Okaya · Privacy Policy

Privacy, in her hands.

Okaya helps an elderly parent and their adult children stay gently connected. This policy explains what Okaya collects, why, and the controls the parent herself holds. It is written to be read - if anything here is unclear, write to us and we will explain it plainly.

Last updated: July 16, 2026

The one rule everything else follows

The parent decides what her family sees. Every category of sharing is a switch on her own phone. She sees the full list of people who can see her, and can turn any person or any category off at any time - silently, without the other person being told.

No ads, no data selling, no third-party analytics SDKs, no advertising identifiers.

No location history. Location is attached only to an SOS she triggers herself, if she enabled it.

What we collect, and why

Data	Where it comes from	Why
Account basics (name, Apple user identifier)	Sign in with Apple	To know who is in the family
Daily check-ins and how the morning felt	The parent's one tap	So her family knows she's okay
Activity, heart rate, sleep, steps	Apple HealthKit, only with her explicit consent, per category	The Peace Score: noticing quiet days so the family checks in
Manual readings (e.g. blood pressure)	Typed in by the parent	Her own doctor-visit summary
Medications and reminders	Typed by the family	Reminders on her phone, which she confirms
Family moments (notes, photos, voice-note transcripts, stories)	Shared deliberately by family members	The family feed
Meal photos she shares	Taken by the parent, with "Share with the family" on	Kept and shown in her family's feed - it is a photo she chose to send them. It is also analyzed for a dish name and rough nutrition, which only her family sees
Meal photos she keeps private	Taken by the parent, with "Share with the family" off	Analyzed for the dish and nutrition, then the photo itself is discarded - we never store it. Only the derived line is kept, in her own record
Emergency contacts and an optional address	Entered by the family	Only used if she calls for help
Push tokens, device basics	The device	Delivering notifications

We collect no location history (location is only attached to an SOS she triggers herself, if enabled), no contacts scraping, and no advertising identifiers.

What we never do

We never sell data, and we never share it with advertisers. There are no ads.
Health data from HealthKit is never used for advertising or marketing, never shared with third parties for their own purposes, and never used beyond serving the family it belongs to - in line with Apple's HealthKit rules.
Okaya never contacts anyone outside the family. Escalations go to family members and the emergency contacts the family itself listed - never to authorities, never automatically to 911.
Okaya never diagnoses and never gives medical advice. The assistant refuses those questions with the same sentence every time.
Nothing the parent marks private leaves her own record. Her food is never scored to her face.

Who processes data on our behalf

Google Cloud (US): hosting and databases.
Apple: sign-in and push notifications.
Anthropic (Claude): when the parent asks "Ask Okaya" a question or photographs a label to have it read, the question or photo is processed to produce the answer. Not used for model training.
Velora: a meal photo is processed to estimate the dish and nutrition. Velora does not keep it; whether Okaya keeps our copy depends on whether she shared the meal (see the table above).

Each processor receives only what its job needs. Data is encrypted in transit (TLS) and at rest.

Retention and deletion

Signing out removes the session from the device.
A family can close a space; its data is deleted from production systems within 30 days.
A meal photo she kept private is discarded immediately after analysis; only the derived dish and nutrition line is kept. A meal photo she shared is kept with the rest of her family's photos, because that is what sharing it means - it stays until she or her family delete it.
A parent can delete her account at any time; health data is hard-deleted within 30 days and family members lose access immediately. Both roles can export their data (JSON).
To exercise deletion or export rights, contact us at the address below - we act within 30 days.

Children

Okaya is for adults - an elderly parent and adult family members. It is not directed at children under 13, and we do not knowingly collect their data.

Changes

We will post changes here and, for material changes, notify the family in the app before they take effect.

Contact

Questions about this policy or your data: customer-care@velorahealth.io. We reply within 2 business days.