Who is responsible for your data

Owlush is the service available at owlush.co.uk and through the Owlush mobile experience. Privacy questions, access requests and deletion requests can be sent to hello@owlush.co.uk.

Information you give Owlush

• •Account and profile information such as email address, display name, handle, avatar, bio, work pattern, preferences, interests, date of birth or age-related information you choose to provide.
• •Rota and calendar information such as shifts, leave, recovery time, free windows, saved plans and private day notes you choose to add.
• •If you connect an external calendar, Owlush may process its occupied time so appointments can block false free windows. The first sync version stores those imported items as private Busy blocks and does not copy external event titles into Owlush.
• •Social information such as friendships, invitations, plan participants, messages, Community posts and meetup participation.
• •Safety and support information such as reports, blocks, moderation records, support messages, feedback and privacy/data requests.
• •Optional rota files or pasted rota text when you choose AI rota reading. Nothing from an extracted rota is added to My Time until you review and save it.
• •Partner or organiser information where a user applies to create offers or events.

Information collected when you use Owlush

• •Technical and security information needed to keep sessions working and protect the service, including privacy-safe request/device signals and security events.
• •Product analytics such as feature use, page or flow activity, reliability events and performance measurements. Owlush uses Vercel Analytics and Speed Insights in the web application.
• •Location may be requested when you actively use a map or nearby feature. Owlush also uses area and travel preferences you provide. Location is not posted to Community automatically.

How Owlush uses information

• •Build your calendar, identify genuine free time and avoid conflicting plans, including conflicts from an external calendar you choose to connect.
• •Match availability with accepted friends without exposing a friend’s full private rota.
• •Create and manage plans, invitations, chats, Community rooms and meetups.
• •Personalise suggestions around time, travel, recovery and preferences.
• •Moderate reports, prevent abuse, investigate security issues and provide support.
• •Operate subscriptions, partner features or payments where those features are enabled.
• •Measure reliability and understand whether core product flows are useful.

Third-party services

Owlush uses service providers only where they are needed to operate a feature. This can include Supabase for authentication/database services, Vercel for hosting and performance/product analytics, Google Gemini for optional AI rota extraction, and Stripe for payment or payout features when enabled.

When AI rota reading is available and you tap Review upload, the selected rota file and any pasted rota text or reading instructions may be sent to Google Gemini to extract rota entries. Use manual rota entry if you do not want that content sent to the AI provider.

A sponsor may fund free AI rota scans, but sponsorship does not give the sponsor access to your rota image, shifts, calendar, profile, conversations or other personal content. Sponsor reporting is limited to aggregate campaign performance unless you separately choose to interact with the sponsor.

If you connect Google Calendar or Microsoft Outlook, Owlush uses the provider OAuth permissions you approve to read occupied time and, when you enable plan export, create or update confirmed Owlush plan events. Provider access and refresh tokens are encrypted before database storage and are not exposed through the normal user-facing connection record.

External venue, booking, maps, travel or partner links open third-party services under those services’ own privacy terms.

What other Owlush users can see

Your public-facing name, avatar and limited profile information may be shown where needed for friends, plans, chats and Community. Messages or plans you intentionally publish to Community can be seen by the relevant Community audience.

Your full rota and private plans are not posted to Community automatically. Friend matching is designed to share useful overlap rather than expose an entire private rota.

Retention and deletion

You can request account deletion in Owlush or through the public Delete account page. A verified deletion request covers the account and associated personal data, except limited information Owlush must retain for legitimate security, fraud-prevention, legal, dispute or regulatory reasons. Any required retention is limited to the purpose and period that applies.

Cancelled plans may be retained as history while their calendar time is released. Aggregate or de-identified analytics may be retained where they no longer identify you.

Your choices and rights

• •Update profile, privacy and optional calendar-connection settings in Owlush, and disconnect an external calendar at any time.
• •Request an export, correction or deletion of personal data.
• •Block another user and report messages, users, rooms, plans or meetups where reporting is available.
• •Withdraw from optional AI rota reading by using manual rota entry instead.
• •Depending on where you live, privacy law may also provide rights to access, correction, erasure, restriction, objection or portability.

Security

Owlush uses authenticated access, row-level database controls, restricted administrative functions, security monitoring and encrypted HTTPS transport. No internet service can promise absolute security, so Owlush also provides reporting, account-session controls and incident-response processes.

Age

Owlush is intended for adults aged 18 and over. It is not designed for children. If Owlush learns that an under-18 account has been created, the account may be restricted or removed.

Contact

For privacy questions or requests, email hello@owlush.co.uk or use Data and privacy inside your Owlush profile.