Privacy Policy
Last updated: June 2026
This policy reflects how we actually handle your data, not just what sounds reassuring. It covers what we collect, the reasons behind it, and the steps taken to keep it protected.
Information We Collect
You give us some of this directly: your name, contact details, payment information, booking history, and anything you send to our support team. The rest comes in passively device details, browser type, IP address, and general patterns around how the platform gets used.
Location Data
Google Play requires us to spell this out clearly, so here it is.
There are two types of location data in play. GPS-based location is the precise kind that allows us to pull up activities that are genuinely close to you. Network or IP-derived location is less exact and steps in when GPS is not available.
Neither type is stored once your session ends. Location is processed as you use the app and not held on our servers beyond that.
Beyond just showing you what's nearby, your location helps us sort results by distance, tailor recommendations to your area, and keep improving how the app works for people in different places.
Who sees it? Activity providers nearby, so the results you get actually make geographic sense. Analytics partners also receive location data, but only after it has been aggregated and stripped of anything that could identify you.
Switching off location access is straightforward. iPhone users: Settings, then Ootlah, then Location. Android users: Settings, then Apps, then Ootlah, then Permissions, then Location. Turning it off does not lock you out of anything else on the platform.
Worth knowing: turning off location means proximity search and personalised recommendations won't work the way they normally do but everything else on the platform stays fully accessible.
How We Use Your Information
Your data goes toward running things properly handling bookings, keeping you informed, responding to support queries, and looking at where the product can improve. Fraud detection is part of it too, as is meeting whatever legal requirements apply to us. If you opted into marketing at some point, that is the basis on which we send promotional content.
Disclosure of Information
Selling your data is not something we do. Renting or trading it is equally off the table.
Sharing it happens in narrower circumstances: with the providers delivering your booked activities, the processors running your payments, and the infrastructure partners who keep the platform operational. Authorities receive data only when the law demands it or when our legitimate interests require it.
Third parties who handle your data on our behalf are bound by the same obligations around protection and lawful use that we hold ourselves to.
Data Security
Technical and organisational controls are in place to guard against unauthorised access, disclosure, or tampering. No internet-connected system is fully immune to risk that is a reality we cannot overstate. What we can say is that the measures we take are proportionate, current, and kept under review.
Your Rights
These are not conditional; they apply regardless of circumstance. You can request a copy of your data, have inaccuracies corrected, ask for deletion, object to how it is processed, or ask us to restrict or transfer it. Any consent you have given can also be withdrawn. Reach out through the contact details below and we will handle it from there.
Cookies
Cookies are small files that sit on your device and help the platform remember who you are between visits. Some carry an anonymous identifier, none of which can be traced back to you. You can tell your browser to block cookies or flag them as they come in, though parts of the platform may not behave quite right if you do.
Tracking
We also keep an eye on how people move around the platform, which helps us understand what's working and where things could be better.
Protection of Minors
Ootlah is built for adults. Anyone under 18 should not be using it, and we do not intentionally gather data from that age group. Parents or guardians who suspect a minor has created an account should contact us and we will act on it.
If you are a parent or guardian and you become aware that your child has shared personal information with us, please get in touch straight away and we will take care of it.
Updates to This Policy
When this policy changes, the updated version goes up here with a new date. Meaningful changes come with direct notification where we can manage it. Checking back occasionally is worthwhile regardless.
It is worth coming back to this page from time to time, even without a prompt from us. Any changes take effect from the moment they are published here.
