Oohlala

Privacy

This Privacy Policy explains how YOKUDU trading as Oohlala (“Oohlala”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information when you use our website, intimacy quiz, partner invite flow, results pages, premium unlock features, emails, and related services (collectively, the “Service”).

For purposes of South African privacy law, including the Protection of Personal Information Act, 2013 (“POPIA”), Oohlala is the responsible party for the personal information described in this Policy where we determine the purpose and means of processing.

  1. Who This Policy Applies To
    This Policy applies to users of the Service, including the person who starts a quiz, the invited participant, anyone who receives a results email or quiz link from us, and any person who contacts us for support.
  2. Adult Service and Sensitive Information
    The Service is intended only for adults aged 18 years or older. The Service involves adult-themed questions and may process information about intimate preferences and sex life. By using the Service and submitting quiz responses, you expressly consent to our processing of that information for the purposes described in this Policy, including generating compatibility results, shared matches, bucket lists, email communications, and premium result access. If you do not want us to process this kind of information, do not use the Service.
  3. Information We Collect
    We may collect the following categories of information:
    • Identity and contact information, such as first name, nickname, partner name, email address, and any contact details you provide in support requests.
    • Quiz and relationship-input information, such as participant role, quiz responses, skipped questions, quiz progress, completion status, email-submission status, compatibility scores, match data, bucket list items, unlock status, and generated results.
    • Partner-provided information, such as the information one participant enters about the other participant, including partner name and, where used, partner email address.
    • Transaction and payment-related information, such as order IDs, capture IDs, payer identifiers, payment status, amount, currency, timestamps, and limited payment metadata received from PayPal. We do not intentionally collect or store full card numbers or full financial account credentials on our own systems when payments are processed through PayPal.
    • Technical and usage information, such as IP address, approximate location inferred from IP, browser type, device information, operating system, timestamps, pages viewed, referring URLs, session identifiers, server logs, and security event logs.
    • Browser/device-stored information, such as local storage or similar client-side data used to remember quiz state and let users continue a previous quiz.
    • Communications information, such as the contents of emails, support messages, and other communications sent to us.
  4. How We Collect Information
    We collect information:
    • Directly from you when you fill in forms, complete quiz questions, provide an email address, unlock premium content, or contact us.
    • From another participant when they enter your name, email address, or related quiz information.
    • Automatically through the website, app infrastructure, device storage, security logs, and hosting systems.
    • From third-party payment or delivery providers, such as PayPal and email-delivery systems, when they send us payment confirmations, delivery events, or status updates.
  5. How We Use Personal Information
    We use personal information to:
    • create and manage quiz sessions;
    • identify participants and associate them with the correct quiz;
    • save progress and allow users to continue a quiz;
    • generate quiz reports, shared matches, scores, radar charts, and bucket list items;
    • display or send results to the correct participants;
    • process payments, confirm premium unlocks, and manage billing records;
    • send transactional and service-related emails, including quiz links, results links, payment confirmations, support responses, and security notices;
    • prevent fraud, abuse, duplicate or unauthorized access, and other misuse of the Service;
    • maintain, secure, debug, back up, and improve the Service;
    • comply with legal obligations, handle complaints, resolve disputes, and enforce our terms; and
    • create aggregated or de-identified statistics and product insights, where lawful.
  6. Shared Two-Person Results
    The Service is designed to generate shared outputs for two participants. This means information submitted by each participant may be used to create combined or comparative outputs visible to both participants, including compatibility scores, match results, charts, shared bucket list items, and other result summaries. If you do not want your responses used in a shared two-person result, do not participate in the quiz.
  7. When We Rely on Consent
    Under POPIA, some of the personal information processed through the Service may qualify as special personal information because it may reveal information about a person’s sex life or intimate preferences. We rely on your consent for that processing, along with other lawful bases where applicable, such as providing the Service you requested, processing necessary to conclude or perform a contract, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the Service. You may withdraw consent going forward, but that may mean we can no longer provide some or all of the Service.
  8. When We Share Personal Information
    We may share personal information:
    • with the other quiz participant, to the extent necessary to deliver the shared quiz experience and results;
    • with service providers who host, support, or operate the Service for us;
    • with payment providers to process premium purchases and verify payment status;
    • with email-delivery providers to send transactional emails and process delivery events;
    • with professional advisers, insurers, auditors, or debt-recovery providers where reasonably necessary;
    • where required by law, court order, regulation, subpoena, or lawful request from authorities;
    • where necessary to investigate fraud, abuse, security incidents, or breaches of our terms; and
    • in connection with a merger, acquisition, restructuring, sale of assets, financing, or similar business transaction.

We do not sell your personal information as the term “sell” is commonly understood in privacy law.

  1. Service Providers We Use
    We currently use or may use the following service providers in connection with the Service:
    • Supabase for database, backend, storage, logs, and service infrastructure.
    • Brevo for transactional email delivery and related email status events.
    • Hostinger for hosting, website infrastructure, DNS, server resources, and related technical services.
    • PayPal for payment processing and payment-status confirmation.

Those providers may process personal information on our behalf or, in some cases, as separate responsible parties/controllers for their own payment, compliance, fraud, or operational purposes. Their handling of personal information is also subject to their own privacy notices and legal obligations.

  1. Cross-Border Transfers
    Our service providers may store or process information in countries outside South Africa. Where we transfer personal information across borders, we take reasonable steps to ensure that appropriate safeguards are in place and that the transfer is permitted under applicable law, including POPIA. By using the Service and submitting personal information, you acknowledge that your information may be transferred to and processed in other countries where our providers operate.
  2. Email Communications
    We may send transactional emails and service messages relating to quiz access, completion, results, premium access, payment confirmations, support, and security. If you provide an email address for yourself or another participant, you confirm that you are authorized to provide it and that you have a lawful basis for doing so where required by law. Email is not a fully secure or private medium, and anyone with access to the relevant inbox or forwarded result link may be able to access associated content.
  3. Payments and PayPal
    If you pay to unlock premium features, payment processing is handled by PayPal. PayPal may collect payment information directly from you and may process your information under its own privacy statement, user agreement, anti-fraud rules, and compliance obligations. We typically receive limited payment-related data from PayPal, such as transaction identifiers, status, amount, and limited payer details necessary to confirm payment, unlock content, maintain records, prevent fraud, and respond to disputes.
  4. Cookies, Logs, and Device Storage
    We may use cookies, local storage, session storage, and similar technologies that are necessary to operate the Service, maintain sessions, remember quiz progress, improve reliability, and protect against fraud or abuse. If we later introduce non-essential cookies or tracking technologies, we may present additional notices or controls where required by law.
  5. Retention
    We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining premium access, handling support requests, investigating abuse, resolving disputes, keeping security and audit logs, and complying with legal, tax, accounting, and regulatory obligations. We may retain de-identified or aggregated information for longer where lawful. Backup copies and server logs may persist for a limited period after live records are deleted.
  6. Security
    We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no internet-based service, email system, hosting platform, or electronic storage system can be guaranteed to be completely secure. You use the Service at your own risk. If we believe there has been a security compromise affecting your personal information, we will take the steps required by applicable law, including POPIA.
  7. Your Rights
    Subject to applicable law, you may have the right to:
    • ask whether we hold personal information about you;
    • request access to the personal information we hold about you;
    • request correction, deletion, or destruction of inaccurate, irrelevant, excessive, misleading, incomplete, outdated, or unlawfully obtained information;
    • object to certain processing;
    • withdraw consent where processing is based on consent;
    • opt out of direct marketing communications at any time; and
    • lodge a complaint with the Information Regulator.

We may need to verify your identity before acting on a request, and some rights may be limited by law.

  1. Direct Marketing
    We may send marketing communications only where lawful and, where required, with appropriate consent. Service and transactional emails are not the same as marketing emails. You can opt out of marketing communications, but you cannot opt out of essential service messages that are necessary to operate the Service you requested.
  2. Children
    The Service is not intended for anyone under 18. We do not knowingly offer the Service to minors or intentionally process children’s personal information for the quiz. If we learn that we have collected personal information from a minor in violation of applicable law, we may suspend access and delete that information.
  3. Third-Party Links and Services
    The Service may link to or integrate with third-party websites or services. We are not responsible for the privacy practices, content, or security of third parties. You should read their privacy policies separately.
  4. Changes to This Policy
    We may update this Privacy Policy from time to time. The updated version will become effective when posted, unless a later date is stated. Your continued use of the Service after an update takes effect means you accept the revised Policy.
  5. Contact Us and Privacy Requests
    Contact us