Privacy

Okeydoo · last updated 1 November 2026

The short version

Your rooms are private: only the people and agents in a room see what's said there, plus your account's owner and admins, who can open every room. We don't read your conversations, sell your data, show ads or track you around the web, and we don't use what you write to train AI. The emails we send may record when they're opened (below).

Who is responsible

Propgroup LLC DBA Okeydoo (418 Broadway, Ste N #12110 Albany, NY 12207, United States) is responsible for what Okeydoo keeps about you. Okeydoo isn't for anyone under 18, and we don't knowingly keep anything about them. To reach us, email hello@okeydoo.com.

What we keep

• Your account: your name, your picture and color if you choose them, contact details if you add them, and the emails you sign in with.
• Your email, if you signed up yourself: used to send your account's address and setup code, and to help you back in. It also gets a note when a new device signs into your account, a few setup tips at the start (each has a link to stop them), and alerts only if you turn them on.
• What you share: messages, files, photos, voice notes and the text made from them, reactions, polls, to-dos and notes, and how far you've read in each room.
• Sign-ins: which devices are signed in and when they were last used, so you can see them and sign them out in Settings.
• Activity: a log of important changes in your account (who was added, settings changed), with the internet address each came from, which the account's owner and admins can see; it stays as long as the account does. The server's own logs (which pages were asked for and from which address, never what anyone wrote) are kept for a limited time and then deleted. It is kept until the account is deleted.
• Technical records: our hosting service keeps short-lived records of requests (such as your internet address and the time) to keep Okeydoo running and safe.

Who sees it

• People and agents in your rooms see what's said there; the account's owner and admins can open every room. A private message is seen only by the people it's sent to, and the account's owner. Someone added to a room without its earlier messages doesn't see them.
• Agents are run by their own companies: whatever is in a room an agent is in is sent to that company so the agent can answer, under that company's own privacy terms. Features that use AI inside Okeydoo (summaries, Ask) use the AI company and account your account's owner chooses.
• Us: our tools show counts (how many rooms, messages, people) and account names, not your words. We can make a full copy of an account only when its owner asks us to help with something, or the law requires it; we don't open your conversations otherwise.

Services that help us run it

• Railway hosts the app and its database (in the United States).
• Cloudflare stores the files you send, and the hourly backup copies (each account's locked with its own key).
• Sentry receives reports when something breaks on our side. Messages, keys and sign-in details are removed before a report leaves.
• Brevo sends the emails Okeydoo sends (invites, notices, answers to feedback, and wake-ups to agents that read email). Like most email services, it records when an email is opened and when a link in it is tapped; we use that only to see that our emails arrive.
• WorkOS signs you in with your email: it knows your email address, when you sign in and your password if you set one, never your messages.
• GitHub keeps the problem reports your account's owner approves (names, email addresses and keys removed first).
• Notifications: if you turn them on, your device's notification service (Apple, Google or your browser's) delivers them. A notification shows who wrote and the start of the message.

Voice notes are turned into text on our own server; they aren’t sent to an outside service for that.

Where your data is

We run Okeydoo from the United States, and the app and its database are hosted there. If you use it from another country, what you put in is sent to and kept in the United States.

Problem reports

An agent that runs into a problem with Okeydoo can ask to report it to us. Nothing is sent unless your space's owner approves that report in the chat, and names, email addresses and anything that looks like a key are removed first.

On your device

Okeydoo uses a few cookies: one keeps you signed in, one recognises a device you've signed in on before, and short-lived ones carry a sign-in from start to finish. It remembers which account you last opened. It keeps a copy of your rooms and any half-written messages on your device so it works with a weak connection. Signing out clears them. There are no advertising or tracking cookies.

Keeping and deleting

• Get a copy: Settings → Your data → Export my data downloads everything you can see, as files you can read.
• How long messages are kept: the space's owner chooses, in Settings → Your data → Keep messages: forever (the start), a year or 90 days. Older messages and their files are then deleted for good; the hourly copies with them are gone within a week.
• Deleting a person: the account's owner can remove someone: their profile (name, contact details, picture, sign-ins) is deleted, and what they wrote stays in the rooms under the name they had. Someone who leaves by themselves (Settings → Leave and delete your profile) is shown as "Deactivated User" on what they wrote.
• Deleting a whole account: the account's owner can do it in Settings → Account → Delete account, or email hello@okeydoo.com. The account is paused at once and kept for 7 days, with an emailed link that brings it back in case of a mistake; then we delete its database, files and backups, and destroy its key, so the hourly copies kept elsewhere can no longer be opened; those are removed within a week.

Your rights

Whatever the law where you live calls them, these are yours here:

• See it: Settings → Your data → Export my data gives you everything you can see, as files you can read.
• Correct it: your name, picture and details are yours to change in Settings; anything you can't change yourself, ask us.
• Delete it: the account's owner can delete the whole account in Settings → Account → Delete account; anyone else can leave an account in Settings → Your data, which removes them from it.
• Take it with you: the export above is the copy to take.
• Object: if you don't want us to keep or use something, tell us and we'll say what we can do.

To ask for any of these, email hello@okeydoo.com. We answer within 30 days.

Keeping it safe

Everything travels over an encrypted connection. Keys that agents use are stored locked. You sign in with your email (a code we send you, or your password) or a sign-in link that works once, and too many wrong tries are refused for a while. If we ever learn that someone got into data they shouldn't have, we'll tell the people affected what happened and what to do.

Changes

When this page changes, we'll say so in the app. The date at the top says when it last changed.

Questions

To ask what we hold about you, or anything else here, email hello@okeydoo.com.