Last Updated: August 2026
We are committed to ensuring that you are fully informed about the collection and processing of your personal data. We treat your personal data confidentially and in accordance with legal data protection regulations. With the entry into force of the revised Data Protection Act on September 1, 2023, we are publishing our privacy policy for visitors and users of our website, application, and services, and for our customers, business partners, and suppliers.
This privacy policy is designed to meet the requirements and provisions of the EU General Data Protection Regulation (GDPR) and the revised Swiss Data Protection Act (revDSG). Whether and to what extent these laws apply depends on the specific case. This is not an exhaustive description. Further provisions and specific circumstances are supplemented by our General Terms and Conditions.
If you provide us with personal data of other or external persons, please ensure that these persons have read and understood this privacy policy, and only share their personal data with us if you are authorized to do so and if such data is accurate.
This privacy policy applies to all our services as well as internal processes and policies of OKIDOOKI AG.
"Personal data" refers to any information relating to an identified or identifiable individual (Art. 5 lit. a DSG), i.e., data that allows conclusions to be drawn about their identity. An "affected person" is a person whose personal data is processed (Art. 5 lit. b DSG). "Processing" includes any handling of personal data, regardless of the methods and procedures used, including the collection, storage, use, alteration, disclosure, archiving, or destruction of data (Art. 5 lit. d DSG).
"Particularly sensitive personal data" are categories of data that are particularly sensitive and require particularly high security requirements during processing. Such data includes information about religion, political views, health, criminal and administrative sanctions, and social assistance (Art. 5 lit. c DSG). The processing of particularly sensitive personal data always requires explicit prior consent (Art. 6 para. 7 lit. a DSG).
We collect personal data exclusively in a transparent manner and in consideration of the principles of proportionality and purpose limitation (Art. 6 para. 1-3 DSG). Data is processed only to the extent necessary and only for as long as required for our tasks and obligations (Art. 6 para. 3 and 4 DSG).
We primarily process the personal data we receive in connection with our website and application from customers and other business partners, as well as data we collect from users when operating our websites, application, and other applications. Where permitted, we also obtain certain data from publicly accessible sources (e.g., press or the Internet) or receive such data from authorities and other third parties.
Additionally, the categories of personal data we receive from third parties about you or request from you include information from distribution partners regarding your use of open services (e.g., payments made or purchases completed), your addresses and interests, as well as sociodemographic data and data related to website/app usage (IP address, MAC address of smartphones and computers, device information, cookies, date and time of visit, accessed pages, used features, referring websites, and location information).
We collect and process personal data to enter into and fulfill subscriptions with customers, business partners, and employees (including contract initiation and enforcement if necessary). We process your data only for specific purposes that arise from contractual agreements with or in favor of an affected person, legal provisions, overriding interests, or your explicit consent.
In addition, we process personal data for:
During onboarding — and at any time in Settings — you may provide your gender (including the option "prefer not to say") and your date of birth. We use this data solely to verify the minimum age required to use the app (18+), to personalize recommendations, and to determine your eligibility for venue offers directed at specific guest groups (see "FOC Offers" below). Your date of birth is never displayed publicly and is never shared with third parties. Your gender is disclosed only where you actively apply for an offer whose review requires it, and may be visible to other users in features you choose to participate in.
If you grant the app access to your address book, we help you find contacts who already use Okidooki — similar to other messaging apps. This works as follows: phone numbers from your address book are converted to anonymous cryptographic hashes (SHA-256) on your device. Only these hashes are transmitted to our servers, where they are compared against the hashed, verified phone numbers of existing accounts and immediately discarded — they are processed transiently and are not stored. The names in your address book never leave your device; any assignment of an address-book name to an Okidooki user is stored locally on your device only. Access to your contacts is optional, requested only in context, and can be revoked at any time in your system settings. Invitations to your contacts are sent by you personally (e.g., via SMS) — we never message your contacts on your behalf.
You may voluntarily check in at a venue to signal your presence. A check-in requires your physical proximity to the venue, is limited in time (it expires automatically), and can be ended by you at any moment. You control who can see your identity at a venue (everyone, friends only, or nobody) in Settings; anonymous attendance counters always include every active check-in without revealing identity. Check-in data is used to display live venue activity within the app.
Venues may publish free-of-charge ("FOC") offers directed at specific guest groups. If you apply for such an offer or for free entry with a reservation, a snapshot of your profile (display name, profile photo, age, and gender) is shared with the venue's staff solely for the purpose of reviewing your application. Applying is always your explicit, voluntary action; you are never enrolled automatically. Monthly settlement statements provided to venues contain aggregate attendance data connected to accepted applications.
Our websites typically use "cookies" and similar technologies to identify your browser or device. A cookie is a file that is sent to your computer or automatically stored by your web browser when you visit our website. We use permanent cookies to store user settings, to better understand how you consume our offerings and content, and to show you tailored offers.
You can set your browser to reject cookies, store them only for one session, or delete them prematurely. If you block cookies, some functionalities may no longer work.
We may also use Google Analytics or similar services on our websites to measure and evaluate website usage. We have configured the service so that visitors' IP addresses are shortened before being forwarded, so they cannot be traced.
Our website uses TLS encryption for security reasons and to protect the transmission of confidential content ("Privacy by Design": Art. 7 para. 1 and 2 DSG).
Your data is generally not shared with third parties. We only share data with third parties if it is necessary to provide our service, if such third parties provide a service for us, if we are legally or administratively obliged to do so, or if we have an overriding interest in sharing the personal data.
If personal data is transferred to third parties (processors) for processing on our behalf, we conclude contracts obliging them to ensure data protection (Art. 9 para. 1 and 2 DSG).
Your personal data is generally not transferred abroad. If your data is transferred abroad, and the recipient country does not meet the Swiss data protection regulations (DSV), we take contractual measures to compensate for the weaker legal protection and ensure an adequate level of protection at the recipient (Art. 16 para. 2 lit. d DSG).
We process your personal data partly automatically to evaluate certain personal characteristics (profiling). We use profiling to inform you about products in a targeted manner. We use evaluation tools that enable us to provide tailored advertising and communication, including market and opinion research. We do not use fully automated decision-making to establish and conduct business relationships.
We process and store your personal data as long as it is necessary to fulfill our contractual and legal obligations or the purposes pursued with the processing (principle of proportionality: Art. 6 para. 2 DSG). Once your personal data is no longer required, it is generally deleted or anonymized as far as possible (cf. Art. 6 para. 4 DSG).
In compliance with legal requirements and to provide users full control over their personal data, we offer the option to delete your account entirely, along with all associated data, including:
To request account deletion, please send an email to support@okidokiapp.com with the subject line "Account Deletion". Include the following information to verify your identity:
Please note that account deletion is irreversible, and all data will be securely removed in accordance with the principles of proportionality and purpose limitation under Art. 6 para. 2 DSG and GDPR.
We take appropriate technical and organizational security measures (according to Art. 7 para. 1-3 DSG) to protect your personal data from unauthorized access or misuse. This includes instructions, internal policies, and staff training, access restrictions to our office premises, two-factor authentication, email encryption, regular checks of compliance with data protection law principles, data carrier encryption, and pseudonymization of data sets.
Our service does not address anyone under the age of 17. We do not knowingly collect personally identifiable information from anyone under 17. If you are a parent or guardian and know your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under 13 without parental consent verification, we take steps to remove that information from our servers.
In connection with the processing of personal data, you have the right to:
To exercise these rights, please contact us at support@okidokiapp.com. Exercising such rights usually requires clear proof of identity (e.g., a copy of an ID).
We may update this privacy policy without notice. The current version published on our website applies. If the privacy policy is part of an agreement with you, we will inform you of any changes by email or other appropriate means.