Okira Privacy Policy

Last updated: 12 August 2026 · Version française

Okira is a football prediction game played among friends. This page explains exactly what data the app processes, why, and what you can demand. It is written to be understood, not to be long.

The short version. Okira requires no email address, phone number, password or payment method. You may, however, voluntarily add an email address to save and recover your account. Okira contains no advertising, advertising trackers or analytics tools.

1. Data controller

Clement Kanku Mukonkole
Sewanstraße 211, 10319 Berlin, Germany
Email: kankuc94@gmail.com

This is the address to use when exercising the rights described in section 8.

2. What data is processed

Data	Source	Why
Anonymous account identifier	Created automatically on first launch	To recognise you between sessions. By default, it is linked to no identity. It can be associated with your email address if you choose to save your account.
Email address (optional)	Voluntarily added by you in Settings	To save your account and recover access on a new installation.
Player name	Chosen by you	To identify you to the other players in your leagues. You are free to use a pseudonym — in fact we recommend it.
Profile photo (optional)	Chosen by you from your gallery	To tell players apart in the standings. Without a photo, the app shows your initials.
Your predictions and results	Entered by you / computed by the app	To run the game: standings, duels, career score.
Your leagues and their members	Created or joined by you	To form the playing groups.
Technical connection data	Generated automatically	IP addresses and server logs, processed transiently to route requests and detect abuse.
Chosen language	Chosen by you	Stays on your phone. This is never sent to the server.

What Okira does not collect

Phone number, password, payment details, contacts, advertising identifiers, browsing history. The app integrates no ad network and no behavioural analytics tool.

Location: the precise wording matters

Okira never asks for your position: no GPS, no precise location, no access to nearby Wi-Fi networks. The app holds no location permission at all, and you can check that in your phone settings.

That said, like any service reachable over the Internet, our hosts record in their technical logs the IP address you connect from — from which an approximate country can be inferred. Those logs serve security and fault diagnosis, never profiling or tracking, and we do not use them for anything else. We spell this out because “no location” would be inaccurate, even though no Okira feature depends on where you are.

3. What other players can see

Okira is a group game, so some information is necessarily visible to the other members of your leagues. Specifically:

your player name, photo, position and results are visible to members of the leagues you share with them;
your predictions are revealed to other players only after the match kicks off — this rule is enforced by the server, not merely by the display;
your career score is visible from your profile;
a player with whom you share no league sees none of your leagues, duels or predictions.
An important point about your profile photo: it is stored in a space that can be read without authentication. The app only gives its address to members of your leagues, but anyone who obtained that address could display the image. So do not upload a photo you would not want to circulate. You can replace or remove it at any time from your profile, and deleting your account erases it permanently.

4. Legal bases (GDPR, Article 6)

Performance of a contract (Art. 6(1)(b)): processing your name, photo, predictions and leagues is necessary to provide the service you requested by installing the app. When you choose to add an email address, it is used solely to save and recover your account.
Legitimate interests (Art. 6(1)(f)): keeping technical logs to secure the service and prevent abuse.

No processing relies on advertising consent, because there is no advertising. No automated decision producing legal effects is made about you.

5. Who hosts and processes this data

Supabase — database, anonymous authentication, photo storage and server functions. Processor within the meaning of Article 28 GDPR. Hosting region: Ireland (eu-west-1), within the European Union.
Brevo — email delivery. Involved only if you have linked an address to your account: Brevo then delivers the one-time code used to save or recover that account. It therefore receives your email address and nothing else — not your player name, not your predictions, not your photo. Processor within the meaning of Article 28 GDPR. If you link no address, Brevo never receives anything about you.
Google Play — app distribution. Google processes its own download data under its own rules, over which Okira has no control.

About API-Football. The app retrieves fixtures, scores and odds from the sports data provider API-Football. This exchange runs one way only: Okira reads public sports information. No data about you is ever sent to them — not your name, not your predictions, not your identifier.

Transfers outside the European Union

Your data is stored within the European Union, in Ireland. Normal operation of the service requires no transfer to a third country.

As Supabase is a US company, its staff may nonetheless access the data from a third country in the course of maintenance or support. Any such access is governed by the European Commission's Standard Contractual Clauses, incorporated into Supabase's data processing agreement.

6. Retention

Your account data is kept for as long as your account exists.
When you delete your account, your name, photo, predictions and authentication account are erased, and your career score reset to zero.
Technical logs are kept for a short period, limited to what security requires.

Why an anonymous trace remains after deletion

Okira is a game of duels: each matchday pits you against another player, and the outcome counts towards their standings as much as yours. If deletion simply removed your row, all your past duels would vanish — and the standings of the other players in your leagues would change retroactively, months later. One person leaving must not rewrite the history of those who stay.

That is why deletion erases everything that identifies you and leaves only an opaque technical identifier, with no name, no photo and no personal data, which no longer allows anyone to recognise or contact you. This residual record is anonymous within the meaning of the GDPR.

7. Minimum age

Okira is for people aged 16 or over. The app is not directed at children and does not knowingly collect data about them. If you become aware that someone under 16 is using Okira, write to the address in section 1 and the account will be deleted.

8. Your rights

The GDPR gives you rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to lodge a complaint with a supervisory authority.

How to exercise them, in practice. Okira accounts are anonymous by default. If you have not associated an email address, there is no way to verify that someone writing in is the holder of a given account (Article 11 GDPR). Answering a request by email could then disclose one player's data to someone else. For that reason most rights are exercised directly in the app, where your identity is technically established:

Access: the Profile tab shows all data concerning you.
Rectification: your name and photo can be changed from the Profile.
Erasure: Profile → Settings → Delete my account. See also the Delete my account page.

For any other request, or if you no longer have access to the app, write to kankuc94@gmail.com.

If you believe your rights are not being respected, you may contact the data protection authority of your country of residence. In Germany, the list of competent authorities is published by the BfDI.

9. Security

Traffic between the app and the server is encrypted (HTTPS). Access to data is enforced at the database level: on every request, the rules check that you can only read and modify what concerns you or what your league permits. These checks run on the server and do not depend on the app installed on your phone.

10. Changes

This policy may change along with the app. The last-updated date appears at the top of the page. Substantial changes will be signalled in the app.