Data controller

The data controller under this policy is Okido ("Okido"). Okido provides a cloud-based management platform for cafes, restaurants, hotels, and retail businesses.

Contact: [email protected]

Scope

This privacy policy applies to okido.app, my.okido.app, and Okido mobile applications distributed on the App Store and Google Play.

Roles: platform and organization

Okido is a B2B service. Your organization (organizations) is primarily responsible for processing staff, contacts, and staff data. Okido processes that data only to provide the service on your organization's behalf.

Data we collect

We may process the following categories of data:

Account and profile: name, email, phone, language, role
Organization: club name, contact details, logo, timezone
Athletes: identity, contact, date of birth, gender, blood type, allergy/medication info, measurements, unit/group membership
Contacts / contacts: name, email, phone, athlete relationship
Operational: Okido records, training calendar, development notes, announcements
Payments: subscription status and payment records (card data is processed by Stripe; Okido does not store card numbers)
Push notifications: device token, platform
Technical: session, usage logs, error records

Purposes of processing

Data is processed to provide the service, manage accounts, bill subscriptions, maintain security, provide support, meet legal obligations, and improve the service, based on applicable legal grounds under KVKK and, where relevant, GDPR.

Sub-processors

We work with the following third-party providers:

Stripe — subscription and payment processing
Google Firebase — push notifications (FCM) and app analytics
Amazon Web Services (S3) — file storage
Google Tag Manager — tag management for website and app
Email infrastructure — transactional notifications

Retention

Data is retained for the duration of the service relationship and as required by law. When an account is closed, non-mandatory data is deleted or anonymized within a reasonable period.

Data security

We apply technical and organizational measures including tenant isolation, encrypted communication (HTTPS/TLS), access controls, and regular security reviews.

Okido is committed to complying with the Google Play Families Policy. Our data practices regarding children and families align with the requirements of that policy. We process staff data only to provide the service and do not serve targeted advertising to children.

Cookies

Our website and app may use cookies and similar technologies. See our Cookie Policy: /en/cookies/

Staff data

Okido processes data about minor staff on your organizations's instructions and under your organizations's responsibility. Your organizations is responsible for consent and contacts processes. The contacts portal is available only to authorized contacts.

Your rights

Under KVKK and, where applicable, GDPR, you may request access, correction, deletion, restriction, objection, or portability. Contact us at [email protected].

Data deletion

To request deletion of your account or personal data, email [email protected]. For organizations-held data you may also need to contact your organizations. Deletion is subject to legal retention requirements.

Policy updates

We may update this policy. Material changes will be communicated on the website or in the app. The current version is always published at okido.app/en/privacy/.