Privacy Policy
Last updated: July 23, 2026
On this page
1. Introduction
OKMOM is a mobile application that helps parents monitor their children's safety through GPS location tracking. The App is developed and operated by OKMOM ("we", "us"), which is responsible for controlling and processing your personal data.
Data Controller: OKMOM — determines the purposes and means of processing your personal data. For any privacy or data-related inquiries, please contact us at privacy@okmom.co.
This Privacy Policy applies to the OKMOM mobile application on Android and iOS platforms, as well as the website at okmom.co (the "Services").
Protecting your privacy and your child's privacy is our highest priority. This policy explains what data we collect, how we use it, and what rights you have.
2. Information We Collect
2.1. Parent Data
When you create an OKMOM account, we collect:
| Data | Purpose |
|---|---|
| Display name | Identify your account |
| Email address | Login, verification, important notifications |
| Password (hashed) | Authentication |
| Avatar (optional) | Account personalization |
| Login method | Google, Apple, or Email |
2.2. Child Data
When you create a child profile in OKMOM, we collect:
| Data | Purpose |
|---|---|
| Child's name | Identify the profile within the parent account |
| Gender (optional) | Personalize experience |
| Birth year (optional) | Determine the child's age |
| Avatar (optional) | Profile personalization |
| Star credits | Operate the reward system |
2.3. Location Data
This is the core feature of OKMOM. We collect:
| Data | Purpose |
|---|---|
| Precise GPS location | Real-time location tracking of the child's device |
| Geofence status | Alerts when the child enters/leaves designated safe zones |
| Activity detection | Detect whether the child is walking or in a vehicle |
Important notes:
- Location is only collected from the child's device, after the parent has paired the device
- Location works both when the app is open and when running in the background to ensure continuous monitoring
- You can stop location collection at any time by disabling the location permission in your device's system Settings (Android: Settings → Apps → OKMOM → Permissions → Location; iOS: Settings → Privacy → Location Services → OKMOM)
2.4. Technical Data
We automatically collect certain technical information to ensure the service functions properly:
| Data | Purpose |
|---|---|
| Unique device identifier (UUID, stored in Keystore/Keychain) | Distinguish devices within your account, support parent-child pairing |
| Battery level | Notify parents when the child's device is running low on battery |
| Connection type (WiFi / Mobile) | Optimize location update frequency |
| Device name (manufacturer + model, e.g., "Samsung Galaxy S24") | Set default device name in your account (you can change it later) |
| FCM token | Send push notifications to the parent's device |
2.5. Payment Data
When you subscribe to the Premium plan:
- Payments are processed entirely through Google Play Store or Apple App Store
- OKMOM does not store, view, or process your credit card information
- We only receive your subscription status (active / expired) from the app store
3. How We Use Your Data
All collected data is used solely for the following purposes:
- Real-time child device location — allows parents to view their child's current location on a map
- Geofence alerts — sends notifications when a child enters or leaves safe zones set by the parent (home, school, etc.)
- Star reward system — parents create tasks, children complete them to earn stars, accumulate stars to redeem rewards
- Safety alerts — emergency notifications to parents
- Authentication and security — protect your account from unauthorized access
We DO NOT use data for:
- Advertising in any form
- Tracking users across other apps/websites
- Selling or trading data with third parties
- Building marketing profiles
4. Data Sharing with Third Parties
We only share data with the following essential service providers:
| Third Party | Data Shared | Purpose |
|---|---|---|
| Google Cloud / Firebase (USA) | All user data | Storage, authentication, push notifications |
| Mapbox (USA) | Location coordinates (to display maps) | Map display in the application |
| Google Sign-In | Email, name (when you choose Google login) | Authentication |
| Apple Sign-In | Email, name (when you choose Apple login) | Authentication |
| Google Play Store | Transaction ID, payment status | Premium payment processing |
| Apple App Store | Transaction ID, payment status | Premium payment processing |
| RevenueCat | Subscription status, product ID, transaction timestamp | Premium status management and synchronization |
Our commitments:
- All providers have data protection agreements
- We DO NOT sell personal data to anyone
- We DO NOT share data with advertising networks
- We DO NOT use user analytics services
5. Data Security
We implement the following security measures to protect your data:
| Measure | Details |
|---|---|
| Encryption at rest | AES-256 (Firebase Firestore, local SQLite, Android Keystore / iOS Keychain) |
| Encryption in transit | TLS 1.3 / HTTPS for all network connections |
| Device authentication | Firebase App Check — prevents access from spoofed devices |
| Access control | Only the paired parent account can view a child's data |
| Passwords | Hashed before storage — even we cannot read your original password |
In the event of a data breach, we will notify you via email and in-app notification within 72 hours of discovery.
6. Data Retention and Deletion
6.1. Retention Periods
| Data Type | Retention Period |
|---|---|
| Parent account data | For the duration of the active account |
| Child profile data | For the duration of the parent's active account |
| Payment data | Per Google Play / Apple App Store policies |
6.2. Account Deletion
You can delete your account and all associated data at any time:
- Open the OKMOM app
- Go to Settings → Account & Security → Close my account
- Confirm the deletion request
After confirmation:
- Your data will be scheduled for deletion
- Deletion is completed within 30 days
- During this 30-day period, if you change your mind, simply log back in to your account and select "Cancel deletion request". Your account and all data will be restored immediately.
Note on child data: When you delete your account, all child profile data linked to your account will also be permanently deleted.
For more details, see our Account deletion page.
6.3. Exceptions
In certain cases, we may retain data longer if:
- There is a legal obligation (as required by competent authorities)
- It is necessary for security and fraud prevention
- The data has been fully anonymized (cannot identify an individual)
7. Your Rights
Depending on where you live, you have the following rights regarding your personal data:
| Right | How to Exercise |
|---|---|
| Right of access — View the data we hold about you | In the app or by email request |
| Right to rectification — Correct inaccurate data | Directly in App Settings |
| Right to erasure — Request deletion of your data | Settings → Account & Security → Close my account |
| Right to data portability — Receive a copy of your data | privacy@okmom.co |
| Right to restriction — Request suspension of data processing | privacy@okmom.co |
| Right to withdraw consent — Stop consenting to data collection | Settings → disable location permission |
| Right to complain — File a complaint with a data protection authority | Contact the authority in your place of residence |
To exercise any of these rights, contact us at: privacy@okmom.co. We will respond within 30 days (or sooner if required by applicable law).
Note for U.S. residents: OKMOM does not sell or share personal data for targeted advertising. The rights of access, deletion, and correction apply equally to all users, including residents of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA). To exercise your rights, contact privacy@okmom.co.
8. Business Transfer & Service Discontinuation
8.1. Business Transfer
In the event OKMOM is involved in a merger, acquisition, or sale of all or part of its assets (including user data), we will:
- Notify you via email and/or in-app notification before your data is transferred
- Ensure the recipient commits to complying with this Privacy Policy or a policy with equivalent protection
- Provide you with the option to delete your data before transfer (where required by law)
8.2. Service Discontinuation
In the event OKMOM discontinues operations:
- We will notify you via email and/or in-app notification at least 30 days before discontinuing the service
- You may export your data by sending a request to privacy@okmom.co
- After discontinuation, all personal data will be permanently deleted from our systems within 30 days
- Payment and Premium subscription data is processed through Google Play / Apple App Store — you must cancel your subscription through the app store yourself
9. Children's Privacy
OKMOM is designed for parents to monitor their own children. We are especially strict about children's data:
- Parental consent: When pairing a child's device, you confirm that you are the parent or legal guardian and consent to the collection of the child's location data for safety monitoring purposes.
- Children cannot create accounts: Only adults (≥18 years old) can create parent accounts.
- Data minimization: We only collect child data necessary for monitoring features — no excessive collection.
- Device identifiers: The UUID used in OKMOM is an app-generated identifier stored in Keystore/Keychain, not a system identifier (AAID, IMEI, MAC, Serial Number). We do not collect persistent system identifiers from children's devices.
- Platform compliance: OKMOM complies with Google Play Families Policy and Apple App Store Kids Category requirements.
We comply with international children's privacy regulations:
| Region | Regulation | Requirement |
|---|---|---|
| United States | COPPA (Children's Online Privacy Protection Act) | Parental consent required for children under 13 |
| Europe | GDPR (General Data Protection Regulation) | Parental consent required for children under 16 |
If you discover that a child's data has been collected without parental consent, please contact privacy@okmom.co immediately so we can delete that data.
10. Device System Permissions
To provide location monitoring features, OKMOM requires the following system permissions. Each permission has a specific purpose and is only used for its stated function:
10.1. Android
| Permission | Why Needed |
|---|---|
| Precise location (ACCESS_FINE_LOCATION) | Accurate GPS location of the child's device |
| Approximate location (ACCESS_COARSE_LOCATION) | WiFi/cellular positioning when GPS is weak |
| Background location (ACCESS_BACKGROUND_LOCATION) | Continue location tracking when the app is closed |
| Activity recognition (ACTIVITY_RECOGNITION) | Detect whether the child is walking or in a vehicle |
| Boot completed (RECEIVE_BOOT_COMPLETED) | Automatically restart monitoring after device reboot |
| Foreground service (FOREGROUND_SERVICE) | Maintain continuous location monitoring |
| Foreground service - location (FOREGROUND_SERVICE_LOCATION) | Allow foreground service to access location |
| Foreground service - data sync (FOREGROUND_SERVICE_DATA_SYNC) | Allow foreground service to sync data |
| Ignore battery optimizations (REQUEST_IGNORE_BATTERY_OPTIMIZATIONS) | Prevent system from killing monitoring to save battery |
| Wake lock (WAKE_LOCK) | Maintain connection for timely location updates |
| Exact alarm (SCHEDULE_EXACT_ALARM, USE_EXACT_ALARM) | Schedule periodic location checks |
| Vibrate (VIBRATE) | Vibration for alerts |
| Internet (INTERNET) | Network connection for data sync |
10.2. iOS
| Permission | Why Needed |
|---|---|
| Location "Always" (NSLocationAlwaysAndWhenInUseUsageDescription) | Continuous location even when the app is closed |
| Location "When in use" (NSLocationWhenInUseUsageDescription) | Location when the app is open |
| Background modes (location, fetch, processing) | Location updates and data sync in background |
12. International Data Transfers
OKMOM uses Google Cloud (Firebase) located in the United States (us-central1) for data storage and processing. This means your data may be transferred to and processed in the United States.
For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we ensure data transfers comply with the Standard Contractual Clauses (SCCs) approved by the European Commission.
13. Legal Basis
Our data processing is based on the following legal bases:
| Legal Basis | Applies To |
|---|---|
| Consent | Background location data collection, children's data |
| Contract performance | Providing the monitoring service you signed up for |
| Legitimate interest | System security, fraud detection and prevention |
| Legal obligation | Compliance with competent authority requirements |
14. Changes to This Policy
We may update this Privacy Policy from time to time. When changes occur:
- Minor changes: Update the "Last Updated" date
- Material changes: Notify you via email and/or in-app notification before the changes take effect
- Your continued use of OKMOM after changes take effect means you accept the new policy
- Previous versions of this policy are archived for your reference (contact us if needed)
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
| Channel | Information |
|---|---|
| Privacy email | privacy@okmom.co |
| Website | okmom.co |
| Response time | Within 5 business days |
Supervisory authority: If you are not satisfied with our response, you have the right to file a complaint with the data protection authority in your place of residence.
16. Effective Date
This policy is effective as of July 23, 2026 and supersedes all previous versions.
© 2026 OKMOM. All rights reserved.