Privacy Policy
Last Updated: September 14, 2026
Introduction
Welcome to oko.dating ("we," "our," or "us"). This Privacy Policy covers two things: the waitlist on oko.dating, which is open now, and the oko dating app, which is not open yet.
If all you have done is leave your email on the waitlist, the next section is the only one that describes data we hold about you. Everything after it describes the app and starts to apply when you create an account.
By joining the waitlist or using the app, you agree to the collection and use of information in accordance with this policy. If you do not agree with it, do not join the list and do not use the app.
Who is responsible for your data
The data controller for oko.dating and the oko app is Egor Bulgakov, a private trader registered in Finland (Business ID 3655049-3), based in Helsinki. You can reach the controller at contact@oko.dating.
The Waitlist
The app is not open yet, so the form on oko.dating is currently the only place we collect anything. There is no profile, no photos and no matching involved.
What the form collects
- Email address: required. It is the only way we can tell you when oko opens.
- City: optional, and free text you type yourself. It tells us where to open first.
- Your note: optional, up to 2000 characters, answering what you dislike about dating apps.
- Your consent: that you ticked the box, and an identifier for the exact wording you were shown when you ticked it.
Why we keep it
Your email gets you one message when oko opens. Your city decides the order we open cities in. We read every note and use them to decide what to build; we may publish a quote from one, never with your email or anything else that points back at you.
Legal basis
Consent, under Art. 6(1)(a) GDPR, given by ticking the box on the form. You can withdraw it at any time by emailing contact@oko.dating, and withdrawing takes you off the list.
How long we keep it
Until we have sent you the launch email, or until you ask us to delete it, whichever comes first.
Who else sees it
- Supabase, which hosts the database the list is stored in, on servers in the European Union.
- PostHog, our analytics provider, on its European instance. It records page views, which parts of the page you used, and error reports. We do not send it your email address, your city or your note.
- Google reCAPTCHA, which checks that the form is not being submitted by a bot. Google receives what its script needs for that check, including your IP address and browser signals, under its own privacy policy.
We do not sell the list, rent it, or use it for advertising.
Age Restriction
The rest of this policy describes the oko app, which is not open yet.
You must be at least 18 years old to use oko.dating. We do not knowingly collect information from individuals under 18. If we become aware that a user is under 18, we will immediately delete their account and associated data.
Information We Collect
Information You Provide
When you create an account and use our app, we collect:
- Basic Profile Information: Name, age, gender
- Profile Content: Photos, videos, bio/description, interests and preferences
- Communication Data: Messages and media (photos/videos) you share with other users through our chat feature
- Location Data: Approximate location (city/region) to show you potential matches in your area
Automatically Collected Information
- Usage Data: How you interact with the app, features you use, profiles you view
- Device Information: Device type, operating system, unique device identifiers
- Analytics Data: App performance, crashes, and usage statistics collected through our analytics services
How We Use Your Information
We use your information to:
- Provide Core Services: Create and maintain your profile, enable you to connect with other users
- Matching & Recommendations: Our matching algorithm uses your profile information and preferences to suggest compatible users
- Communication: Enable direct messaging and photo sharing between matched users
- Safety & Moderation: Automatically and manually review content to ensure compliance with our Community Guidelines and detect inappropriate behavior
- Improve Our Service: Analyze usage patterns to improve features and user experience
- Customer Support: Respond to your requests and provide assistance
- Legal Compliance: Comply with legal obligations and enforce our Terms of Service
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your data based on:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary to perform our contract with you (providing the dating service)
- Legitimate Interests: We have a legitimate interest in improving our service, ensuring safety, and preventing fraud
How We Share Your Information
With Other Users
Your profile information (photos, bio, age, location) is visible to other users of the app as part of the core dating functionality. Your messages are only visible to you and the recipient.
With Service Providers
We share information with trusted third-party service providers who help us operate the app:
- Cloud Storage Providers: To store your data, photos, and messages securely
- Analytics Services: To understand app usage and improve our service
- Authentication Providers: To verify your identity during sign-in
These providers are contractually obligated to keep your information confidential and use it only for the services they provide to us.
For Legal Reasons
We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, property, or safety
- Prevent fraud or abuse
- Protect the safety of our users
We do not sell your personal information to third parties or share it for advertising purposes.
Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Data Portability: Request your data in a structured, machine-readable format
- Right to Object: Object to processing of your personal data
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
- Right to Lodge a Complaint: Complain to a data protection supervisory authority
To exercise any of these rights, please contact us at the email address provided below.
If you think we have handled your data badly, you can complain to the supervisory authority in the EU or EEA country where you live, where you work, or where the problem happened. In Finland that is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), https://tietosuoja.fi/en/home.
Data Retention and Deletion
- Active Accounts: We retain your data for as long as your account is active
- Account Deletion: When you delete your account, we immediately delete all your personal data, including profile information, photos, and messages
- Legal Requirements: In some cases, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention)
You can delete your account at any time through the app settings or by contacting us directly.
Safety and Security Features
We take your safety seriously and provide:
- Report & Block: You can report inappropriate behavior and block users
- Photo Verification: Optional photo verification to confirm you are a real person
- Content Moderation: Automated and manual review of profiles and content to detect and remove violations of our Community Guidelines
- Secure Data Storage: Industry-standard encryption and security measures to protect your data
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Third-Party Services
Our app uses third-party services for analytics, authentication, and cloud storage. These services may collect information about you in accordance with their own privacy policies. We encourage you to review their privacy policies:
- Analytics providers
- Cloud storage providers
- Authentication services
International Data Transfers
The waitlist is stored on Supabase servers in the European Union, and our analytics run on PostHog's European instance, so neither leaves the EEA.
Google reCAPTCHA is the exception: it runs the bot check on Google's infrastructure, which processes data in the United States. That transfer relies on the European Commission's Standard Contractual Clauses together with Google's certification under the EU-US Data Privacy Framework. Email contact@oko.dating if you want a copy of the clauses.
Any other transfer outside the EEA will be covered by an adequacy decision or by Standard Contractual Clauses, and we will name it here before it starts.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Updating the "Last Updated" date at the top of this policy
- Sending you an in-app notification or email
- Requiring you to accept the new policy before continuing to use the app
Your continued use of the app after changes are made constitutes acceptance of the updated policy.
Children's Privacy
Our service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: contact@oko.dating
For GDPR-related requests (access, deletion, portability, etc.), please email us at the address above with "GDPR Request" in the subject line.