Privacy Policy
Outlo is an app for keeping your documents (IDs, insurance, warranties, bills, medical papers) in one searchable place and reminding you before they expire. This policy explains what Outlo collects, why, who processes it, how long it is kept, and what you can do about it.
Outlo is run by Vishwanath Pawar, an individual developer, who is the data controller (the "data fiduciary" under India's DPDP Act). Contact: [email protected].
What we collect
- Account details: your name, email address and, if you sign in with Google or Apple, the profile picture they share.
- Your documents: the photos and files you add, and the details stored with them (title, type, folder, dates, reference number, notes).
- Text read from your documents: the words recognised in your document images, stored so you can search inside them, and the details extracted from them (such as an expiry date).
- Device information: a push-notification token, the platform (iOS or Android), your time zone and when the app was last used, so reminders reach the right device at the right time.
- Usage records: counts needed to apply plan limits (for example, how many documents you have) and technical records of AI processing (which model ran, how long it took, how confident it was, but never the document's content).
Your documents can include identity, health and financial information. Outlo stores it only because you add it, and uses it only to provide the features below.
We do not sell your data, show ads, or use your documents to train AI models.
Why we use it
- To store your documents and show them back to you on your devices.
- To let you search the words inside your documents.
- To fill in details such as expiry dates, so you don't have to type them.
- To send the expiry and renewal reminders you set up.
- To sign you in, keep your account secure and apply your plan's limits.
We rely on your consent and on providing the service you asked for. When you set up Outlo, we ask you to agree to us keeping the documents you add, including ID, health and financial ones. You can withdraw consent at any time as described below.
AI reading of your documents
Outlo reads your documents with AI only if you turn it on. You are asked separately during setup, and you can turn it off at any time in Profile → AI features. When it is off, nothing is sent to an AI provider and you enter details yourself.
When it is on, every document you add, including identity, health and financial documents, is sent to Google to pick out details. Depending on the document, its image, its text, or both are sent to Google Cloud Vision and Google Gemini. Google processes them only to return a result to Outlo; under the terms we use, Google does not store them or use them to train its models.
Who processes your data
| Provider | What for |
|---|---|
| Supabase | Database and file storage for your account and documents |
| Clerk | Sign-in and account management |
| OneSignal | Delivering push notifications (receives your push token, not your documents) |
| Google Cloud Vision | Recognising text in document images (only with AI turned on) |
| Google Gemini | Extracting details from document text and images (only with AI turned on) |
| Apple App Store / Google Play | Payments for Outlo Pro. We never see your card details |
These providers act on our instructions and may not use your data for their own purposes.
Where your data is stored
Your account, documents and extracted text are stored in the United States. If you live elsewhere, including India, the EU or the UK, your data is transferred there. We rely on our providers' data-processing and transfer terms (including the EU Standard Contractual Clauses) to protect it.
Data is encrypted in transit and at rest. Each account can only read its own documents, and files are served through short-lived links.
How long we keep it
- Your documents and account: for as long as you keep your account.
- Deleted documents: their files are removed within minutes; the record and its text are permanently erased 30 days after you delete it.
- Deleted account: your account, documents and text are permanently erased straight away; their files are removed within minutes.
- AI processing records: 30 days.
- Sent reminder records: 7 days.
- Devices you stop using: removed after 90 days of inactivity.
Your rights and choices
- Access and export: Profile → Export all documents downloads a copy of every document and its details.
- Correction: you can edit any document's details in the app, and your name and email in your account.
- Deletion: delete any document in the app, or your whole account from Profile → Delete account.
- Withdraw AI consent: turn off AI reading in Profile → AI features.
- Withdraw storage consent: we can't keep your documents without it, so delete your account from Profile → Delete account.
- Notifications: turn off push notifications in your device settings.
Depending on where you live (for example under India's DPDP Act, the EU or UK GDPR, Australia's Privacy Act, Singapore's PDPA or Washington's My Health My Data Act), you may also have the right to object, to restrict processing, to nominate someone to act for you, and to complain to your data protection authority. To exercise any right, email us; we reply within 30 days.
Children
You must be 18 or older to use Outlo, and you confirm this when you set up Outlo. If you believe someone under 18 has created an account, email us and we will delete it.
If there is a breach
If a security breach affects your personal data, we will tell you without undue delay by email, along with what happened and what you can do. Where the law requires it, we will also notify the relevant authority, for example within 72 hours under the GDPR, to the Data Protection Board of India, and to the US Federal Trade Commission for health information.
Changes to this policy
If we change this policy, we will update the effective date above. For significant changes, we will tell you in the app before they take effect.
Contact
Vishwanath Pawar · [email protected]