Your privacy.

Olakunle Abimbola operates The Drop at 12 Calle Tucan, Fuengirola, Malaga, Spain. For privacy questions, data access or deletion requests, write to light@innerdrop.app.

Your account and journal

You can listen to the First Drop without an account. The app stores preferences and journal entries in your browser. Entries made while signed out stay separately on that device. Anyone with access to your browser or device storage may be able to read locally stored entries.

When you sign in, your email identifies your account and receives sign-in links. Your account journal syncs to Supabase when you are online. Each account has separate local storage and database access rules. The maker's workspace does not read your private journal entries.

Signing out removes account content from the screen. It does not erase that account's local browser copy. On a shared device, clear this site's stored data when you finish. This also removes local-only entries and offline downloads, so keep anything you need first.

Personal requests and recordings

A personal request shares your message, contact email and only the journal pages you explicitly select with Ola. Selected pages become copies attached to the request. Changing the original journal entry does not change a copy already shared. Do not send information about another person unless you have permission to share it.

Your words are used to consider and fulfil your request. Personal Drops are written and recorded by Ola, not generated by AI. Please avoid sharing medical records or other information that is not needed for your request.

Recordings are stored in a private Supabase bucket. The app checks your account before issuing a short-lived playback link. Someone you give that link to could use it until it expires; do not share it.

Payments, messages and reminders

Stripe handles card details. The Drop stores payment references, payment status, consent and delivery dates needed to fulfil orders and reconcile refunds. Card numbers are not stored by The Drop.

Emails you send to light@innerdrop.app are forwarded through Porkbun to Ola's Gmail inbox. Sign-in emails use Supabase and Resend. Order follow-up is handled manually.

If you enable quiet-time reminders, the app stores the browser push subscription, chosen hour and time zone. You can turn them off through the journal's quiet-time setting or your browser notification controls.

If you send a feedback note or contact form, Netlify stores the information you submit. Permission to publish a feedback note is a separate choice. Optional feedback and reminders are voluntary.

Why data is used and who provides the service

Account and request information is used to provide the service you request and fulfil commissions. Payment and business records may also be needed to meet legal obligations. Basic technical processing is needed to operate and protect the site. Optional reminders, feedback and permission to publish feedback rely on your choices, which you may withdraw by contacting Ola.

Netlify provides hosting, functions, forms and basic event counters. Supabase provides accounts, journal storage and private recording storage. Stripe processes payments. Resend, Porkbun and Google support email. These providers may process technical or service information outside Spain, including outside the European Economic Area, under their applicable data-processing and transfer arrangements.

The site's first-party counters store daily aggregate page-load totals, broad referrer categories such as Google or direct, and actions such as recording starts and finishes. They work separately from optional Google Analytics. They do not use cookies, persistent visitor identifiers, fingerprinting, names, email addresses, journal/request text, raw URLs, query strings or full referrers. IP addresses and user agents are not stored in these counter records. Browsers requesting Do Not Track or Global Privacy Control and known automated crawlers are excluded. These totals count page loads, not unique people. Hosting and service providers may process IP addresses and technical logs to deliver and protect their services. The app does not put personal writing into analytics.

Optional public-page analytics

If you accept analytics, Google Analytics measures visits to our public explanation pages using cookies. It is off until you accept. Declining does not restrict use of The Drop. You can change your choice through “analytics settings” at the bottom of those pages or this page.

Google Analytics is not installed in the app, journal, personal request or recording screens, contact form, maker workspace or diagnostics. Pages with query strings or fragments are excluded. The configured page information is a fixed public page name and canonical URL. A recognised search-engine referrer is reduced to its origin, such as https://www.google.com/; its path and query are removed. Other referrers are omitted. We do not send journal text, requests, email addresses, recording links or account identifiers to Analytics. Advertising features are disabled.

Your analytics choice is remembered on this browser for up to 180 days. Analytics cookies are configured for up to 180 days. If you withdraw permission, further collection is disabled on this page and the site's Google Analytics cookies are removed. Withdrawing does not erase data already collected; contact light@innerdrop.app for help with privacy requests. Google provides the analytics service and may process data outside the EEA. This setup is intended to measure public-page traffic, not every app visitor.

How long information stays

Your account journal and completed recordings remain available until you request deletion or close your account through Ola. Requests, shared-page copies and working notes are kept to fulfil the commission and address revisions or disputes. You may ask for deletion of these records; information that must be retained for an active order, dispute or legal obligation will be explained separately.

Unsent request drafts are eligible to resume for up to 24 hours. Older local copies may remain in browser storage until overwritten or cleared. Signed-out entries stay on the device until you clear them. Signing out alone does not delete browser storage.

Ola keeps encrypted offline copies of active paid orders and original recordings for recovery. When a deletion request is completed, recovery copies must also be removed or updated, except records that must be retained by law. Payment and accounting records are retained for the period required by applicable law, separately from personal writing where possible.

Your choices and rights

Write to light@innerdrop.app to request access, correction, a copy, deletion, restriction or to object to processing. You can also withdraw optional permissions. Ola may need to verify your account before releasing or changing private information. If some information must be kept, you will be told why. Deletion of an account or recording removes future access to it.

If you have a data-protection concern, you may complain to the Spanish data protection authority, AEPD, or your local supervisory authority.