The default should be the private one.
A setting that protects you only if you find it is not protection. It is paperwork.
The test
Four things, or it is not a control.
Private firstThe state you get before touching anything is the protective one. Convenience is the thing you opt into, not the thing you have to opt out of.
ReversibleWhat can be turned on can be turned off, and off means stopped rather than paused until the next update decides otherwise.
FindableOne place, in the words a person would actually use to look for it. Not nested three screens down under a heading nobody would think to open.
CompleteWithdrawing a permission withdraws what it collected. Deleting something deletes the copy as well as the original.
What you can ask for
Requests we intend to answer.
There is no product and no account holding your data today, so none of this can be exercised yet. Each is listed with when it becomes real.1
Your data
- See everything held about youAt launch
- Export a copy in a format another program can readAt launch
- Correct what is wrongAt launch
- Delete your account and everything in itAt launch
Permissions
- Withdraw a permission you grantedAt launch
- Refuse a request that would leave the deviceAt launch
- Turn off history without turning off the featureIn development
Ask us
A person reads it.
Oplo is small enough that privacy questions reach the people who decide these things. Write to [email protected] and say what you want to know.