Applies to residents of the European Economic Area, Switzerland and the United Kingdom. If you reside outside those territories, this Privacy Policy applies to you instead.
Effective: 23 August 2026
This Privacy Policy describes how we collect and use personal data when you use Ola, the Ola mobile application, and the website at tryola.ai (together, the "Service").
Ola is currently a free, invitation-only beta. Our Terms of Service govern your use of it.
1. Who is responsible for your data#
The controller of your personal data, within the meaning of the General Data Protection Regulation, is:
Jayden Robert Bruck
Dieburger Straße 48A
63303 Dreieich
Germany
contact@tryola.ai
Write to us at contact@tryola.ai about anything in this policy, including to exercise the rights described in section 9.
We have not appointed a data protection officer, as we are not required to do so.
2. Personal data we collect#
Data you provide.
- Account data. Information associated with your account, such as your name, email address, telephone number, credentials, and date of birth or age confirmation.
- Your Content. Everything you provide to the Service and everything the Service produces for you in response, in whatever form: messages you write or dictate, the audio and video of conversations and calls, photographs and files you send, images, video and audio the Service generates, documents and software the Service produces for you, and information the Service retrieves at your request from sources you connect it to.
- Communications. The content of messages you send us, for example by email or through support channels.
- Other information you provide. Information you give us when you take part in a survey, respond to a request, or confirm your identity or age.
Data we collect when you use the Service.
- Activity data. How you use the Service and what it does in response: the features you use, the requests you make, the actions the Service performs for you, and the outcome of those actions.
- Technical and log data. Information your device and browser send automatically, such as IP address, device and browser type and settings, operating system, device identifiers, language, time zone, and the dates and times of your requests.
- Approximate location. The general area you are in, derived from technical data such as your IP address, for security and to make responses more relevant.
- Precise location, contacts, camera, microphone and photos. Only where you grant the relevant permission on your device, and only for the features that use it. You can withdraw any of these permissions at any time in your device settings.
- Connected account data. Where you connect a third-party account, the information and content from that account that the Service needs in order to do what you have asked it to do.
- Cookies and similar technologies. We use cookies and similar technologies on our website to operate it, to keep it secure, and to remember your preferences. Where consent is required, we ask for it before setting non-essential cookies.
Data from other sources. We receive information from providers that help us operate the Service, keep it secure and prevent abuse, and from publicly available sources.
3. How we use personal data#
We use personal data:
- to provide, maintain and operate the Service — to answer your requests, to carry out the actions you instruct, to run the features you use, and to support you;
- to improve and develop the Service — to understand how it is used, to diagnose problems, to measure and improve quality and cost, to build new features, and to derive reusable capabilities from what the Service builds, so that what works once works for everyone. Before anything derived becomes available to another member, it passes through a process designed to remove what is personal to you. Section 8 of the Terms of Service sets out the licence this rests on;
- to personalise the Service — so that it remembers what you have told it and what it has learned while working for you, and can respond in a way that reflects that;
- to communicate with you about the Service, including changes to it;
- to keep the Service safe — to detect, investigate and prevent fraud, abuse, security incidents and violations of our Terms and Acceptable Use Policy, including by reviewing Content;
- to comply with the law and to establish, exercise or defend legal claims.
We also aggregate or de-identify personal data so that it no longer identifies you, and use it for the purposes above.
Storage and access. We store your Content and your activity in the Service on systems we operate. Our personnel are able to access it for the purposes set out in this section. Access is restricted and recorded. We will not tell you that we are unable to see your data, because for the purposes described here we are.
4. Special categories of data#
The Service is not designed for special categories of personal data, and section 10 of the Terms asks you not to submit such data about other people.
Where you choose to include data about yourself that falls into a special category under Article 9 GDPR, we process it on the basis of your explicit consent, which you give by choosing to submit it, and only for the purposes set out in this policy. You can withdraw that consent at any time by writing to contact@tryola.ai or by deleting the relevant Content, which does not affect the lawfulness of processing before withdrawal.
5. Legal bases for processing#
| Purpose | Legal basis |
|---|---|
| Providing, maintaining and operating the Service, answering your requests, and carrying out the actions you instruct | Performance of a contract with you — Art. 6(1)(b) GDPR |
| Personalising the Service so that it remembers what you have told it | Performance of a contract with you — Art. 6(1)(b) GDPR |
| Improving and developing the Service, including analysing how it is used and building new features | Our legitimate interests in operating and improving a product that works — Art. 6(1)(f) GDPR |
| Deriving reusable capabilities from what the Service builds, and making the derived result available to other members after removing what is personal to you | Our legitimate interests in improving the Service for every member — Art. 6(1)(f) GDPR |
| Keeping the Service safe, preventing fraud and abuse, and enforcing our terms | Our legitimate interests in the security and integrity of the Service, and in protecting our users — Art. 6(1)(f) GDPR |
| Communicating with you about the Service | Performance of a contract — Art. 6(1)(b) GDPR — and our legitimate interests — Art. 6(1)(f) GDPR |
| Using precise location, contacts, camera, microphone or photos | Your consent, given through your device permissions — Art. 6(1)(a) GDPR |
| Special category data you choose to submit about yourself | Your explicit consent — Art. 9(2)(a) GDPR |
| Complying with legal obligations, and establishing, exercising or defending legal claims | Legal obligation — Art. 6(1)(c) GDPR — and our legitimate interests — Art. 6(1)(f) GDPR |
Where we rely on legitimate interests, we have considered your interests and rights, and you have the right to object as described in section 9.
6. Who we share personal data with#
We do not sell personal data, and we do not share it for advertising.
We share personal data with:
- Providers who help us run the Service. These include providers of hosting and infrastructure, artificial intelligence model and inference services, speech and language processing, image, audio and video generation, telephony and messaging, push notifications, email delivery, content delivery and network security, storage and backup, and support and abuse-prevention tooling. They act on our instructions and may access, process or store personal data only in the course of performing their duties to us.
- Third parties you connect or direct us to. Where you connect an account or ask the Service to interact with an external service, the information necessary to do that is shared with that service, and is then governed by its own terms and privacy policy.
- Authorities and others, where the law requires or permits it. We may disclose personal data where necessary to comply with a legal obligation, to enforce our terms, to detect or prevent fraud or other unlawful activity, to protect the safety, rights or property of our users, ourselves or the public, or to establish, exercise or defend legal claims.
- A successor, if the business associated with the Service is transferred, in which case personal data may be disclosed in the course of the transaction and transferred with the other assets.
7. International transfers#
Some of the providers described in section 6 are located outside the European Economic Area, including in the United States.
Where we transfer personal data outside the EEA, we do so on the basis of an adequacy decision of the European Commission, or under the European Commission's standard contractual clauses together with appropriate additional safeguards, or on another lawful transfer mechanism.
You can ask us for information about the safeguards that apply to a particular transfer by writing to contact@tryola.ai.
8. How long we keep personal data#
We keep personal data for as long as we need it for the purposes described in this policy, and thereafter where we are required or permitted to keep it — for example to comply with a legal obligation, to prevent fraud and abuse, to keep the Service secure, or to establish, exercise or defend legal claims.
Your Content and the record of what the Service did for you are kept for as long as your account is open, so that the Service can go on working for you and so that we can operate and improve it. We do not delete it automatically after a fixed period.
You can ask us to delete your data, or to close your account and delete it, at any time by writing to contact@tryola.ai. We will do so within a reasonable period, except where we are required or permitted to retain particular data as described above. Deletion may not be possible where data has already been aggregated or de-identified so that it no longer relates to you.
When we decide how long to keep particular data, we consider what we need it for, how much of it there is and how sensitive it is, the risk of harm from unauthorised use or disclosure, and any legal requirement that applies to us.
9. Your rights#
You have the following rights in relation to your personal data:
- Access — to obtain confirmation of whether we process your personal data, and a copy of it (Art. 15 GDPR).
- Rectification — to have inaccurate personal data corrected and incomplete data completed (Art. 16 GDPR).
- Erasure — to have your personal data deleted in the circumstances the law provides for (Art. 17 GDPR).
- Restriction — to have our processing restricted in the circumstances the law provides for (Art. 18 GDPR).
- Portability — to receive personal data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible (Art. 20 GDPR).
- Objection — to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, including the processing described in section 3 for improving and developing the Service (Art. 21 GDPR). Where you object, we will stop that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
- Withdrawal of consent — where we rely on your consent, to withdraw it at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3) GDPR).
To exercise any of these rights, write to contact@tryola.ai. We will respond within one month, and will tell you if we need longer.
A note on accuracy. The Service generates responses by predicting the words most likely to follow a request. Those words are not always factually accurate. If the Service produces factually inaccurate information about you and you would like it corrected or removed, write to contact@tryola.ai. We will consider your request in light of applicable law and of what is technically possible.
Complaints. If you are not satisfied, you can lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement. Our lead supervisory authority is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
https://datenschutz.hessen.de
10. Security#
We take technical and organisational measures designed to protect personal data against loss, misuse, and unauthorised access, disclosure, alteration and destruction. These include access controls and the recording of access to member data.
No system is completely secure, and no transmission over the internet is ever fully secure or error-free. Please take care in deciding what you provide to the Service. We are not responsible for the circumvention of privacy settings or security measures in third-party services.
11. Automated decision-making#
We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you, within the meaning of Art. 22 GDPR. The Service generates responses and performs actions on your instruction; the decisions about what to ask for and what to do with the result are yours.
12. Children#
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe that someone under 18 has provided personal data to us, write to contact@tryola.ai and we will investigate and, where appropriate, delete it.
13. Changes to this policy#
We may update this policy as the Service develops or as the law changes. Where a change materially affects you, we will tell you by email or by notice in the Service before it takes effect. The date at the top of this policy shows when it was last updated.
14. Contact#
Jayden Robert Bruck
Dieburger Straße 48A
63303 Dreieich
Germany
contact@tryola.ai