Privacy
This page explains what happens to your data when you visit okidok.io or join the waitlist. We have kept it short and in plain language on purpose.
Who is responsible
okidok.io is run by two people, and both are the controller for the data described here. You can reach either of us at hello@okidok.io.
Cedric Jacob
Markt 35
53721 Siegburg
Germany
Anuja Anantharajah
Am Galgenberg 8
35745 Herborn
Germany
What this covers
This policy covers the website okidok.io and its waitlist. That is all that exists right now. Once the product itself launches, this page will be extended to cover it, and you will be told.
Data we process
When you join the waitlist, we store your email address, the time you joined, the time you confirmed your email, which form you used (the one at the top of the page or the one near the bottom), the page that referred you, the user agent string your browser sends (the short line naming your browser and operating system, which we keep with the entry to spot abuse), and a fingerprint of your IP address. That fingerprint is hashed and rotates daily, and it cannot be turned back into your IP address.
Separately, your IP address and other request details are processed briefly by Amazon CloudFront and API Gateway to deliver the site to you and to catch abuse. These are kept in server logs for 30 days and then removed.
The interactive demo
The landing page contains a working demo of the product. It runs entirely in your browser on invented data; nothing you do there sends an email, a message or a payment, and none of it is stored.
Section 05, "Money", is part of that simulation. No Stripe account is connected, no card is charged, no payout is made, and no payment data of any kind is collected or stored. The euro amounts, the payment plan and the refund are invented numbers that live in your browser tab until you close it.
The composer ("Ask okidok") is real. When you type into it, your message and a small snapshot of the demo's invented numbers are sent to our server in Frankfurt and from there to Amazon Bedrock, which processes them inside the EU. We do not store the text of your messages; we keep only a hashed session identifier, a hashed IP address, token counts and timings, so we can stop abuse and control cost. If the AI is unavailable or the daily budget is reached, the composer answers with pre-written replies instead. The model can be wrong; what that means for you is on the AI disclaimer page.
The line "N coaches here now" in the navigation is a demo figure that drifts between 3 and 12. It does not measure real visitors.
Why we process it, and on what basis
We use your email address to tell you when your workspace is ready. That is based on your consent, which you give by confirming your email address (Art. 6(1)(a) GDPR).
We use the fingerprint and the server logs to keep the waitlist and the site safe from abuse and to deliver the site reliably. That is based on our legitimate interest in running a working, abuse-free service (Art. 6(1)(f) GDPR).
Where your data is stored
Everything is stored on AWS servers in eu-central-1, in Frankfurt, Germany. Waitlist entries are kept until the waitlist closes or until you ask us to delete them.
Cookies and tracking
We do not use cookies, and we do not run any analytics or tracking on this site. The one thing the page stores in your own browser, using localStorage, is whether you have already confirmed your spot, so you are not shown the form again. That never leaves your device.
Confirmation emails and, later, launch emails are sent through Amazon SES from hello@okidok.io. Every email we send tells you how to leave the waitlist.
Who else sees your data
We use Amazon Web Services EMEA SARL, based in Luxembourg, to host the site and store the waitlist. This is covered by a data processing agreement, and by the EU Standard Contractual Clauses where they apply. Nobody else receives your data, and we do not sell it.
Your rights
You can ask us at any time, by emailing hello@okidok.io, to access the data we hold about you, correct it, delete it, restrict how we use it, receive a copy of it, or object to how we use it. If you gave consent, you can withdraw it at any time, and this will not affect anything we did before you withdrew it.
You also have the right to complain to a supervisory authority. In Germany, that is the data protection authority of your state. For us, that is the Landesbeauftragte fuer Datenschutz und Informationsfreiheit Nordrhein-Westfalen or the Hessischer Beauftragter fuer Datenschutz und Informationsfreiheit.
Changes to this page
We will update this page when the product changes in ways that affect your data. The date below tells you when it was last changed.
Last updated: 2026-09-10.