Privacy Policy

Oiko ("we", "us", "our") is a household operations app. If you have questions about this policy, contact us at hello@oikoapp.uk.

• Account data - your email address, used to sign in via a one-time passcode
• Profile data - your display name, set during onboarding
• Household data - inventory items, meal plans, shopping lists, tasks, records, and activity logs you create or contribute to
• Usage data- timestamps of actions (e.g. when an item was added, a task was completed, or a meal was logged), used to populate your household's activity feed
• Push notification tokens - a device token issued by Apple or Google, used solely to deliver notifications such as low stock alerts, task reminders, and record expiry warnings. We do not use this token for advertising or analytics.

We do not collect passwords, advertising identifiers, precise location, or payment information.

All data is stored on Supabase, a managed database and authentication platform. Supabase stores data on servers in your selected region. Their privacy policy is available at supabase.com/privacy.

Authentication is handled entirely by Supabase Auth using a one-time passcode sent to your email. No password is ever created or stored.

When you join a household, other members of that household can see your email address and display name in the Members menu. They can also see actions attributed to you within the household (e.g. items you added or meals you logged). Household owners can remove members.

We do not share your data with third parties outside of Supabase for infrastructure purposes.

You can delete your account at any time from the app settings. When you delete your account:

• Your profile and authentication credentials are permanently deleted
• Your contributions to households (items added, meals logged) remain, but are no longer attributed to your account
• If you are the sole owner of a household and leave without transferring ownership, the household and all its data will be deleted

We do not use advertising cookies or third-party trackers. Supabase Auth uses a session token stored in your browser to keep you logged in.

You have the right to access, correct, or delete the personal data we hold about you. To make a request, contact us at hello@oikoapp.uk.

In plain English: yes, we take reasonable steps to protect your data, and here is what that means.

• All data travels over HTTPS - everything between your device and our servers is encrypted. A scammer on the same Wi-Fi network cannot intercept it.
• No password to steal - we use a one-time passcode sent to your email. There is no Oiko password that could be guessed, reused, or leaked.
• Household data is locked at database level- access rules are enforced directly in the database (not just the app), so one user cannot access another household's data.
• We can see your data - as the people who operate Oiko, we have administrative access to the database. We do not browse or share your household data, but we want to be honest that this access exists.
• You choose what you store - some people use the Records section to track passports, driving licences, and identity documents. That is entirely your choice. Whatever you store is protected by the same encryption and access controls described above - only you and your household members can see it.

If you ever have a concern, email us at hello@oikoapp.uk.

We may update this policy from time to time. Continued use of Oiko after changes are posted constitutes acceptance of the updated policy.