Privacy Policy

Last updated: 1 July 2026

This Privacy Policy explains how Okari ("Okari", "we", "us", "our") collects, uses, discloses, and protects your personal information when you use the Service. Okari is a photography location-discovery app: photographers share photos pinned to the places where they were taken, and others discover those spots nearby. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. By using the Service you agree to this Policy.

1. Information we collect

Account and profile information: your email address, password (handled and stored in hashed form by our authentication provider — we never see it in plain text), username, and any display name, profile photo, or bio you add. Content you post: the photos and captions you upload, categories you assign, and the geographic location (latitude and longitude) attached to each photo. Photo metadata: photos may contain embedded location and time data, which we use to help place your post. Social activity: accounts you follow, posts you save, and content you report or users you block. Device location: accessed only with your permission, to show nearby content. Device and usage information: device type, operating system, app version, and basic diagnostics. Communications: messages you send us for support.

2. How we use your information

To provide and operate the Service (create your account, display your photos on the map, build your feed); to show nearby content when you enable device location; to authenticate you, secure your account, and send account emails such as password resets; to keep the community safe by reviewing reports and enforcing our Terms; to respond to support enquiries; to understand usage and improve the app; and to comply with legal obligations.

3. Location information

Because Okari is a location-sharing app, the locations you attach to your photos are public — shown on the map and to other users. Only share locations you are comfortable making public, and do not post the precise locations of private residences or sensitive, protected, or restricted sites. Your device location (used to find nearby content) is only accessed with your permission, is not published, and can be turned off any time in your device settings.

4. How your content is shared

Your photos, captions, attached locations, username, and public profile are visible to other users and, depending on the feature, to the public. Keep this in mind when deciding what to post.

5. Who we share information with

We do not sell your personal information. We share it only with service providers that help us run the Service, and where required by law: Supabase (database, authentication, and file storage), Mapbox (maps), Resend (transactional email such as password resets), and Apple (App Store distribution). We may also disclose information if required by law or to protect the rights, safety, and security of our users, the public, or Okari. These providers may process data on servers outside Australia.

6. Data storage and security

Your information is stored with our hosting and infrastructure provider and transmitted over encrypted (HTTPS/TLS) connections. We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. However, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

7. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in backups for a limited period.

8. Your rights and choices

You can view and update your profile in the app, and request access to or correction of the personal information we hold. You can delete your account at any time, which removes your personal information as described above. You can grant or revoke the app’s access to your device location in your device settings. If you have a privacy concern, contact us first at [email protected]; you may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Children’s privacy

Okari is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International users

Okari is operated from Australia. If you access the Service from elsewhere, your information may be transferred to, stored, and processed in Australia and in other countries where our service providers operate.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will take reasonable steps to notify you, such as through the app or by updating the date above. Continued use of the Service after changes take effect means you accept the updated Policy.

12. Contact

Questions about this Privacy Policy? Contact us at [email protected].