Privacy
Your data, made clear.
Last updated 23 July 2026. Controller: Andrea Dessi, trading as Ondaloo (United Kingdom). ICO registration pending.
This covers the Ondaloo app (move.ondaloo.app) — your account, your relocation plan, and anything you submit to us here. The waitlist site has its own, shorter policy at ondaloo.app/privacy.
What we collect
When you create an account, we collect your name, email and password (handled by our authentication provider — we never see or store your password in plain text).
When you build your plan, we collect what you tell us: your nationality, the country you're moving from and to, your purpose (work, study, retirement, etc.), your household, your timeline, and which tasks you've checked off. This is the minimum needed to build a plan that's actually yours.
If you apply as a founding mover, the application form also collects your origin/destination, timeline, and a free-text answer about the hardest part of your move.
Where it's stored
Everything lives in our Supabase database, in tables scoped to your account with row-level security — no one else's account can read or write your data, and neither can we, outside of supporting you directly.
Founding-mover applications go into a separate, write-only table that only the founder can read — it's reviewed by hand, not exposed through the app.
Why we collect it
To build and show you your personalised relocation plan, to keep your account working (sign-in, password resets, email changes), and — if you opt in — to email you about new routes or product updates. If you accept our analytics cookie, we also use anonymised usage data to understand what's working and improve the product — see "Analytics" below.
Analytics
We use PostHog, hosted in the EU, to understand how the Ondaloo app is used — which pages and features get used, and an approximate location from your device and IP address (we don't collect precise location). This is for improving the product only: we never sell or share this data with advertisers, data brokers, or anyone else.
Analytics is entirely opt-in. Nothing loads and nothing is tracked unless you accept the cookie banner shown on your first visit — decline, and no analytics runs at all. We keep analytics data for 12 months, then it's deleted. You can withdraw consent at any time by clearing your browser's site data for move.ondaloo.app, or by emailing us at the address below.
Who sees it
Nobody but you, except the founder reviewing founding-mover applications, and our infrastructure providers (Supabase for the database, Netlify for hosting) acting strictly as processors. We don't sell, rent, or share your data with advertisers or data brokers.
Your rights, and deleting your account
You can update your profile, change your password, or delete your account at any time from your profile settings. Deleting your account permanently removes your account and everything in it — your plan, tasks and documents — with no undo.
You can also ask us to send you a copy of what we hold, correct anything that's wrong, or delete it, by emailing andreadessi.work@gmail.com — we aim to respond within 30 days. The same address is where to raise a complaint directly with us. If you're in the UK, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO). If you're in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.
Questions
Email andreadessi.work@gmail.com for anything about your data.