Privacy Policy

Effective November 1, 2026 · Okeydo for Android (closed beta) and okeydo.com.br

Who we are

Okeydo is an email, calendar, contacts and to-do app. For anything about this policy or your data, write to hello@okeydo.com.br.

What the app uses, and why

• Your Google account (only if you sign in). With your permission Okeydo uses the Gmail API (gmail.modify) to show your mail, mark it read, archive, label, move to trash and send the emails you write, and the Google Tasks API (tasks) to keep your to-dos in sync with Google Tasks. These requests go directly from your phone to Google over HTTPS. Sign-in is handled by Google; Okeydo never sees your password.
• Calendars and contacts on your phone (only if you allow it). Read on the device to show your events and people, and to add events you create. They are not uploaded anywhere by Okeydo.
• Your to-dos, projects, areas and drafts. Stored only on your phone, encrypted with AES-256 under a key kept in Android's secure keystore. They are excluded from cloud backups.
• Approximate location (only if you turn on Weather). Rounded to about 10 km on the phone and sent to Open-Meteo to get a forecast. Nothing else is sent with it.
• Todoist (only while you import). The token you paste is used once, from your phone, to read your Todoist tasks, and is not kept.
• Notifications. New-mail alerts, to-do reminders and the "Up next" live update are created on the phone.

Google user data — Limited Use

Okeydo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google user data is used only to provide the features you see in the app (reading, organising and sending your mail; syncing your tasks).
• It is not transferred to anyone, except as needed to provide those features, to comply with the law, or with your explicit consent.
• It is never used for advertising, never sold, and never used to train AI or machine-learning models.
• No person reads your Google data, unless you ask us to for support and give us permission, or the law requires it.

What we don't do

• No ads, no advertising IDs, no third-party analytics or tracking SDKs.
• Pictures in emails can be blocked until you choose to load them, and tracking pixels are removed.
• We don't sell or rent personal information.

Crash reports and feedback

If Okeydo crashes, a report (the error, the app version and your phone model — nothing from your mail or lists) is saved on the phone. It is sent only if you tap Send report, as an email from your own account to hello@okeydo.com.br. Feedback you send the same way is used only to improve Okeydo.

The beta sign-up on okeydo.com.br

When you join the beta we store your email address, the page language and your country (from Cloudflare) so we can send your invite. It is kept on Cloudflare until the beta ends or you ask us to delete it, and is never shared.

Keeping and deleting your data

• Settings → Privacy & Security → Delete all my data removes everything Okeydo stored on the phone and signs you out. Uninstalling the app also removes it.
• You can remove Okeydo's access to your Google account at any time at myaccount.google.com/permissions.
• Things that live in Google (your mail, Google Tasks) stay in Google, under Google's policies.

Your rights

Under the LGPD (Brazil), the GDPR (EU) and similar laws you can ask to access, correct, export or delete personal data we hold about you, and to withdraw consent. Since almost everything stays on your phone, most of this is in your hands directly; for anything else, write to hello@okeydo.com.br and we'll answer within 15 days.

Security

All connections use HTTPS. On-device data is encrypted. You can lock the app with your fingerprint or face, which also hides its preview in Recents.

Children

Okeydo is not directed at children under 13 and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date above and, for meaningful changes, tell you in the app before they apply.