Privacy Policy

Oya Shield (the “App”) is operated by Scarsian Limited (“we”, “us”, or “our”). Oya Shield helps separated and divorced parents privately document co-parenting incidents and shared expenses. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It covers the App and the professional portal at pro.oyashield.com, where a professional reads a record that a parent has shared with them. By using the App or the portal you agree to the practices described here.

Information We Collect

We collect only the information needed to provide the App:

• Account information: your email address, used to create your account and sign you in with a one-time sign-in code. We do not store passwords.
• Content you create: the incidents, expenses, amounts, notes, dates, categories and severity you record, and the children you add (their names, and which entries concern them).
• Photos and attachments: photos, videos, documents and other files you attach to an incident or expense. These are uploaded to our secure storage so they sync to your account.
• Device and usage information: basic technical data such as app version and general diagnostics needed to operate and improve the App.
• Subscription information: if you subscribe to Premium, the purchase is made through Apple, which provides the status of your subscription, such as your plan and when it renews or ends. We may keep this status with your account to confirm your access to Premium features. We do not receive or store your payment card details.

How We Use Your Information

• To provide the App's core features: logging incidents and expenses, attaching evidence, and generating reports.
• To authenticate you securely via one-time email codes.
• To manage your subscription and trial.
• To maintain the security, reliability, and performance of the App.

We do not sell your personal information, and we do not use it for advertising or to track you across other apps or websites.

How Your Data Is Stored

Your records are stored and processed on secure servers in the United States and are associated with your account. Other people cannot see the incidents and expenses you document unless you choose to share them as described below. We apply reasonable technical and organizational safeguards to protect your information.

Sharing Your Records

The other parent, or anyone else, cannot see, request, or receive your entries through Oya Shield, even if they also use the App with their own account, unless you choose to share them. You can export a report and send it yourself, or use Share with a professional. When you share with a professional, the person you invite signs in at pro.oyashield.com and gets a read-only view of what you chose to share, including new entries that match it. They can open it until you end access. To provide this, we store the email address of the person you invite and, if you have given one, your name, which we include in the invitation email we send them. We also log when they open your shared record or its attachments (repeat openings within half an hour are logged once) and when they use the portal's Print or save PDF button, and you can see that log in the App. Printouts and PDFs they make before you end access stay with them.

If You Are Invited as a Professional

When a parent shares their record with you, we store your email address and send you an invitation that includes the name the parent gave, if any. When you use pro.oyashield.com, we store your name, your firm or organization if you give one, and your role, and we log when you open a shared record or its files and when you use Print or save PDF. The parent who shared the record can see that log, and your name and email address appear on the copies you print or save. The portal stores cookies to keep you signed in, to show dates and times in your time zone, and to mark what is new since your last visit. To delete your professional account, email hello@scarsian.com from the address you sign in with. Parents who shared their record with you keep the history of that share, including your email address and when you opened it.

Third-Party Services

• Supabase hosts our database, sign-in, file storage and server functions in the United States.
• Vercel hosts our website and the professional portal.
• An email delivery provider sends sign-in codes and invitation emails for us.
• Apple processes subscription purchases made through the App Store and provides the subscription status we use to confirm access to Premium features.

These providers handle only the data necessary to perform their function and under their own privacy terms.

Data Retention

We retain your account and the content you create for as long as your account is active. Deleting an entry in the App removes it and its attachments from our servers. When a share ends, its history (who it was shared with and when they opened it) stays with your account. When you delete your account, your data is removed as described below.

Account & Data Deletion

You can delete your account at any time with Delete Account, under Account in Settings in the App. This removes your account and its data from our active systems, including your incidents, expenses, children, attachments and shares (which ends every professional's access), and the history of those shares. Subscription records we received from Apple, such as the plan and its dates, are unlinked from your account and kept, so that subscription can be linked to an account again. If you can no longer sign in, contact us at hello@scarsian.com and we will complete the deletion promptly. A professional account is deleted on request: email hello@scarsian.com from the address you sign in with.

Children's Privacy

Oya Shield is designed for parents and guardians aged 18 or older, not for use by children. Records may describe children as part of custody documentation, such as their names and events that concern them. That information is part of the parent's record, is shared only as the parent chooses, and is deleted with the parent's account. We do not knowingly collect information directly from children. If you believe a child has provided us information, please contact us so we can remove it.

Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. You can exercise most of these rights directly in the App, or by contacting us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the App. Your continued use of Oya Shield after an update means you accept the revised policy.

Contact

Questions about this policy? Contact Scarsian Limited at hello@scarsian.com.

Scarsian Limited, Hong Kong