okay

Privacy policy

Last updated: 2 November 2026 (Google Calendar scopes revised)

This policy explains what data the okay app ("okay", "the app") handles, where it is stored and what control you have over it. okay is developed by Distraction Apps (contact: p.orozcomora@gmail.com).

1. Data that stays on your device

Everything you create in okay — routines and their history, check-in answers (which may include mood, energy, menstrual cycle, medication and similar personal notes), rules, projects, tasks, alarms, timers and photos you attach — is stored locally on your phone. okay works fully offline and without an account. Local data is removed when you uninstall the app or clear its storage.

2. Optional account and cloud sync

If you create an account (email and password) in Settings, okay syncs your data between your devices using Supabase, hosted in the European Union (Ireland). What is synced: your email address and the app data listed above, except photos, which never leave your device. Your synced data is only accessible to your own account; it is protected by row-level access rules and encrypted in transit (TLS) and at rest.

3. Google Calendar (optional)

If you connect Google Calendar, okay asks Google for permission to:

• see events in your calendars, read-only (https://www.googleapis.com/auth/calendar.events.readonly), to display them in okay's calendar view;
• see the list of your calendars (https://www.googleapis.com/auth/calendar.calendarlist.readonly), so you can choose which ones okay shows;
• create a secondary calendar and manage only that calendar (https://www.googleapis.com/auth/calendar.app.created): okay creates a calendar named "okay" and copies there your tasks that have a date. okay cannot modify or delete anything in your other calendars;
• see your email address (openid, email), to show which Google account is connected.

How Google data is handled

• The authorization is completed on okay's server (a Supabase Edge Function). Your Google refresh token is stored there, linked to your okay account, and is never sent to your phone or to anyone else.
• Calendar events are fetched on demand and shown in the app. okay does not keep a copy of your events on its server; it only stores which calendars you chose to hide.
• To keep the "okay" calendar up to date, okay's server reads your synced tasks that have a date (title, date, completion, note and project name) and writes them as all-day events in that calendar. It stores which event corresponds to each task.
• okay does not sell Google user data, does not use it for advertising, does not use it to train or improve AI or machine-learning models, and does not let humans read it, except with your explicit consent for support, when required for security, or to comply with the law.
• You can disconnect at any time in Settings → Google Calendar → Disconnect. This deletes the "okay" calendar from your Google account, revokes okay's access with Google and deletes the stored tokens immediately. You can also revoke access from your Google Account permissions.

4. Notifications

Alarms, timers and check-in reminders are scheduled locally on your device. okay does not use push-notification servers or advertising identifiers.

5. What okay does not do

• No ads, no analytics or tracking SDKs, no sale or sharing of personal data with third parties.
• The only third parties that process data are Supabase (cloud sync and the Google Calendar connection, if you use them) and Google (if you connect Google Calendar).

6. Retention and deleting your data

• Synced data is kept while your account exists.
• Google tokens are deleted as soon as you disconnect Google Calendar, or automatically if Google reports that access was revoked.
• To delete your account and all synced data, email p.orozcomora@gmail.com from the address you signed up with, with the subject "Delete my okay account". Everything is deleted within 30 days, including any Google tokens.

7. Your rights

Under the GDPR you can request access to, correction, export or deletion of your personal data, and object to its processing, by writing to the address above. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Children

okay is not directed at children under 13 and does not knowingly collect their data.

9. Changes

If this policy changes, the new version will be published on this page with an updated date.