Privacy notice: Okapup waitlist
Last updated: November 18, 2026
This notice covers the Okapup website (okapup.montilabs.co) and the waitlist only. The Okapup app is not out yet. It will have its own privacy policy, and you'll see it before you use the app.
Who we are
Okapup is made by MONTİ LABS TEKNOLOJİ VE YAZILIM LİMİTED ŞİRKETİ ("Monti Labs", "we", "us"), a company registered in Türkiye. We decide how your data is used, which makes us the "controller" under UK data protection law.
Questions or requests: okapup@montilabs.co
What we collect
When you join the waitlist we collect:
- Your email address.
- A record of your consent: when you agreed and which version of the sign-up wording you saw.
- Where you came from: the campaign tags in the link you clicked (for example, which video sent you). We don't know who you are on that platform.
- Your waitlist status: whether you confirmed your email and whether you unsubscribed.
To block spam sign-ups, we turn your IP address into a scrambled one-way code and keep that code for 2 days. We do not store your IP address itself.
We count visits with Umami, an open-source analytics tool that we run on our own server (rented from Hosting Dünyam, in Istanbul, Türkiye), so no analytics company receives your data. It uses no cookies and stores nothing on your device. To tell visits apart, it makes a scrambled code from your IP address, your browser details and a secret key. Your IP address itself is not stored. The code changes at the start of every calendar month, so visits within the same month can be grouped together, but it can't recognize you from one month to the next or follow you across other websites. We see only totals: pages viewed, the referring site, the campaign tags in the link, approximate location (country and city), and browser and device type. We keep these visit records for up to 12 months.
To opt out of visit counting, turn on "Do Not Track" in your browser, or tap Don't count my visits at the bottom of this page. That saves a small opt-out note in your browser, only so we can respect your choice.
What we don't collect: your name, anything about your dog, health information, or payment details. We use no advertising cookies or pixels, and we don't sell or share your data for advertising.
Why we use it, and our legal basis
| What we do | Legal basis (UK GDPR) |
|---|---|
| Send you a confirmation email, then waitlist emails: launch news, the Founding Member offer and beta invites | Your consent. You can withdraw it at any time |
| Keep a record of your consent and unsubscribe status | Our legitimate interest in proving consent and honoring opt-outs |
| Block spam and keep the site secure | Our legitimate interest in protecting the service |
| Count visits in aggregate | Our legitimate interest in knowing what works, with no cookies and no profiles |
We send only a few emails, mostly around launch. Every email has a one-click unsubscribe link.
Who handles it for us
We use a small number of service providers. Each one processes data only on our instructions:
- Supabase (database hosting, United States)
- Resend (email delivery, United States)
- Hosting Dünyam (the server that runs our website and our visit counting, Istanbul, Türkiye). Our website server keeps no access logs, so it doesn't store your IP address. Hosting Dünyam doesn't analyze the data for its own purposes.
We may also disclose data if the law requires it, or to a buyer if Okapup is ever sold. A buyer would have to keep these promises.
Where your data goes
- Your waitlist record (email, consent record, status) is stored in the United States (Supabase), and emails are sent from the United States (Resend).
- The website and the visit statistics are on our server in Türkiye.
- Our small team works from Türkiye.
If you're in the UK, your data leaves the UK. For our US providers, we rely on safeguards the law recognizes: the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in their data processing terms, or the UK Extension to the EU-US Data Privacy Framework where a provider is certified under it. Türkiye doesn't have a UK "adequacy" decision. We are based there, and the visit statistics we keep there contain no IP addresses, names or emails. Email us for more detail.
How long we keep it
- Never confirmed? We delete your sign-up 30 days after our last email to you.
- Confirmed? We keep your email while the waitlist is active. We delete all waitlist records no later than 12 months after the app launches.
- Unsubscribed? We delete your waitlist record straight away. We keep only a scrambled code made from your email address (a keyed hash, which can't be turned back into your address) and the date you unsubscribed. That way we don't email you again unless you sign up again yourself. If you do sign up again, we send one confirmation email, and nothing more unless you confirm.
- Asked us to delete your data? We delete your waitlist record and the scrambled unsubscribe code. That means we'd no longer recognize your address if someone signed it up again.
- Spam-protection codes are deleted after 2 days.
Your rights
You can ask us to:
- see the data we hold about you, or get a copy of it;
- correct it;
- delete it;
- restrict or object to how we use it;
- stop emailing you. Use the unsubscribe link or write to us.
Email okapup@montilabs.co. We reply within one month. It's free.
If you're unhappy with how we handled your data, please tell us first. You can also complain to your regulator:
- UK: Information Commissioner's Office, ico.org.uk
- Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
- Australia: Office of the Australian Information Commissioner, oaic.gov.au
- US: your state attorney general
Age
The waitlist is for adults. If you're under 18, please don't sign up.
Security
The database is not publicly accessible. Only our server functions can read it, and data moves over encrypted connections. No system is perfectly secure. If a breach affects you, we'll tell you as the law requires.
Changes
If we change this notice, we'll update the date above. If a change affects how we use your email, we'll tell you by email before it applies.