Effective Date: Jan-15-2026 | Last Updated: Jan-15-2026
This Privacy Policy explains how OK.de Services GmbH ("OK.secure", "we", "us", "our") processes personal data when you use the OK.secure Messenger application and related services ("Services").
This Policy is drafted in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable national data protection laws. It applies to users within the European Union and to users internationally, subject to applicable local laws.
OK.de Services GmbH
Uhlandstraße 165/166
10719 Berlin, Germany
Email: [email protected]
OK.de Services GmbH is the data controller for personal data processed in connection with the OK.secure messenger, AI features, and technical integrations described in this Policy.
This Privacy Policy applies to processing of personal data in connection with:
It does not apply to services provided independently by third parties acting as separate data controllers, even if accessible via OK.secure.
OK.secure is intended for users 16 years of age or older.
We do not knowingly process personal data of individuals under 16.
Username, email address, optional phone number, optional display name, internal account identifiers, and account status data.
Login timestamps, device identifiers, temporary IP address processing, security logs, and encryption key identifiers (private keys remain on user devices).
End-to-end encrypted messages, calls, files, and delivery metadata. Message content is inaccessible to OK.secure in plaintext.
App version, operating system, crash diagnostics, performance logs, and language/region settings.
Information provided during customer support interactions.
User prompts, generated responses, and required technical metadata. Processed ephemerally.
Public wallet addresses, public keys, transaction identifiers (hashes), token or asset identifiers, and transaction metadata required to display wallet activity and facilitate interactions with third-party crypto services.
Private keys and recovery phrases are not processed by OK.secure.
Limited technical status and integration data related to OK.pay services. No banking credentials, card numbers, or transaction details are processed by OK.secure.
OK.secure uses end-to-end encryption. Cryptographic keys are generated and stored on user devices. Blockchain technology is used only for wallet and crypto functionality, not for message key management.
Encrypted data may be stored on secure cloud infrastructure. Content remains encrypted at rest; decryption keys remain client-side. Cloud providers act as processors under Art. 28 GDPR.
AI features ("OK.ai") are provided via third-party AI services operated through Amazon Web Services (Amazon Bedrock).
OK.secure:
No automated decision-making under Art. 22 GDPR occurs.
The OK.secure crypto wallet is a non-custodial (self-custody) wallet.
Users are solely responsible for safeguarding their recovery credentials.
OK.secure does not itself provide buying, selling, exchanging, transferring, or spending of cryptocurrency.
All such services are provided exclusively by third-party providers, including:
These providers act as independent data controllers.
Their privacy policies and terms apply.
Where required by law, third-party crypto providers may require identity verification (KYC).
Blockchain networks are inherently transparent. Public addresses, transaction hashes, timestamps, and amounts may be publicly visible. OK.secure does not control blockchain records.
Wallet functionality may involve technical communication with blockchain infrastructure to display balances or initiate user-requested actions.
OK.secure minimizes data collection and does not use technical data for analytics or advertising.
OK.secure does not independently perform blockchain surveillance, sanctions screening, or transaction monitoring.
Any such checks are performed only by third-party crypto providers in the context of their regulated services.
Interactions with external dApps or services occur under those providers’ own terms and privacy policies.
OK.pay is a Prisma Payments EP S.A. product integrated into OK.secure.
Prisma Payments EP S.A. acts as the independent data controller for:
OK.secure:
Users should review the OK.pay Privacy Policy and Prisma Payments EP S.A. Privacy Policy provided on www.ok-pay.com for details on financial data processing.
OK.secure does not use personal data for analytics, profiling, or behavioral tracking. Only anonymized technical monitoring is used for reliability and security.
Requests are reviewed for legality and proportionality. Only legally required data is disclosed. Users are notified where permitted.
Transfers are protected via adequacy decisions, Standard Contractual Clauses, and safeguards.
Data is retained only as long as necessary, then deleted or anonymized.
Users have rights under Articles 15–22 GDPR.
Requests: [email protected]
Users may lodge a complaint with a competent supervisory authority (Art. 77 GDPR).
Encryption, access controls, incident response, and regular security reviews are in place.
Updates will be communicated appropriately.
OK.de Services GmbH
Email: [email protected]