Privacy Policy

1. Introduction

This Privacy Policy describes how OppoLab Mobile ("OppoLab," "the App," "we," "us," or "our") collects, uses, stores, and protects information from users of the OppoLab Mobile application and the associated web platform at oppolab.io. OppoLab Mobile is a field operations platform designed for use by campaign volunteers and staff to coordinate political field activities.

By downloading, installing, or using OppoLab Mobile, you agree to the collection and use of information as described in this policy. If you do not agree with this policy, do not use the App.

2. Information We Collect

2.1 Account Registration Data

When you register for an account through OppoLab Mobile, we collect the following personal information:

• Full name
• Email address
• Regional assignment (assigned by a campaign administrator)
• Account role (volunteer, regional director, campaign leadership, or superadmin)

Account creation requires an access code issued by a campaign administrator. Accounts are not self-service and are subject to approval before access is granted.

2.2 Field Activity Data

During the course of field operations, the App collects data entered by volunteers and staff, including:

• Doors knocked (including address or location information if entered)
• Event attendance and check-in records
• Voter contact records, including notes and engagement levels
• General observations logged in the field
• Date and time of activity submissions

2.3 Technical Data

We may collect limited technical data to ensure the proper functioning of the App, including device type, operating system version, and app version. We do not use this data for advertising purposes.

3. How We Use Your Information

Information collected through OppoLab Mobile is used solely for the following purposes:

• To authenticate and manage user accounts
• To record, store, and display field activity data for authorized users
• To enable campaign administrators and regional directors to coordinate field operations
• To send push notifications related to campaign operations to authorized users
• To generate operational reports and data exports for campaign use
• To maintain and improve the performance and security of the App

We do not use your data for advertising, marketing, or profiling purposes. We do not build behavioral profiles of users or sell data to third parties.

4. Data Storage and Security

Field activity data may be stored temporarily on your device to support offline functionality. This locally stored data is synced to Firebase Firestore, a cloud-hosted database operated by Google LLC, when an internet connection is available.

All data transmitted between the App and Firestore is encrypted in transit using TLS. Firestore data is encrypted at rest. Access to all data stored in Firestore is governed by role-based security rules that restrict access based on your assigned role and region.

We implement reasonable administrative and technical safeguards to protect your information against unauthorized access, alteration, disclosure, or destruction.

5. Role-Based Access Controls

Access to data within OppoLab is strictly controlled based on user roles:

• Volunteers — Can only view and access their own submitted data.
• Regional Directors — Can view all submissions and data within their assigned region only.
• Campaign Leadership — Can view submissions and data across all regions.
• Superadmin — Has full access to all data, user management, and system settings.

These access controls are enforced at the database security rules level, not merely at the interface level.

6. Data Sharing

We do not sell, rent, trade, or otherwise share your personal information with third parties for commercial purposes.

Data may be shared in the following limited circumstances:

• Service providers: We use Firebase (Google LLC) for authentication and database services. Google's use of data is governed by the Firebase Terms of Service and Google's Privacy Policy.
• Legal requirements: We may disclose information if required to do so by law or in response to a valid legal process.

7. Push Notifications

OppoLab Mobile may send push notifications to users regarding campaign operations. These notifications are sent using Firebase Cloud Messaging (FCM). Notifications may be targeted to all users, users in a specific region, or users with a specific role. You may disable push notifications at any time through your device's operating system settings.

8. Data Retention

Account and field activity data is retained for the duration of the associated campaign and for a reasonable period thereafter for operational and reporting purposes. User accounts that are deactivated will no longer be able to log in, but associated data may be retained for record-keeping purposes unless deletion is requested.

9. Your Rights and Account Deletion

You have the right to request access to, correction of, or deletion of your personal data stored by OppoLab. To submit a data request or request account deletion, please contact the campaign directly using the contact information provided at the time of your onboarding, or email the account administrator.

Account deletion requests will be processed within a reasonable timeframe. Deletion of your account may result in the removal of your personal identifiers, though aggregated or anonymized operational data may be retained.

10. Children's Privacy

OppoLab Mobile is intended for use by adults and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Continued use of the App after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, you may contact the OppoLab campaign administration team through the app's designated contact channel provided during onboarding. This privacy policy is also available at oppolab.io/privacy and is publicly accessible without requiring a login.