Privacy Policy

1. Who we are

Oko Oko is a dating app for the Bhutanese diaspora community in Canada and Australia, operated by Chogyal Wangchuk ("we", "us", "our"). We are committed to protecting your privacy and handling your personal information with care and transparency.

In plain English: We're a small, community-built app. We collect the minimum data needed to run a dating app, we never sell it, and we give you full control over it.

2. What we collect

We collect information when you register and use Oko Oko:

Account information: Name, email address, and password (stored as a secure hash via Firebase Authentication — we never see your plain-text password).
Profile information: Age, gender, bio, hometown, current city, country, and up to 6 profile photos.
Location: Your city and country (used to show you nearby matches). We do not track your precise GPS location in real time.
Messages: Text and images sent between you and your matches, stored in Firebase Firestore. Only you and your match can read your conversation.
Swipe activity: Whether you liked or passed on a profile — used to create matches and improve your discovery feed.
Subscription status: Whether you have an active Premium plan, managed by Apple App Store or Google Play. We never see your payment card details.
Email preferences: Whether you opted in to marketing emails during sign-up (unchecked by default, in compliance with Canadian CASL).
Device and usage data: Device type, operating system version, app crash reports, and anonymous usage analytics — collected via Firebase Analytics. This data is aggregated and cannot identify you personally.

3. How we use it

To create and manage your account and profile.
To show you potential matches within your discovery radius and country.
To enable real-time chat and video calls between matched users.
To send subscription receipts and trial reminder emails — only if you opted in during registration (CASL compliance).
To run AI-powered date spot suggestions via secure Firebase Cloud Functions. Your data never leaves our secure server environment when generating recommendations.
To verify profile photos using AI — ensuring real people only, before any profile is shown to other users.
To investigate reports of abusive behaviour and enforce our community guidelines.
To fix bugs and improve the app based on aggregated, anonymised usage data.

We only use your data for the purpose it was collected. We will not use it for anything else without asking you first.

5. Data retention

Your personal data is kept for as long as your account is active. Here's how deletion works:

Active account: Data is retained while you use the app.
Account deletion: When you delete your account (Profile → Settings → Delete Account), all your personal data — profile, photos, messages, and swipe history — is permanently deleted within 30 days.
Aggregated analytics: Anonymous, aggregated usage statistics (not linked to you) may be retained longer for app improvement.
Legal holds: In rare cases where we are required by law to retain data, we will do so only for the period required and will notify you where possible.

6. Your rights

You have rights over your personal data under both Canadian and Australian law. These rights are always free to exercise — contact us at support@okookodating.com.

🇨🇦 Canada (PIPEDA)

Right to know what data we hold about you
Right to access and receive a copy of your data
Right to correct inaccurate information
Right to withdraw consent at any time
Right to have your data deleted
Right to file a complaint with the Office of the Privacy Commissioner of Canada

🇦🇺 Australia (Privacy Act 1988)

Right to access your personal information
Right to correct inaccurate or outdated information
Right to know how your information is used
Right to opt out of direct marketing
Right to complain to the Office of the Australian Information Commissioner (OAIC)
Potential refund rights under Australian Consumer Law

To exercise any of these rights, email support@okookodating.com. We will respond within 30 days.

7. Cookies & analytics

The Oko Oko mobile app does not use browser cookies. Firebase Analytics collects anonymised, aggregated data about app usage — such as which screens are most visited and how often the app crashes. This data cannot be used to identify you personally.

Our website (okookodating.com) may use standard web analytics. No personal data is shared with advertising networks.

8. Children

Oko Oko is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we discover that a user is under 18, their account and all associated data will be immediately and permanently deleted. If you believe a minor is using Oko Oko, please contact us at support@okookodating.com.

9. Security

We take reasonable technical and organisational measures to protect your data:

All data is encrypted in transit (TLS) and at rest via Firebase's encryption layer.
API keys and secrets are stored in Firebase Secret Manager — never in the app binary or source code.
Firestore security rules ensure users can only read data they are authorised to see.
Photo uploads are rejected if they are under 50 KB (likely fake/placeholder) or over 10 MB.

No method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email (if you opted in) or via an in-app notification at least 14 days before the change takes effect. The updated effective date will be shown at the top of this page. Continued use of Oko Oko after the effective date constitutes acceptance of the updated policy.

11. Contact us

For any privacy questions, data access requests, or complaints:

support@okookodating.com

We aim to respond to all privacy-related enquiries within 30 days.