Privacy policy
Okto is the shared dashboard of a household: groceries, calendar, expenses. This page says, in plain words, what data the app keeps, why, with whom, for how long, and how to erase or get it back. No advertising, no resale of data.
Who is responsible for your data
[TO COMPLETE: publisher name, postal address], the publisher of Okto, is the data controller. For any question:[email protected].
What Okto keeps
| Data | Why |
|---|---|
| Your e-mail address and, if you sign in with Apple or Google, that account's identifier (and the name the provider sends) | Signing you in: the one-time code is sent to the e-mail address. The name only prefills your first name. |
| Your first name (display name), chosen by you | So the other Members of your Household recognise you. |
| What the Household's Members enter: List items, to-dos with a due date and Reminder, Events (title, place, note, times, repeat, participants), expenses (title, amount, who paid, split), reimbursements | This is the service: the Household sees the same data on all its phones. These texts can mention people or habits: only enter what you accept to share with your Household. |
| Your settings: language, notification choices | Showing the app and writing notifications in your language. |
| Your phone's notification token and its platform (iOS or Android) | Sending you notifications (a Member joined, Reminders, Household activity, Household deleted). Erased when you sign out. |
| A count of what each Member just added or changed (for example "2 items on groceries"), never the text | Sending your Household one grouped notification instead of one per tap. Erased minutes after it is sent, and after two days at the latest. |
| If you turn on Calendar Sync: the calendar Okto writes into, the calendars it reads, and the events of those calendars you choose to share | Adding the Household's Events to your calendar, and showing the Household the events of the calendars you tick. Okto reads your calendar on your phone, never from our servers, and only after you agree. Without this option your calendar stays yours. |
| If your Household takes Okto Plus: the subscription state (plan, period, trial, renewal), the store's transaction id and the internal id of your Okto account at RevenueCat. The Household only sees that it has Okto Plus, and who pays | Giving Okto Plus to every Member of the Household, whether the payment comes from the App Store or Google Play, and finding a purchase again on a new phone. Neither your card nor your payment method goes through Okto: payment is made with Apple or Google. |
| IP address and device type of sign-ins; IP address of refused Invite Code attempts; the IP address and browser signals Cloudflare Turnstile sees when you ask for an e-mail code | Security and account management: managing sessions, blocking bursts of Invite Code guesses and automated code requests. The IP address is used for security only: Okto does not use it to find where you are. |
| Crash reports (error type, app version, phone model and system, screens visited) | Fixing bugs. No name, no e-mail, no device identifier, none of your Household's content; the IP address is not kept. |
Okto does not ask for your location (your phone's time zone, such as "Europe/Paris", is used to ring at the right time: it is not a place), your contacts or your photos, and does not track you across other apps. The app contains no audience-measurement tool, no usage statistics, no advertising tool and no data broker.
To learn whether anyone finds Okto useful, the publisher may count by hand, from time to time and in aggregate, what the app already stores to work: when a Household was created, when a Member joined it, and when an entry was added or changed. These counts do not read the content of your Household, need no extra collection and produce no name or text.
Who sees what
- The Members of your Household see what the Household enters and your first name. They never see your e-mail address.
- Nobody outside the Household sees its content. We access it only for troubleshooting you ask for or a legal obligation.
The providers that process data for us
- Supabase (EU): database, sign-in, server functions.
- PowerSync Cloud (EU): syncing the Household's data to the phones.
- Brevo (EU): sending the sign-in code e-mails.
- Sentry (EU): crash reports.
- Expo Push, then Apple (APNs) or Google (FCM): delivering notifications; the text of a notification (a Reminder, for example) passes through them, and they may process it outside the EU.
- RevenueCat (United States): only if you look at or take Okto Plus. It manages the subscription with the App Store and Google Play and receives the internal id of your Okto account (never your e-mail or first name), that account's purchase history and the phone's platform.
- Apple and Google: only if you choose "Continue with Apple" or "Continue with Google".
- GitHub: storing encrypted backups of the database (the decryption key stays with the publisher).
- Cloudflare: hosting this site, and Cloudflare Turnstile, the anti-robot check shown when you ask for an e-mail code (it reads the IP address and signals from the browser or app, and returns a single-use token; Okto keeps nothing of it).
When a provider processes data outside the European Union, it does so under the safeguards the GDPR provides (standard contractual clauses or an adequacy decision).
Why we may process it
- Providing the service you ask for (account, Household, Lists, calendar, expenses, notifications): performance of the contract.
- Security, abuse prevention and crash reports: our legitimate interest in running a safe service.
- Calendar Sync and notifications: your consent, given in your phone's system and which you can withdraw at any time.
For how long
- As long as your account exists, or as long as the Household exists for what it contains.
- A deleted entry is erased; a technical trace with no text or amount (who deleted which row, and when) stays with the Household.
- The notification token is erased when you sign out.
- Invite Code attempts are erased after one day.
- The nightly encrypted backups keep everything, including what was deleted since, for up to 90 days.
When you delete your account
In the app (Settings, Delete my account) or on the deletion pageif you no longer have the app, your account, your e-mail address, the linked Apple or Google accounts, your calendar connections, your settings and your notification tokens are erased.
Deleting your account does not cancel an Okto Plus subscription: you cancel it in the App Store or Google Play, which handle the payment.
What stays: your first name, inside each of your Households, to label your past entries ("added by Léa"), and the shared Lists, Events, expenses, reimbursements and balances, which also belong to the other Members. When an Admin deletes a Household, all its content is erased. Coming back after a deletion goes through a new account.
Your rights
You can access your data, correct it, erase it, ask for a portable copy (export), restrict its processing or object to it. Your first name can be changed in the app, and so can account deletion. For the rest, in particular to receive a copy of your data, write to[email protected] from your account's address: we answer within one month. You can also complain to the data protection authority of your country (in France, the CNIL).
Children
Okto is not meant for people under 16, and we do not knowingly collect their data.
Security
Traffic is encrypted (HTTPS), access to data is limited to your Household at the database level, and backups are encrypted. No service is flawless: if a breach concerns you, we tell you as the law requires.
Changes
If this policy changes in a significant way, we tell you in the app before it takes effect. The date at the top of the page is that of the latest version.