Privacy Policy for okiro

Last Updated: December 19, 2025

Introduction

Welcome to okiro ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience while using our mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the okiro app.

Information We Collect

Information You Provide to Us

Account Information

• Email address
• Username
• Password (encrypted)
• Profile information you choose to share

Quest and Progress Data

• Quest completions and tracking
• Daily and weekly streaks
• Stat progression (Health, Wealth, Strength, Skills, Intelligence, Charisma)
• Achievement unlocks
• Water intake tracking
• Meditation session data
• Custom quest creation data

Subscription Information

• Subscription type (yearly or lifetime)
• Payment processing information (handled by Apple)
• Invite codes used or created

Automatically Collected Information

Device Information

• Device type and model
• Operating system version
• Unique device identifiers
• Mobile network information

Usage Data

• App feature usage statistics
• Session duration and frequency
• Quest completion patterns
• In-app navigation patterns

Push Notification Tokens

• Device tokens for delivering notifications
• Notification preferences

How We Use Your Information

We use the information we collect to:

• Create and manage your okiro account
• Track your quest completions and progress
• Calculate and display your stats and ranking
• Deliver achievement notifications and rewards
• Send push notifications about streaks and reminders
• Process and manage subscriptions
• Provide customer support
• Improve app functionality and user experience
• Prevent fraud and abuse
• Comply with legal obligations

Data Storage and Security

Storage

Your data is securely stored using Supabase, a trusted backend-as-a-service provider with industry-standard security practices. All data is encrypted in transit using SSL/TLS protocols and at rest using AES-256 encryption.

Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure authentication protocols
• Encrypted data transmission
• Regular security audits
• Access controls and monitoring
• Secure password storage using bcrypt hashing

Data Sharing and Disclosure

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties.

Third-Party Service Providers

We share data with trusted service providers who assist us in operating our app:

Supabase - Backend infrastructure and database hosting

• Purpose: Data storage, authentication, and database services
• Data shared: All user account and progress data
• Privacy Policy: https://supabase.com/privacy

Apple Inc. - Payment processing and push notifications

• Purpose: In-app purchase processing and notification delivery
• Data shared: Payment information, device tokens
• Privacy Policy: https://www.apple.com/legal/privacy/

Expo - Development and notification infrastructure

• Purpose: Push notification delivery
• Data shared: Device tokens, notification preferences
• Privacy Policy: https://expo.dev/privacy

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

Your Privacy Rights

Access and Control

You have the right to:

• Access your personal information
• Update or correct your data
• Delete your account and associated data
• Export your quest and progress data
• Opt-out of push notifications
• Withdraw consent for data processing

How to Exercise Your Rights

To exercise these rights, contact us at support@okiro.app or use the in-app settings to:

• Update your profile information
• Manage notification preferences
• Request account deletion

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal obligations.

Children's Privacy

okiro is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.

Push Notifications

We use push notifications to:

• Remind you about daily quests
• Notify you of streak milestones
• Alert you to achievements earned
• Provide motivational messages

You can disable push notifications at any time through your device settings or in-app preferences.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, or country where data protection laws may differ. By using okiro, you consent to the transfer of your information to our facilities and service providers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending you a notification (for significant changes)

Your continued use of okiro after changes are posted constitutes your acceptance of the updated Privacy Policy.

California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@okiro.app

Consent

By using okiro, you consent to this Privacy Policy and agree to its terms.