Oliva Devs

Privacy policy

Galleta inspiradora: Fortuna

Effective date: November 4, 2026 · Leer en español

Galleta inspiradora: Fortuna (on this page, “Fortuna”) is an app for Android and iPhone made by Oliva Devs. This page explains what data the app uses, why, who else receives it, and what you can do about it. The app itself is in Spanish only; this page is in English so that anyone can read it.

Who is responsible

Oliva Devs, run by Martín Furón, Argentina.
Contact: olivadevs@gmail.com

Short summary

What data the app handles

Data we send to our server

Our server is a Supabase service. The app talks to it over an encrypted connection (https), with no account or password. This is what it sends and what the server stores:

When a cookie is requested or opened. Each cookie (Of the day, Love, Money and work, Spicy, Health or the Random one) is drawn on the server: it picks a phrase from the bank that you have not opened yet, and a lucky number from 00 to 99. To do that it receives and stores:

The app may request the day's cookies before you open them (for example, all five at startup). In that case the server records what it drew for you even if you never open it; a cookie you never opened becomes available again on another day.

We use this to: give you the same cookie all day even if you close or reinstall the app, avoid repeating phrases until you have seen all those in a cookie, count how many cookies are opened and of what kind, and set a daily limit per installation so nobody overloads the service. Because the server knows which categories each installation opens, it also knows if you open Spicy, even though it does not know who you are.

If you vote on a phrase. If you tap thumbs up or thumbs down, we send the phrase number, your installation number, the day and the vote (or that you removed it). This is optional: it only happens if you tap a thumb. There is one vote per person and per phrase; if you change it, it replaces the earlier one. We use it to learn which phrases people like and which they do not, and to decide which stay in the bank or are retired. The vote is stored together with your installation number for 90 days from your last change; after that it is anonymized and only the count per phrase remains. Until then it is not anonymous. We do not show it to other people. It is also saved on your phone so we can show it again if you see that phrase later, and if there is no connection it is sent when the connection returns.

If you report a phrase. We send the phrase number, a copy of its text (in both versions), your installation number and the reason, if you write one. The reason is free text, up to 200 characters, and optional. We use it to review the phrase and, if needed, retire it. Write only what you want us to read.

If you write to us. In Settings > Escribinos you can leave us a message. We send the text you write (up to 1,000 characters), your installation number and the app version. It is stored on our server so we can read it and use it to improve the app, and it is deleted automatically after 90 days. Since you leave no contact details, we cannot reply that way: if you want an answer, write to olivadevs@gmail.com. There is a limit of 5 messages per day per installation. This is optional: it only happens if you send a message. Write only what you want us to read and do not include personal data.

What we do not send. The app does not send your location, contacts, photos, microphone or camera, nor your phone language, your time zone, or the details of the “No ads” purchase. The daily reminder and the theme (light or dark) also stay on your phone. The app uses your phone language only to choose how to address you (“vos” in Argentina and Uruguay, “tú” elsewhere); the server sends both versions of each phrase and the app picks one.

Technical connection data. As with any internet service, the provider of our server (Supabase) may record technical data about each connection, such as the IP address, in its own operating logs. Our database does not store it in the app's tables, but we do not control those logs or how long they are kept; they follow Supabase's policy: https://supabase.com/privacy

We do all this only so the app works and to understand how it is used. We do not use it for advertising, we do not sell it and we do not build profiles.

Data that stays on your phone

Your phone stores: your installation number, the cookies you have already opened and what came out, your nickname (if you set one), whether the daily reminder is on, the theme, your votes, whether you have bought “No ads”, and any openings that could not yet be sent to the server (until a connection is available). Of all that, only what is described above reaches the server. It is deleted when you uninstall the app. On Android, the app excludes this data from backups. On iPhone, it is included in the backup your iPhone makes to iCloud or to your computer, which Apple handles, not us; if you restore that backup on another iPhone, the app keeps the same installation number.

Daily reminder

They are notifications scheduled by the app on your own phone. They do not go through any server. The app asks for permission after your first cookie. You can refuse it or turn the reminders off in Settings whenever you want. The first one arrives in the morning (on Android, the exact moment is decided by the system). If you still have cookies left to open that day, another one arrives in the afternoon to remind you.

Sharing

When you tap Share, the app builds an image with your phrase, your lucky number and how to find the app in your phone's store, keeps it for a moment in the phone's temporary storage and opens the system share menu. We do not upload it anywhere. What happens next depends on the app you choose. Share Fortuna (in Settings) does the same with an image of the app and the link to its page on Google Play or the App Store.

What data others handle

Google AdMob (ads)

The app shows Google AdMob ads: a banner, one full-screen ad per day between one cookie and the next, another when you open the app (never the first time), and the video that opens the Random cookie. For that, Google's SDK may collect and use, according to what Google declares for its SDK: the device's IP address (which can be used to estimate your general area), device identifiers, including the Android advertising ID (on iPhone, Apple’s advertising identifier is not used), how you interact with ads and the app (for example, taps and video views) and diagnostic information. Google uses it for advertising, analytics and fraud prevention, and sends it encrypted. Google receives that data and handles it under its own privacy policy: https://policies.google.com/privacy

On Android you can limit the use of the advertising ID, reset it or delete it in Settings > Google > Ads. On iPhone, the app does not ask for permission to track you, does not use the advertising identifier, and shows only non-personalized ads. On Android you can also turn off personalization in the ad settings of your Google account.

Europe. For now Fortuna is not offered in the European Economic Area, the United Kingdom or Switzerland, because the app does not yet ask for the ad consent that Google requires there. If that changes, this page will say so first.

If you buy “No ads”, the app stops showing all ads and stops starting AdMob, and the Random cookie opens without a video.

Google Play and the App Store (the purchase)

“No ads” is a one-time purchase made through Google Play on Android and through the App Store on iPhone. The payment, your card details and your purchase history are handled by the store (Google or Apple), not by us. The app only asks the store whether your Google account or Apple ID has that purchase, to remove ads or restore it. Google's policy: https://policies.google.com/privacy · Apple's policy: https://www.apple.com/legal/privacy/

Supabase (our server provider)

Supabase hosts our database and acts on our behalf: it only stores what we send it and does not use it for other purposes. Its policy: https://supabase.com/privacy. Our server is located in the United States (AWS us-west-2, Oregon). This means your data may travel to and be stored outside the country where you live. What AdMob sends to Google is processed by Google on its own servers, in various countries.

Who we share your data with

Nobody besides the providers named above (Google, for ads and for the purchase on Android; Apple, for the purchase on iPhone; and Supabase, for the server), and an authority if a law or court order requires us to. We do not sell your personal data. The data you send to our server is not shared with Google for advertising.

How the phrases are made

The phrases in the bank were written by an artificial intelligence agent and reviewed and approved by the Oliva Devs team. Phrases are not generated while you use the app or from your data.

Accounts and sign-up

They do not exist. There is no way to sign in to Fortuna.

Children

Fortuna is not directed at anyone under 18 and we do not knowingly collect data from anyone under that age. If you believe a minor has used the app, write to us and we will delete what we can.

How long we keep data

WhatWhereFor how long
Openings with nickname (when you opened a cookie, its type and the nickname)Server30 days, deleted automatically
Reports (phrase, reason and installation)Server90 days, deleted automatically
Messages you write to us from the app (text, installation and app version)Server90 days, deleted automatically
Cookie drawn and never openedServer3 days, deleted automatically
Opened cookie (installation, day, category, phrase and lucky number)Server90 days, deleted automatically. It is the memory of which phrases you have already seen
Vote on a phrase (installation, phrase and vote)Server90 days from the last change. After that it is anonymized: the link to your installation is deleted and only the vote count for the phrase remains
Daily cookies for earlier app versions (1.1 to 1.3) and their votesServer7 days, deleted automatically
Everything on your phonePhone (and, on iPhone, its backup)Until you uninstall the app; Apple handles the backup

Everything tied to an installation is deleted automatically within 90 days at most (the cleanup runs once a day, so in the worst case one more day passes). Technical data recorded by Supabase follows its own retention period.

Security

The app talks to our server over an encrypted connection (https), and access to the database tables is restricted: the app can only request, open, vote, report and leave messages. No internet transmission is perfect, but we take reasonable measures to protect the data.

Your rights and how to use them

Depending on where you live (for example, the European Economic Area and the United Kingdom, Argentina, Brazil, Mexico, Colombia, Chile or California), you may have the right to: know what data we hold about you, ask us to correct or delete it, ask for a copy, object to or restrict a use, withdraw any consent you gave, and lodge a complaint with the data protection authority in your country.

Write to olivadevs@gmail.com telling us what you want. Because there are no accounts, we cannot tell which installation is yours unless you tell us. The app shows your installation number in Settings (“My installation number”): copy it and send it in your message, and we will delete everything tied to it, including the messages you wrote to us from the app. Without it we cannot identify your records, and the only thing that happens is what occurs on its own over time, which are the periods above. If you uninstall the app and install it again, your installation gets a new number and the old one can no longer be linked to you (on iPhone, unless you restore a backup that includes it).

We respond within a reasonable time. We do not sell personal data. Regarding California and other US states: we do not sell your data or share it for advertising from our server; what Google's ad SDK does is done by Google, and you can limit it from the ad settings of your device.

Argentine data protection law

Oliva Devs is based in Argentina, and this policy is governed by Argentine law. Law 25,326 on the Protection of Personal Data states that the holder of personal data may exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown. The Agency for Access to Public Information, the supervisory body for Law 25,326, is empowered to handle complaints and claims from those who consider their rights affected. You can consult it at https://www.argentina.gob.ar/aaip.

Changes to this policy

If we change it, we publish the new version on this same page with the update date. If the change is important, we also announce it in the app.

Contact

olivadevs@gmail.com