O-LINK
// o-link · privacy policy
Your data stays on your devices.
Last updated: 23 October 2026
In short: O-LINK has no accounts and no message servers. Your messages, voice notes, files, contacts and locations are encrypted on your phone and stored only on your own devices and those of the people you send them to. We can't read them, and we don't collect analytics or show ads.
Who we are
O-LINK is made by GOTEAM ("we", "us"). This policy covers the O-LINK apps for Android and iPhone, O-LINK in a web browser, and this website. Questions: use the contact form.
What stays on your device
Everything you create in O-LINK: your device identity and keys, your name, contacts, teams, messages, voice notes, photos, files and the positions you and your teammates share. It is stored encrypted on the device, with the key held in the device's secure keystore (in a browser, in the browser's storage). Positions are kept for 7 days by default. Disappearing messages, if you turn them on, are deleted from every device after the time you choose. Erasing the app, or the panic code, deletes all of it.
What leaves your device, and who can see it
Messages travel end to end encrypted to their recipients, directly or through other O-LINK phones, base stations, Wi-Fi, Bluetooth or LoRa radios. Anything in between sees only ciphertext. To work over the internet, the app uses a few third-party services that never receive message content:
| Service | Why | What it sees |
|---|---|---|
| Public Nostr relays (relay.damus.io, nos.lol, relay.nostr.band) | Help two phones find each other on the internet | Your IP address, a signed presence note and encrypted connection offers. No names, contacts or message content. |
| STUN servers (Google, Cloudflare) | Set up a direct peer-to-peer connection | Your IP address |
| OpenFreeMap | Street map tiles | Your IP address and the map areas you view |
| Hugging Face | One-time download of the on-device speech-to-text model, only if you choose to install it | Your IP address |
| Our download page (crane.glick.run) | Android update check (once a day) and the web version of the app | Your IP address |
| Your mobile carrier | SMS or satellite SMS fallback, only when you use it | That an SMS was sent between two numbers. The content is encrypted. |
Location
Your position is shared only with the contacts and teams you choose, and never with us. Ghost mode stops sharing entirely. SOS and man-down alerts send your position to your teammates even in Ghost mode, because that is what they are for.
Linked computers
When you link a computer to your phone, the computer gets its own keys and a copy of your contacts, teams and recent history, sent end to end encrypted. A linked computer tells your own phone its browser and operating system, its IP address and, if you allow location in the browser, its location, so you can see which computers are linked. This goes only to your own devices.
If your organisation manages O-LINK
If you join an organisation with its join code, its administrators can see your device's status (name, last seen, platform and app version, battery, which links are working) and, if the organisation's rules ask for it and Ghost mode is off, the device's position for the coverage map. They can push team rules, and revoke or wipe the device. The organisation's audit log records metadata such as who sent a message to whom and when, never the content. SOS, man-down and distress alerts, including your position, go to the administrators. Your organisation's own policies apply to that data.
Permissions
- Camera: scanning contact and link codes, taking photos to send.
- Microphone: voice messages and push-to-talk, only while you record.
- Location: sharing your position with your team, the map, SOS.
- Bluetooth and nearby devices: phone-to-phone links and LoRa radios.
- Notifications: new messages and alerts.
Speech-to-text and noise cancellation run on the device. Audio is never sent to a cloud service.
This website
This site sets no cookies and uses no analytics. It loads fonts from Google Fonts, which sees your IP address. If you use the contact form, we receive what you type there (such as your name, email, organisation and your message) and use it only to reply to you.
Children
O-LINK is made for professional teams and isn't directed at children under 16.
Your rights
Because your data is on your devices and not with us, you control it directly: you can view, export (incident reports) or erase it in the app at any time. If your organisation manages your device, contact its administrator about data it holds. For anything else, use the contact form.
Changes
We'll update this page when the app's handling of data changes, and change the date at the top.