Privacy Policy

1. Who we are

Ohkayy Ltd is a company registered in England and Wales. Our website is at ohkayy.com. If you have any questions about this policy, please contact us at hello@ohkayy.com.

2. What data we collect

From the tools themselves: nothing. Our financial tools run entirely in your browser. The numbers you enter are processed locally on your device and never sent to our servers or anyone else's.

From email subscriptions: your email address only, and only when you actively choose to subscribe via a form on our site. Section 4a below covers this in detail.

3. Cookies

We set zero cookies. Not analytics cookies, not session cookies, not preference cookies, not advertising cookies. The only data stored in your browser is your dark mode preference and (on the Owdra debt-payoff tool only) a non-secret hint of your selected faith mode — both saved in localStorage (not cookies). The faith hint exists so the in-app sub-navigation can render in its final state on first paint without flashing additional links to non-Islamic users; the authoritative faith preference itself remains encrypted alongside your other Owdra data. Both items stay on your device and are never transmitted to us or any third party.

Because we set no cookies, you will never see a cookie consent banner on this website. There is nothing to consent to.

4. Third-party scripts

We use none. This website loads no Google Analytics, no Facebook Pixel, no advertising scripts, no social media trackers, no chat widgets, and no CDN-hosted fonts. Every asset is self-hosted on our own infrastructure. Once our page loads, your browser makes no further network requests to any third party — with one exception: when you submit the "Stay updated" form on our pricing page, your browser POSTs your email to our own server endpoint, which then talks to Resend (see Section 4a). No third-party script ever runs in your browser.

4a. Email subscriptions

When you submit the "Stay updated" form on /tools/owdra/pricing/ we collect your email address only. We use Resend as our email service provider — they store your address and deliver our updates on our behalf. We do not collect names, IPs, or any other identifier alongside your email.

Legal basis: we process your email address on the basis of your consent under UK GDPR Article 6(1)(a). Submitting the form is your active opt-in.

Right to withdraw: you can withdraw consent at any time, free of charge, by clicking the unsubscribe link in any email we send you, or by emailing us at hello@ohkayy.com. Withdrawing consent is not retroactive — it does not affect the lawfulness of any processing carried out before you withdrew.

Retention: Resend retains your contact record for as long as you remain subscribed. Once you unsubscribe (whether via an email link or a request to us), we delete your contact from Resend within 30 days, unless we are legally required to retain it for longer.

What we use it for: only to send you the product-update emails you signed up for. We do not sell your email, share it with advertisers, use it to build profiles, or use it for any purpose other than the updates you opted in to.

International transfer: Resend is based in the United States. Your email address may be processed and stored in the US under standard contractual clauses or equivalent UK GDPR-compliant transfer mechanisms — specifically the EU SCCs with the UK Addendum, and Resend's certification under the UK Extension to the EU-U.S. Data Privacy Framework. See Resend's Data Processing Agreement and Resend's privacy policy for details.

5. Hosting and infrastructure

Our website is hosted on Cloudflare Pages as static HTML files. The "Stay updated" form posts to a small Cloudflare Pages Function on our own infrastructure that forwards your email to Resend — Cloudflare does not retain your email address. Cloudflare may process connection metadata (IP addresses, request headers) as part of normal web serving. Cloudflare's privacy policy applies to that processing. We have configured our site to minimise Cloudflare's data collection — no Cloudflare Analytics, no bot management cookies.

6. Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have rights including the right of access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent (Section 4a covers withdrawal for email subscriptions). For visitors who never subscribe, we do not collect or hold any personal data, so these rights do not create any practical obligation on us — but we respect them fully in principle. If you believe we hold personal data about you, please email hello@ohkayy.com and we will respond within 30 days.

7. Managed AI services

If you are a client of our managed AI consulting services, your data processing is governed by our separate Managed AI Consulting Services Agreement and Data Processing Agreement, not this website privacy policy. Our managed service operates on hardware you own, in your premises. We access your systems only via encrypted connections and only when required to provide agreed services. We do not retain copies of your data.

8. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a revised "last updated" date. If a change materially affects email subscribers' rights or processing, we will email subscribers separately.

9. Contact

For privacy-related questions: hello@ohkayy.com