Last updated: September 2026
This policy covers the Oula app for iPhone, the Oula extension for Safari, and this website. Oula is operated from Dubai, United Arab Emirates. If you only visit the website, the short version is at the bottom under The website.
Oula does not have a password. You sign in with Apple or with Google, and our sign-in provider Clerk creates the account. From that we receive your name and your email address. If you use Sign in with Apple and choose to hide your email, we receive the private relay address Apple gives us and never your real one.
We store an account identifier for you, and we attach the things you do in the app to it: the answers you give in the taste quiz, the items you save, and whether you want price alerts.
We record the products you view, the searches you run, the items you save, and the products you tap through to buy. This is what builds your feed. Without it, Oula cannot show you a shop that reflects your taste, which is the whole point of the product.
These events are stored against your account and are also sent to PostHog, our analytics provider, where they are linked to the same account identifier.
If you use search by picture, the photo you take or choose is sent to our servers and passed to Anthropic, which reads the style of the item so we can find similar pieces.
We do not store the photo, and we do not store anything derived from it. The request is not signed in to your account, so the photo is never attached to you. Anthropic processes it to answer the request and does not use it to train models.
The extension only runs on sites you allow it to run on. Safari asks you per site, and you can revoke it at any time in Settings.
When it is active on a shopping page, it sends the address of that page to our servers so we can look up the item and show you comparable pieces and a price read. That address is not attached to your account, and the request is not signed in. If the item is one we do not already carry, we may add it to our catalogue.
The first time it runs, the extension creates a random identifier for itself and keeps it on your device. It is sent when you tap through to a shop, so that a person who taps five times is counted once rather than five times. It is not derived from anything about you, your account or your device, it is never given to the sites you visit, and removing the extension removes it.
The extension does not read pages on sites you have not allowed, and does not collect form fields or passwords.
If you turn on Sync browsing to Recents in the app's Settings, the extension also passes the items you view on shopping pages to the Oula app, so they appear in your Recents. This is a list of products you looked at, kept as the address, title, brand, price, image and time viewed for up to the 50 most recent items. It stays on your device, is shared between the extension and the app only, and is never sent to our servers. This setting is off unless you turn it on, and turning it off stops any further items being added. We keep no other record of the pages you visit.
If you turn on price alerts, we store a push token for your device so we can notify you when something you saved drops in price. Notifications are delivered through Expo's push service and Apple's Push Notification service. We also store basic device information used to attribute activity before you sign in.
Oula uses the following external services. We do not share your data with anyone else.
We do not sell your data. We do not share it with advertising networks or data brokers. We do not track you across other companies' apps and websites, which is why Oula never asks for permission to do so. We do not run ads.
Oula does not sell anything and never sees your payment details. When you tap through to buy, you leave Oula and land on the retailer's own site, where their privacy policy and their returns policy apply.
We record that the tap happened, which item it was for, and which retailer it went to. Alongside that we keep the browser or app that made the request, and a one-way hash of your IP address, keyed with a secret only we hold. We do not store the address itself.
We keep these for two reasons. They let us tell a real tap from the automatic link previews that messaging apps generate, which would otherwise be counted as people. And they let us report how many separate people tapped through to a shop, rather than how many taps there were, which is the figure a retailer asks for when we approach them about a partnership. It is not used to build a profile of you or to decide what you are shown. We do not pass it to the retailer: they see the visit your browser makes, exactly as they would from a link anywhere else.
When a tap cannot go through our own link and opens the shop directly instead, we note that it happened and which retailer it was for, so we know how much of the count above is missing. That note is sent to PostHog. It carries no address and no hash.
You can delete your account inside the app, at any time, from Profile then Settings then Delete account. It is immediate and it cannot be undone. It removes your profile, your saved items, your taste profile and your alerts, and it deletes your sign-in identity, so signing in again gives you a genuinely new account. The browser and hashed IP address recorded against your past tap-throughs are erased at the same time.
Two things survive deletion, and neither can be traced back to you. We keep a one-way hashed record that a deletion happened, so we can prove we honoured it. And we keep past activity events with the account identifier stripped out and replaced by that same hash, so our aggregate numbers do not silently change. Neither can be reversed to recover your identity.
You can also ask us to delete your data by writing to hello@getoula.com.
We keep your account data for as long as your account exists. Activity events are kept to build and improve your feed. Photos you search with are not kept at all. If you delete your account, everything above happens immediately.
Oula is not directed at children and we do not knowingly collect data from anyone under 13. If you believe a child has given us data, write to hello@getoula.com and we will remove it.
You can browse getoula.com without an account. We use basic session cookies to make the site work, and PostHog to count page views and understand which pages are useful. There are no advertising cookies and nothing that follows you to other websites. There is no cookie banner because there is nothing to consent to beyond the minimum needed to serve the page.
If you tap through to a retailer from the site, we make the same record described under Buying something.
If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will also be surfaced in the app.
This privacy policy is governed by the laws of the United Arab Emirates. Oula is operated from Dubai, UAE.
Questions about this policy or your data: hello@getoula.com.