Orkumi Privacy Policy
Orkumi is a private messaging app for families: children, parents, grandparents, relatives and trusted friends. This policy explains what information Orkumi collects, why, who can see it, and the choices parents have. We wrote it to be read by parents, so it is short and plain.
1. Who runs Orkumi
Orkumi is operated by DaloyTech Solutions, Iligan City, Philippines ("we", "us"). Questions about this policy or your data: support@daloytechsolutions.com.
2. Who uses Orkumi
Orkumi has two kinds of accounts.
- Grown-up accounts are created by adults with a phone number. A grown-up who adds children to their family is a parent in the app.
- Child profiles are created by a parent inside the parent's family ("pod"). Children do not have their own login, phone number or email; they sign in with a picture code on a device a parent set up. We do not knowingly let a child create an account on their own.
By creating a child profile, the parent consents to the collection and use of that child's information as described here. Parents can review, change or delete a child's information at any time from the Family tab, or by contacting us.
3. What we collect
| Information | Who it's about | Why |
|---|---|---|
| Phone number | Grown-ups | To sign you in with a texted code, and so other parents can recognise who you are before approving a friendship. Never shown to children. |
| Name | Everyone | So family members know who is talking. A child's name is entered by their parent. |
| Nickname | Children | What other families see when searching, until both families' parents approve a friendship. |
| Age range (for example "6–8") | Children | Entered by the parent; shown to the other parent when reviewing a friend request so they know who their child would be talking to. |
| Picture code | Children | How a child signs in. Stored only as a one-way hash; we cannot read it. |
| Messages, photos, voice notes | Everyone | To deliver them to the people in the conversation. Stored so you can read them later. |
| Friend requests and approvals | Children and parents | To record who is allowed to talk to whom. |
| Push notification token | Devices | To tell you about new messages and requests. |
| Call connection data | Everyone | Audio and video calls are streamed in real time and are not recorded or stored. |
We do not collect location, contacts, browsing history, advertising identifiers or any data from other apps. The app asks for camera, microphone and photo permissions only when you send a photo, record a voice note or start a call.
4. Who can see what
- Inside a family: family members see each other's names and can message each other.
- Between families: nothing is visible until a child asks to add a friend. The parents on both sides then see the other family's parent name and the children's nicknames and age ranges, so they can decide. Only after both parents approve do the two families see each other's real names and can message.
- Parents can see their children's conversations. This is a deliberate safety feature and it is shown to children inside the app ("Mom and Dad can see your chats"). Because of it, conversations are encrypted in transit and at rest, but not end-to-end between children.
- Nobody else. There is no search for grown-ups, no public directory, and no way for a stranger to find or message a child.
5. Services that help run Orkumi
We use a small number of providers to run the app. Each only receives what is needed for its job and may not use it for anything else.
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Hosting the database and files (servers in the Asia-Pacific region) | Everything in section 3, stored encrypted |
| Semaphore | Sending sign-in codes by text message (sender name DALOYTECH) | Grown-ups' phone numbers and the code |
| Expo and Google Firebase Cloud Messaging | Delivering push notifications to your phone | Device push token and the notification text (a sender name and a short preview) |
| LiveKit | Connecting audio and video calls | Call audio/video while the call is live; not stored |
We do not sell personal information, and we do not share it with advertisers or data brokers. Orkumi contains no advertising and no third-party analytics or tracking.
6. How long we keep it
- Messages, photos and voice notes stay until you or the other person deletes them, or until the account is deleted.
- Sign-in codes are deleted as soon as they are used or expire (10 minutes).
- When a parent removes a child profile, or a grown-up deletes their account, all of that person's information is deleted within 30 days, except where we must keep a record to comply with law.
7. Your choices and rights
- Review and change: parents can see and edit their children's information in the app at any time.
- Remove people: parents can unfriend or block any family; the app then stops all contact.
- Delete: delete a child profile from the Family tab, or your own account from Family → Sign out → Delete my account, or email us and we will do it for you.
- Notifications: turn them off in your phone's settings at any time.
Under the Philippine Data Privacy Act and similar laws elsewhere, you may also ask us what we hold about you or your child, ask us to correct it, or object to how we use it. Email support@daloytechsolutions.com; we answer within 15 days.
8. Security
All data travels over encrypted connections and is stored encrypted. Who can read which rows is enforced by the database itself, not just the app. Access to our systems is limited to the people who run Orkumi. No system is perfect; if we ever learn of a breach affecting you, we will tell you promptly.
9. Changes
If we change this policy in a way that affects children's information, we will ask parents to agree again in the app before the change applies. Smaller changes are posted here with a new effective date.