until you delete it. Pseudonymous analytics data is kept for a limited period and then deleted or aggregated. Purchase records are kept for as long as needed to provide your subscription and meet accounting obligations.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export personal information we hold, and to object to or restrict its processing. Because your data lives on your device, the quickest way to delete it is to delete the app. For anything we hold, email support@evolui.io and we will respond within 30 days. If you are in the EU or UK you can also complain to your data protection authority. In Sweden this is the Integritetsskyddsmyndigheten (IMY).
Children
Otto is not directed at children under 13 (or 16 where that is the applicable age) and we do not knowingly collect information from them.
Security
Data on your device is protected by your device's own encryption and passcode. Data sent to our service providers is encrypted in transit.
Changes
We will post any changes here and update the date at the top. If a change is significant we will tell you in the app.