Who we are

oku is an independent iOS app made by Emre Gökalan. In this policy, "we" means the developer of oku, and "the app" means the oku iOS app. The website at get-oku.app is covered separately in a section near the end.

What stays on your device

Almost everything. When you import an Anki collection, the app reads it on your phone and writes the results into a private database inside the app's own storage. None of it is uploaded. This includes:

• Your imported decks, cards, and the vocabulary derived from them
• Which words the app treats as known, learning, or due
• Passages generated for you, along with their titles and your saved stories
• Reading progress, daily goals, and comprehension check results
• App settings and preferences, stored in standard iOS user defaults

This data is covered by iOS file protection and is included in your device backup if you back up your iPhone to iCloud or a computer. That backup is between you and Apple. We have no access to it.

What leaves your device

One thing does: the text of a generation request. To write a passage tuned to your vocabulary, the app has to tell an AI model which words to build around. A request contains the vocabulary the passage is being written from, the topic and style settings you chose, and the instructions that shape the output. It does not contain your name, your email, your device identifiers, your contacts, or your location, because the app never collects those in the first place.

The same applies to the smaller requests behind word lookups and grammar notes.

Where that request goes

There are two routes, and you can see which one is active in the app's settings.

Route	Where the text goes	Who holds the key
Included generations	Our proxy at oku-llm-proxy.fly.dev, hosted on Fly.io, which forwards it to an AI provider	We do. Your device never sees it.
Your own key	Straight from your device to OpenRouter, OpenAI, or Anthropic, whichever you connected	You do. The request does not pass through us at all.

Once a request reaches an AI provider, that provider's own privacy terms govern what happens to it. If you are using your own key, your agreement is directly with them. Their policies are worth reading: OpenRouter, OpenAI, Anthropic.

Your API keys

If you connect your own provider account, the key is stored in the iOS Keychain on your device. It is marked device-only, so it does not sync to iCloud and does not travel to your other devices. It is sent only to the provider it belongs to, in order to authenticate your own requests. We never receive it, and it is not included in any diagnostic or support information.

Disconnecting a provider in the app deletes the key from the Keychain.

Device attestation

Included generations are paid for by us, so we need to know a request came from a real, unmodified copy of oku rather than a script. The app uses Apple's App Attest service for this. Your device creates a key in its Secure Enclave and signs each request with it, and our proxy checks the signature.

The identifier involved is generated by Apple, is specific to this one installation of oku, and is not linked to your Apple Account or to any advertising identifier. It tells us that a valid install is asking for a generation and how many it has used against its included budget. It does not tell us who you are, and we cannot use it to recognise you in any other app or on any other service. Reinstalling the app produces a new one.

What we do not do

• We do not have user accounts, and we never ask for your name or email to use the app.
• We do not include any analytics, crash reporting, attribution, or advertising SDK.
• We do not track you across apps or websites, and we do not ask for tracking permission because we have nothing to track you with.
• We do not sell, rent, or share personal data. There is none to sell.
• We do not use your content to train any model of our own. We do not have one.

The app's privacy manifest declares this too: no tracking, no tracking domains, and no collected data types.

Children

oku is not directed at children under 13, and we do not knowingly collect personal information from them. Because the app has no accounts and collects no personal information from anyone, there is nothing for us to hold or delete in the ordinary case. If you believe a child has provided personal information through the website waitlist, contact us and we will remove it.

Deleting your data

Delete the app. Because your library lives inside the app's own storage, removing oku removes your imported decks, vocabulary, saved passages, progress, settings, and any stored API key along with it. There is no server-side account for us to close, because there is no account.

Text you already sent to an AI provider is held under that provider's retention policy, not ours. Use the links above to request deletion directly from them.

The website

get-oku.app is a static page. It sets no cookies and runs no analytics.

• Waitlist. If you enter your email address, it is submitted to Buttondown, the newsletter service we use, and is stored there. We use it only to tell you when oku is available. Every email includes an unsubscribe link, which deletes you from the list.
• Fonts. The page loads the Inter typeface from Google Fonts, which means your browser contacts a Google server and Google receives your IP address as part of that request.
• Hosting. Our web host keeps standard server logs, which include IP addresses, for security and troubleshooting.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to how it is used. For the app, the practical answer is that we hold nothing to give you: your library never reaches us. For the website waitlist, contact us and we will act on any of those requests. You can also unsubscribe yourself at any time using the link in any email.

Changes to this policy

If oku's data practices change, this page changes with them and the date at the top is updated. Material changes will also be noted in the app's release notes, so a change never arrives silently in an update.

Contact

Questions about privacy, or a request about your data, go to emregoe@gmail.com. We answer personally.