okuji is a digital passport platform. People (“collectors”) acquire themed passports, travel to real-world locations, earn verified stamps, and keep a private journal of what they experienced. This policy explains what data the okuji mobile app collects, why, how it is stored, and the choices you have.
This policy covers the okuji mobile application. Our companion web platform and creator tools are governed by their own terms.
okuji is built so that privacy is enforced by how the system is engineered, not only by promises. The core commitments:
The sections below describe exactly how each of these works.
When you create an account we collect your email address and authentication credentials, handled by our authentication provider (Supabase). This is used to sign you in, sync your passports across your devices, and contact you about your account. We use email/password and optional Google sign-in.
When you place a stamp at a location-based stop, the app requests your device’s precise location at that moment only.
Your precise coordinates are sent to our verification function, used to confirm you are within range of the stamp location, and then discarded.
What we retain with your stamp is only a geohash — a coarse, area-level approximation (in our current implementation, roughly a 1.2 km × 0.6 km cell). This is enough to know the general area, and not enough to reconstruct your exact position.
The app requests foreground (in-use) location only. It never requests background location access and cannot access your location while it is closed or not in active use.
A separate, optional “near me” discovery feature may use your device’s momentary location to show nearby passports. When used, that location is used only to run the query and is not stored or logged.
okuji lets you attach photos and record voice journal entries to your stamps. To do this the app requests access to your camera and microphone when you choose to use those features. This media is content you create, stored as part of your private journal (see Section 4). We do not analyze it.
Your stamps, journal text, mood ratings, and the passports you acquire are stored so your collection persists and syncs across your devices.
We do not collect: your contacts, your background location, your browsing or app activity outside okuji, advertising identifiers, or any data through third-party advertising or analytics SDKs (we do not use them).
Some okuji collectors are minors who participate through schools, libraries, museums, or other institutions, or through family use.
Account deletion. You can delete your account and all associated data from within the okuji app at any time (Profile → Danger Zone → Delete account), or request deletion at okuji.app/delete-account.
What deletion does. When you delete your account, your drafts and unshared content are deleted. Passports you have acquired that are preserved for other holders may be retained in a delisted, custodial form to honor those holders’ access; this limited retention is the only exception and exists solely to preserve other people’s collections, never for our benefit.
Access. You can contact us at nathan@okuji.app to ask what data we hold about you.
We do not sell, rent, or license your personal data. We share data only with the infrastructure providers necessary to run the service (for example, our hosting, authentication, and storage provider), who process it on our behalf under their own security obligations, and only as needed to operate okuji. We do not share your data with advertisers or data brokers, because we work with none.
If we change this policy we will update the effective date and, for material changes, notify you within the app or by email.
Questions about this policy or your data: nathan@okuji.app
This policy describes okuji’s data practices as implemented at the effective date. It is not legal advice. okuji is committed to keeping this document accurate to what the software actually does.