Privacy at Opinr

Privacy Policy

A clear explanation of the information our products use, why it is needed, and the choices available to you.

Security-conscious User-controlled Clearly explained

Last updated: 2026-10-30

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy has been created with the help of the Free Privacy Policy Generator.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.

  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Opin-R (by Rodab).

  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

  • Country refers to: Washington, United States

  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

  • Personal Data is any information that relates to an identified or identifiable individual.

  • Service refers to Opinr websites and applications, including CiviMigo and the Ma'alob website and Android and iPhone applications.

  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

  • Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

  • Website refers to Opin-R (by Rodab), accessible from https://opinr.co

  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address

  • First name and last name

  • Phone number

  • Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Information from Third-Party Social Media Services

The Company may allow You to create an account and log in through the third-party sign-in providers shown on the registration or login page, including:

  • Google

If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, Your activities or Your contact list associated with that account.

You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service's account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.

  • Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. Learn more about cookies on the Free Privacy Policy website article.

We use both Session and Persistent Cookies for the purposes set out below:

  • Necessary / Essential Cookies

    Type: Session Cookies

    Administered by: Us

    Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

  • Cookies Policy / Notice Acceptance Cookies

    Type: Persistent Cookies

    Administered by: Us

    Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

  • Functionality Cookies

    Type: Persistent Cookies

    Administered by: Us

    Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to monitor the usage of our Service.

  • To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.

  • For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.

  • To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.

  • To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.

  • To manage Your requests: To attend and manage Your requests to Us.

  • For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.

  • For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

  • With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.
  • For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
  • With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
  • With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If You interact with other users or register through a Third-Party Social Media Service, Your contacts on the Third-Party Social Media Service may see Your name, profile, pictures and description of Your activity. Similarly, other users will be able to view descriptions of Your activity, communicate with You and view Your profile.
  • With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service.

You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

  • By email: admin@opinr.co

Ma'alob Supplemental Privacy Notice

This supplemental notice applies to Ma'alob features that are part of the Opinr platform and is intended to complement the Privacy Policy above.

How Ma'alob and Opinr Share Data

When You sign in to Ma'alob with your Opinr account, we receive and store identifiers and profile data from Opinr (for example, your Opinr user ID, name, email address, phone number, alias or username, profile image, and account role claims) to create and manage your Ma'alob profile and access rights.

Ma'alob also sends limited information to Opinr to deliver invitation and alert emails, including emergency contact details (name, email, phone number, preferred language, and message), alert type, timestamps, and location data if you enabled location sharing.

Emergency Contacts and Alerts

You may add emergency contacts and customize alert messages. We store contact details, priority order, invitation status, and related timestamps (sent, accepted, or declined). You confirm that you have permission to share this information with us and to contact those people for safety alerts.

If a contact accepts an invite using an Opinr account, we may link that contact to an Opinr identifier to confirm the invitation and manage alert delivery preferences.

When a duress check-in, missed check-in, or deliberate safety alert occurs, we may notify your approved contacts with alert information such as your name, email, alert reason, check-in time, and your location if available and enabled. Provider acceptance does not prove that a contact received or read a message.

Check-ins, Schedules, and Safety Settings

To provide Ma'alob safety features, we store:

  • Check-in PIN (stored as a hash), safety preferences (such as duress and location settings), and security lockout information.

  • Check-in schedules, grace periods, and blackout windows (including times and any optional reason you provide).

  • Check-in events and alert history, including status (ok, duress, or missed) and timestamps.

Location Information

If you enable location sharing, Ma'alob collects your device's location at the time of a check-in and stores coordinates, accuracy, label, and timestamp. We do not continuously track your location.

Location data may be included in duress alerts and, for missed check-ins, we may share your last known check-in location with your emergency contacts and display it on a map within Ma'alob.

Third-Party Services Used by Ma'alob

Ma'alob uses Google Maps to render location previews and maps. When these features are used, Google may receive device and usage information (such as IP address and approximate location) as described in Google's privacy policy.

Ma'alob uses Google reCAPTCHA (Invisible v2) to protect quick check-in forms from abuse, which may collect device and behavioral data according to Google's terms.

Mobile Push Notifications

Push availability depends on the mobile platform and service configuration. The current Ma'alob iPhone release does not offer push opt-in and does not register an iPhone push token while iOS push is disabled. Where push is offered and you opt in, Google Firebase creates or uses a Firebase installation identifier and related push-routing information. On iPhone, Apple Push Notification service also uses a device token to route notifications. Ma'alob binds provider identifiers to the current mobile session and deactivates and erases them when you opt out, sign out, or the bound session ends.

When push is enabled, the message itself contains only routing fields such as a schema version, event type, internal event and session identifiers, and issue and expiry times. It does not contain contact details, location, custom messages, or alert text. The app requests the current, access-controlled inbox record from Ma'alob before showing generic local information. Apple and Google may process device, network, routing, and delivery information as described in their privacy terms.

Account Status and Deletion Sync

If your Opinr account is deleted or deactivated, Ma'alob may receive a deletion notice and will deactivate your Ma'alob access and record the deletion status and reason where provided.

A Ma'alob account and an Opinr account can have separate deletion journeys. Deleting only your Ma'alob account removes the Ma'alob account and its associated safety data but does not by itself delete an Opinr account. You can use Ma'alob's in-app account controls or the Ma'alob web account-deletion page after signing in. We may retain limited records when required for security, dispute resolution, or legal obligations, as described above.

Open the Ma'alob account-deletion page →

Admin and Support Access

Authorized administrators may access Ma'alob data (such as contacts, schedules, and alerts) to provide support and maintain safety features.

SMS Communications and Opt-Out

By providing your phone number, you agree that Opinr and Ma'alob may send you SMS text messages related to check-ins, safety alerts, security verification, and account or service notices.

You can opt out of SMS messages at any time in your account settings or by removing your phone number from your profile. Opting out of SMS may limit or disable text-message safety notifications.

Message frequency depends on your account activity and safety schedule settings. Message and data rates may apply according to your mobile carrier plan. Mobile carriers are not responsible for delayed or undelivered messages.

If you opt out or remove your phone number, we may keep a limited record of your prior SMS consent and preference changes when required for legal compliance, security, and audit purposes.

CiviMigo Supplemental Privacy Notice

CiviMigo notice updated: October 15, 2026

CiviMigo is a citizenship-study application operated by Opinr. This notice explains the information used by CiviMigo on Android and iPhone and supplements the general Opinr Privacy Policy. The descriptions of Opinr accounts, Maalob contacts, safety alerts and location sharing above do not mean those features or data flows are used by CiviMigo. For CiviMigo-specific practices, this notice applies.

The CiviMigo+ purchase descriptions below apply to releases that offer CiviMigo+, beginning with version 0.10.0, where the app, product and store service are available. Earlier releases, including version 0.9.1, do not include in-app billing.

Study information stored on your device

CiviMigo does not require a CiviMigo or Opinr account. It stores study information locally: selected language, sound preference and daily goal; tutorial completion and the accepted agreement version and time; current and historical practice sessions, selected answers, correct and incorrect responses, retries, failed attempts, lives and difficulty; points, historical XP, study dates, streak records, bookmarks and study checkmarks. Sessions also record measured foreground study duration when available; older sessions may have no recorded duration. Local advertising-frequency records store qualifying first path-day completions and ad-display times.

These records let the app resume exercises, repeat mistakes, display progress, unlock study days, remember your choices and limit advertising frequency. CiviMigo does not upload the study database to an Opinr service. We do not deliberately send study answers, points or the progress database to Google, set an advertising user ID, or provide study-based custom targeting. Someone with access to your device or its records may be able to see your study activity.

Google AdMob and advertising data

CiviMigo uses Google AdMob through the Google Mobile Ads SDK and Google's User Messaging Platform (UMP). The app requests non-personalized ads. Google and its advertising services may nevertheless collect and share network, device and app information, including IP address and approximate location inferred from it, app-set or session identifiers, ad views and interactions, diagnostics and performance data. This information supports advertising delivery, measurement and fraud prevention. Non-personalized ads do not mean that no data is collected or that no network requests are made.

CiviMigo removes the Android advertising-ID permission and does not request App Tracking Transparency authorization on iOS; its configuration is intended not to use IDFA. Other app or session identifiers and network data may still be processed. Advertising services may store or access information on your device according to the applicable privacy choices and their own policies.

For users without a valid verified CiviMigo+ entitlement, an available full-screen ad may appear only after a new normal or English Real Mode path day is successfully saved, before the interactive completion summary. Only the first successful completion of each such day counts. An ad may appear after every three qualifying completions, at least ten minutes apart. Random practice, review, retakes, failed lessons, questions and app opening do not trigger ads. Valid verified CiviMigo+ ownership disables new ad requests and displays and discards previously loaded ads; it does not recall advertising information transmitted before the purchase.

Accepting the required CiviMigo study agreement is not advertising consent and does not replace your Google UMP privacy choices. UMP may contact Google to check or present applicable privacy choices before ad loading. CiviMigo initializes Google Mobile Ads and requests ads only after UMP reports that ads may be requested.

The Ad privacy choices entry in Progress opens Google's privacy options when available or required. The options and their availability depend on your region and Google's requirements. You can use that entry to review or change the choices the form offers. A connection error, unavailable privacy form, unavailable ad or offline connection does not block the core study features.

Google explains its processing and controls in its Privacy Policy and advertising settings. These external controls may require a Google account or connection; CiviMigo itself does not require an account.

CiviMigo+ purchase information and store services

CiviMigo+ is an optional one-time, non-consumable purchase for ad-free access. Google Play or Apple associates the purchase with its own store account and processes the payment. CiviMigo does not ask for your store account password or email address and does not receive your full payment-card or bank details. The app processes the store product identifier, localized price information, transaction or order identifiers, signed purchase evidence, purchase status and verification/entitlement status to verify, deliver and restore access and reconcile ownership changes.

Purchase, restore and ownership checks communicate with the applicable store through its billing services. The app verifies purchase evidence on the device and caches verified evidence and the associated entitlement in operating-system secure storage, separate from the ordinary study database, so confirmed ad-free access can continue offline. This release does not send purchase evidence to an app-owned verification server, maintain a remote Opinr purchase database or create a CiviMigo or Opinr purchase account. We do not deliberately send purchase evidence, order identifiers or paid-status records to AdMob.

Use Restore purchases in the CiviMigo+ tab with the same store and store account after reinstalling or changing devices. First verification or restoration may require a connection and an available store service. Google Play and Apple purchases are separate and do not transfer across stores. Restoring ownership does not restore deleted local study progress. Pending, canceled, failed or unverified payments do not establish permanent paid access. A store connection failure does not by itself remove confirmed saved access. Successful later store checks may update access after a refund, revocation or another ownership change; an offline cache may not yet reflect a recent change until the store can be checked.

The stores handle payment information and retain transaction records under their own terms, privacy notices and legal obligations. See Google's Privacy Policy and Apple's Privacy Policy. Purchase authorization, required study-agreement acceptance and advertising consent are separate actions. You may continue free study without purchasing, and unavailable billing does not block the core study features.

Retention, deletion and security

Local records remain in app storage until removed through device or app controls or replaced by later activity. Clearing the app's storage or uninstalling removes local progress and agreement records, subject to the device's backup and restoration behavior. Android automatic app backup is disabled. Device migration, backups, store diagnostics and operating-system services are managed by their providers. Protect access to your device and review its backup settings.

Device sandboxing and normal platform protections are used. We do not claim that the study database has separate application-level encryption or that any system is perfectly secure. Google manages its advertising and privacy-service storage and server retention under its policies. Clearing local data or uninstalling does not recall information already sent to Google. Use the available Google controls and contact channels for requests concerning its services.

Purchase evidence in operating-system secure storage can have different retention and deletion behavior from the study database and may persist depending on the platform. Clearing app data or uninstalling does not cancel a completed non-consumable purchase or erase the store's transaction records. Valid ownership can be restored through the original store account. Google or Apple controls retention of its payment and transaction records; a request to Opinr cannot erase records that a store must or may lawfully retain. Cached entitlement evidence is updated or removed when an authoritative store check establishes that the entitlement is no longer valid.

Support, external services and future features

Official websites, public policy links and advertisements may open external services that receive network and browser information and apply their own privacy practices. If you voluntarily contact support, Opinr receives what you send and may use it to respond, investigate the issue and meet legal obligations. Do not include unnecessary immigration documents, identification numbers, passwords or other sensitive information.

CiviMigo does not currently provide AI interview evaluation or record microphone audio. The CiviMigo+ purchase does not authorize online AI processing, microphone access, personalized advertising or recurring billing. If AI or voice features are introduced, their actual data handling, providers, permissions, costs and choices will be explained before use. Accepting the study agreement does not supply that future consent. If support needs a purchase reference to investigate a restore problem, send only the relevant store order reference and avoid account passwords, full card details or unnecessary sensitive information.

For CiviMigo support, privacy questions or an applicable privacy-rights request, email admin@opinr.co. Requests will be verified proportionately. Opinr cannot remotely retrieve or erase a database that exists only on your device. Nothing in this notice removes applicable privacy or consumer rights. See also the CiviMigo terms.