Security and privacy

OkayFolk is a family layer, not surveillance. Your parent decides when to reply, and only your family sees what they share.

What we never do

Never ask for an OTP, PIN or password on WhatsApp, by email or on a call. If someone does, it isn't us.
Never track location all the time. Location is shared only when someone presses SOS, or when a person scanning a Pass chooses to share it.
Never listen to calls or read messages. Scam Shield works only when your parent presses it.
Never sell data or show ads. We make money only from family subscriptions.
Never show medical history to a stranger. A Doctor Pass opens only after a family member approves it, for a short time.

Every page is served over HTTPS. Passwords are stored as one-way scrypt hashes, never in plain text.
Sign-in cookies can't be read by scripts, and sign-in and password-reset attempts are rate limited.
Each parent's big-button page uses a long private link. Lost the phone? Make a new link and the old one stops working.
Every Pass scan is logged with the time and mode, and the family is told.
Documents are private to your family until you choose to add them to a Pass.
Database backups are encrypted.
Old logs are deleted on a schedule: message logs after 7 days, reminder history after 30 days, activity after 180 days.

Edit or remove any person, contact, reminder or document at any time.
Switch any Pass off with one tap. Its QR stops showing details straight away.
Choose exactly what each Pass mode shows.
To close your account and delete your data, write to [email protected] from your account email.

OkayFolk is not an emergency service. It reminds, records and alerts your family. In an emergency, call your local emergency number.

The full details are in our privacy policy. Found a security problem? Write to [email protected].