Privacy Policy
Effective 21 September 2026. Last updated 21 September 2026.
1. Who we are
Olakino Oy is the controller of the personal data described in this policy.
- Company: Olakino Oy, registered in Finland
- Business ID: 3275660-3 (EUID FI32756603)
- Address: Maria 01, Helsinki, Finland
- Privacy contact: pauliina@olakino.fi
2. What this policy covers
This policy applies to the Olakino mobile app, your subscription, our website at olakino.fi, and any messages you send us (together, the "Services"). It should be read with our Terms of Service.
3. Data we collect
Information you give us
- Account: your email address, sign-in details (including Sign in with Apple, if you use it), and profile details you choose to add, such as age range, height, weight, goals and preferences.
- Things you log: meals (as text, barcode scans or photos), water, notes and experiments you run in the app.
- AI coach messages: what you write to the AI coach and its replies.
- Support and feedback: the content of messages and reports you send us.
Information from devices and services you connect
- Apple Health and wearables: the types you allow, such as sleep, heart rate variability, resting heart rate, steps, workouts, active energy, respiratory rate and VO2 max.
- Glucose sensor (optional): glucose readings and trends, only if you connect a sensor.
Subscription information
Apple handles payment. We receive only what we need to manage your subscription, such as whether it is active, its renewal date and an anonymous transaction identifier. We never receive your card details.
Information collected automatically
- Technical data: device model, operating system and app version, IP address, crash reports and security logs, used to keep the Services working and secure.
- Usage data: which features you use, used in aggregate to improve the app.
We do not use your data for advertising, we do not track you across other companies' apps or websites, and we do not sell your personal data.
4. Health data
Sleep, heart rate variability, glucose and similar measurements, meal logs and what you tell the AI coach about your body are data concerning health, a special category of personal data under Article 9 of the GDPR. We process it only with your explicit consent, which you give in the app when you connect a data source or turn on a feature that uses it.
You can withdraw consent at any time by disconnecting a source, turning a feature off, or deleting your account. Withdrawing consent stops further processing; it does not affect processing that happened before. Without consent to process health data, the parts of the app that depend on it cannot work.
Olakino is a wellness app, not a medical device. See the health disclaimer in our Terms of Service.
5. Apple Health
If you connect Apple Health, Olakino only reads the data types you approve in the Apple Health permission screen, and you can change those permissions at any time in the Health app. Data from Apple Health:
- is used only to provide Olakino's features to you;
- is never used for advertising or marketing, never sold, and never shared with data brokers or advertisers;
- is shared with service providers only as needed to run Olakino for you, under contracts that bind them to these rules;
- is not stored in iCloud by Olakino.
6. AI coach & AI insights
Some insights and the AI coach are generated by artificial intelligence. To produce them, we send the relevant parts of your data (for example your recent sleep, activity and meal logs, and your message to the coach) to an AI service provider acting on our behalf. We only do this after you agree to it on a dedicated screen in the app. If you decline or later turn AI features off, the rest of the app keeps working.
The AI service provider processes this data only to generate the response for you, under a data processing agreement. The AI coach is currently in testing. We use your coach conversations to improve it only if you separately agree to that in the app; otherwise they are used only to answer you.
AI output never leads to decisions that have legal or similarly significant effects on you. We do not make any such decisions based solely on automated processing.
7. Why we use your data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account, provide the app and manage your subscription | Contract, Art. 6(1)(b) |
| Generate your readiness, timeline, patterns and suggestions from health data | Explicit consent, Art. 9(2)(a) |
| AI insights and the AI coach | Explicit consent, Art. 9(2)(a) |
| Improve the AI coach using your conversations | Separate explicit consent, Art. 9(2)(a) |
| Answer support requests and reports | Contract, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f) |
| Keep the Services secure, fix bugs and prevent misuse | Legitimate interests, Art. 6(1)(f) |
| Understand feature use in aggregate to improve the app | Legitimate interests, Art. 6(1)(f), without health data |
| Keep accounting and tax records | Legal obligation, Art. 6(1)(c) |
8. Who we share your data with
We share personal data only with:
- Service providers (processors) who work on our behalf under data processing agreements: cloud hosting and database, AI service provider, email and customer support tools, and crash reporting. They may use the data only to provide their service to us. A current list is available on request.
- Apple, which operates the App Store and processes your subscription payment as an independent controller under its own privacy policy.
- Research partners, only if you give separate, explicit consent to a specific study. Without that consent we share nothing with them.
- Authorities and advisers where the law requires it, or to establish, exercise or defend legal claims.
- A successor if Olakino is involved in a merger, acquisition or sale of assets. Your data would remain protected by this policy, and we would tell you beforehand.
9. International transfers
We store your data in the European Economic Area (EEA). If a service provider needs to process data outside the EEA, for example an AI or support provider based in the United States, we make sure appropriate safeguards are in place, such as an EU adequacy decision (including the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses. You can ask us for details.
10. How long we keep your data
- Account and health data: for as long as your account exists. When you delete your account, we delete it within 30 days, and it is removed from backups within a further 90 days.
- AI coach conversations: kept in your account so you can see them, and deleted with your account or when you delete them in the app.
- Support messages: up to 2 years after the matter is closed.
- Security logs and crash reports: up to 12 months.
- Accounting records: as long as Finnish accounting law requires, currently up to 10 years. These contain no health data.
We may keep data longer only where the law requires it or to handle a legal claim.
11. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data erased, which you can do yourself in the app under Settings › Privacy › Delete account;
- restrict or object to our processing, including processing based on legitimate interests;
- receive the data you gave us in a portable, machine-readable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email pauliina@olakino.fi. We reply within one month. You also have the right to complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi), or to the authority in your own EU country.
12. Security
We protect your data with technical and organisational measures including encryption in transit and at rest, strict access controls, and limiting access to health data to the people who need it to run the Services. No system is perfectly secure. If a personal data breach puts your rights at risk, we will tell you and the authorities as the law requires.
13. Cookies
Our website uses only cookies and similar technologies that are strictly necessary to run and secure the site. We do not use analytics or advertising cookies on the website. If that changes, we will ask for your consent first and list them here. The app does not use advertising identifiers.
14. Age limit
Olakino is for adults. You must be at least 18 years old to use the Services, and we do not knowingly collect data from anyone younger. If you believe a person under 18 has given us their data, contact us and we will delete it.
15. Changes to this policy
We may update this policy, for example when we add features or change service providers. We will post the new version here and update the date at the top. For significant changes we will tell you in the app or by email beforehand, and where a change needs your consent, we will ask for it.
16. Contact
Questions about this policy or your data? Email pauliina@olakino.fi or write to Olakino Oy, Maria 01, Helsinki, Finland. For help with the app, see Support.