Preliminary version, subject to review before launch.
Oki Privacy Policy
Last updated: [DATE]
This Policy explains how Oki handles your personal data. Privacy contact: [email protected].
Brazil's LGPD (Law 13.709/2018) applies and, for users in the EEA and the UK, the GDPR.
1. Summary
- We collect the minimum needed for the app to work.
- Health data (medications, doses, meals, exercise) is processed with explicit consent and leaves your device only to our servers and to people you choose to share with.
- We do not sell your data. With your permission, some usage events without health data (e.g. install, trial start, subscription) are shared with Meta and Google to measure and improve Oki's marketing campaigns.
- Medication names, notes and photos are never sent to analytics or advertising tools.
- You can export or delete everything at any time inside the app.
2. Data we collect
You provide:
| Data | Example | Legal basis |
|---|---|---|
| Account | Display name, email | Performance of a contract |
| Health data | Medications, doses, times, dose history, meals, meal photos, workouts, notes | Explicit consent (LGPD art. 11(I); GDPR art. 9(2)(a)) |
| Sharing settings | Link label, scope, history window, expiry | Performance of a contract |
| Support and feedback | Messages you send us | Legitimate interest |
Collected automatically:
| Data | Purpose | Legal basis |
|---|---|---|
| Anonymous identifier, platform, app version, language, time zone | Run the app and measure aggregate usage | Legitimate interest |
| Usage events (e.g. dose logged, link created), without sensitive content | Understand what works in the product | Legitimate interest |
| Campaign events (install, sign-up completed, trial start, subscription, link created or followed) without health data, and the device advertising identifier | Measure and optimize Oki's campaigns on Meta and Google | Consent, requested through the iPhone tracking prompt; can be declined or withdrawn in device settings |
| Crash and error reports | Fix failures | Legitimate interest |
| Subscription status | Unlock paid features | Performance of a contract |
We do not collect location, contacts, card details (held by Apple or Google) or data from people under 18.
3. How we use it
- Deliver reminders and keep your history
- Sync across your devices and generate the sharing pages you create
- Send missed-dose alerts to people you authorized
- Provide support and answer requests
- Measure aggregate usage and fix errors
- Comply with legal obligations
We do not use your data to train AI models. Health data is never used for advertising.
4. Link sharing
When you create a link, the content you selected becomes accessible to anyone holding the address, with no account required. The address is long and random, and these pages are not indexed by search engines. Even so, a recipient can forward the link. You choose the scope and duration, and you can revoke it at any time.
5. Who we share with
We do not sell data. We share only with processors needed to run the service:
| Processor | Role | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | [REGION] |
| Cloudflare | Website and sharing page hosting | Global network |
| RevenueCat | Subscription management | USA |
| Apple and Google | Payment processing and app delivery | USA |
| Expo | Push notification delivery | USA |
| Resend | Transactional email | USA |
| Sentry | Error reporting | USA |
| Meta Platforms | Campaign measurement, only events without health data and with your consent | USA |
| Campaign measurement, only events without health data and with your consent | USA |
We may also share data to comply with a court order or legal obligation.
6. International transfers
Some processors are outside Brazil and the EEA. Transfers rely on appropriate safeguards, such as standard contractual clauses, under the LGPD and the GDPR.
7. How long we keep it
- Account and health data: while the account exists
- Meal photos on the server: 120 days (on your iPhone, until you delete them)
- Records you delete: removed from the server for good within 20 days
- Revoked or expired links: erased 20 days after they end
- Accounts not synced for 12 months: we warn you by e-mail and, with no reply within 30 days, delete the account and its server data
- After account deletion: erased within 30 days, unless legally required to retain
- Usage events and error reports: up to 13 months; after that, only daily totals with no identifiers
- Feedback messages: up to 24 months
- Waitlist e-mail (iPhone or Android): up to 30 days after the launch on the chosen platform, used only to announce it
- Subscription tax records: for the period required by law
8. Your rights
At any time you may: confirm processing exists, access your data, correct incomplete or outdated data, request anonymization, blocking or erasure, request portability, withdraw consent, object to processing and learn who we share with.
In the app, Profile → Account lets you export your data and delete your account, which also revokes every link. For other requests, write to [email protected]. We reply within 15 days.
Withdrawing consent for health data means the app's core features stop working.
In Brazil you may complain to the ANPD. In the EEA or the UK, to your local data protection authority.
9. Security
Encryption in transit and at rest; row-level access rules so each person reaches only their own data; photos in private storage with short-lived URLs; long random sharing tokens with rate limiting; restricted internal access. No system is fully immune, and we will notify you and the authorities of any significant incident.
10. Children
Oki is not intended for people under 18 and we do not knowingly collect their data. A guardian may record information about someone in their care and is responsible for that record. If we learn of an account created by a minor, we delete it.
11. Changes
We may update this Policy. Significant changes will be announced in the app or by email, and where the law requires it we will ask for consent again.