Skip to content

Privacy Policy

Last updated: [CONFIRM: DATE]

This policy explains what personal data the OVX Android app and this website collect, why we collect it, how long we keep it and the choices you have.

OVX is an education app. It is not a trading platform: we never execute trades, never ask for brokerage or exchange credentials and never give financial advice.

1. Who we are

OVX is run by [CONFIRM: LEGAL ENTITY NAME], [CONFIRM: ADDRESS] ("we", "us"). We are responsible for the personal data described here. You can reach us at support@ovx.app.

2. Data we collect

We collect only what we need to run your account, your lessons and the level community.

  • Account data: your email address, your nickname and how you sign in (password or Google). Your password is stored only as a one-way hash; we cannot read it. If you sign in with Google, we receive your Google account ID and your verified email address from Google, nothing else.
  • Email codes and links: when you sign up we email a 6-digit code; password reset and account deletion links are emailed too. Codes and links are stored only in hashed form and expire (10 minutes for codes, 60 minutes for links).
  • Settings: your app language, your video language and your time zone (used to count your learning streak in your own days).
  • Learning data: your current level, how far you have watched each lesson video (sent by the app about every 10 seconds while you watch), which lessons you completed, your quiz answers and results, and the days on which you studied.
  • Community data: the messages you send in your level's chat room, messages you report and the reason you chose, the people you block, and moderation decisions about your account (for example a temporary mute).
  • Live sessions: when you join a live session we create a short-lived access token for that room. [CONFIRM: describe what the live video provider processes once live sessions are connected, and whether sessions are recorded.]
  • Watchlist: the market symbols you add to your watchlist. OVX does not show or store your trades, balances or brokerage accounts.
  • Devices: a sign-in token for each device you use (with a device name such as "Pixel 8"), the push notification token of each device (from Firebase Cloud Messaging) and when you were last active.
  • Crash reports: if the app crashes, Firebase Crashlytics sends us a crash report with the app version, Android version, device model, an installation identifier and technical details of the crash.
  • Security data: your IP address is used for a short time to limit repeated sign-in, sign-up, code, reset and deletion attempts (counters that expire after minutes) and may appear in server logs [CONFIRM: server log retention].
  • Messages to us: the contents of emails you send to support.

We do not collect payment card details, trading or brokerage account data, your precise location, your contacts or your photos. The app has no advertising and no advertising identifiers.

3. How we use it

We use your data to:

  • create, secure and sign in to your account, including email codes and password resets;
  • show lessons in your language, remember where you stopped, open the next lesson when you pass a quiz and move you up a level;
  • count your learning streak;
  • run the chat room of your level, hide messages from people you blocked and handle reports;
  • show the live sessions of your level and let you join them;
  • send notifications you allowed (for example a reminder before a live session);
  • protect OVX against abuse (rate limits, moderation) and fix crashes;
  • answer your support requests and meet legal obligations.

Where the law requires a legal basis, we rely on our contract with you (running your account and lessons), our legitimate interest in keeping OVX safe and working (security, moderation, crash reports), your consent (notifications, which you can turn off in Android settings at any time) and legal obligations.

We do not use your data to make trading recommendations, we do not build advertising profiles and we never sell your personal data.

4. What other students see

Students in your level can see your nickname, your initials and the messages you send in the level chat. Other students can find you by nickname only if you are in the same level, and never if one of you blocked the other. Your email address is never shown to other students.

OVX staff (owner, teachers and moderators) can see account and learning data in the admin panel to run the courses and moderate the chat. Every change they make is recorded in an audit log.

5. Service providers

We share personal data only with providers that help us run OVX, under contracts that limit how they use it:

  • Hosting: [CONFIRM: HOSTING PROVIDER AND REGION] stores our database and runs our servers.
  • Email delivery: [CONFIRM: EMAIL PROVIDER] sends sign-up codes and reset and deletion links.
  • Video: Mux streams the lesson videos. When you watch, Mux receives your IP address and playback information needed to deliver the video.
  • Google: Google Sign-In (if you choose it), Firebase Cloud Messaging (notifications) and Firebase Crashlytics (crash reports).
  • Live sessions: [CONFIRM: LIVE VIDEO PROVIDER, once connected].

We may disclose data to authorities when the law requires it. If OVX is ever involved in a merger or sale, we will tell you before your data is handled under a different policy.

Some providers may process data outside your country. Where that happens, we rely on the safeguards the law requires [CONFIRM: e.g. standard contractual clauses].

6. This website

This website does not use cookies, analytics or advertising. It remembers your light or dark theme choice in your browser's local storage on your device only. When you use the account deletion or password reset forms, the email address and password you enter are sent directly to our servers to process your request. Our web server may log your IP address [CONFIRM: web server log retention].

7. How long we keep it

  • Your account and learning data: for as long as your account exists.
  • Sign-ups that are never confirmed: deleted automatically after 7 days.
  • Email codes and links: 10 minutes (codes) or 60 minutes (password reset and deletion links), and they work only once.
  • Chat messages: while your account exists. Messages you or a moderator remove are hidden from everyone immediately; we keep them for moderation records until your account is deleted.
  • Audit log (a record of changes made by OVX staff): 12 months. When you delete your account, your personal details are removed from these records.
  • Crash reports: [CONFIRM: 90 days] in Firebase Crashlytics.
  • Rate-limit counters: a few minutes.
  • Backups: overwritten within [CONFIRM: 90] days.
  • Support emails: [CONFIRM: 12] months.

8. Deleting your account

You can delete your account at any time in the app (Profile, Settings, Delete account) or on our Delete your account page, which emails you a confirmation link.

When you delete your account, we immediately and permanently delete your email address, nickname, password, Google link, settings, lesson progress, quiz attempts, learning streak, chat messages, the reports you sent, the people you blocked, your watchlist, your devices and your sign-in sessions. We keep an anonymous account number with no personal data so that our records stay consistent, and we remove your personal details from the audit log. Copies in backups disappear when the backups are overwritten.

9. Security

Passwords, email codes and links are stored only as hashes. All connections use HTTPS. Repeated attempts to sign in or guess codes are limited. OVX staff must use two-factor authentication. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

10. Children

OVX is not directed to children under [CONFIRM: 16]. We do not knowingly collect their data. If you believe a child has created an account, contact us at support@ovx.app and we will delete it.

11. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict some uses, to withdraw consent and to complain to a data protection authority.

You can change your nickname and languages in the app and delete your account yourself. For any other request, email us at support@ovx.app from the address of your account.

12. Changes to this policy

If we change this policy, we update the date at the top. If the change is important, the app asks you to read and accept the new version.

13. Contact

Questions about this policy or your data: support@ovx.app.

[CONFIRM: LEGAL ENTITY NAME], [CONFIRM: ADDRESS]