Privacy Policy

MDO Labs LLC ("MDO Labs," "we," "our," or "us") operates a WhatsApp Business Account (WABA) and a Meta Business App to facilitate business communications with our clients, partners, and contacts. This Privacy Policy explains how we collect, use, disclose, and safeguard information you provide or that we receive when you communicate with us through WhatsApp or our Meta Business platform.

By messaging us through WhatsApp Business or interacting with our Meta Business App, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

We may collect the following types of information when you interact with our WhatsApp Business Account or Meta Business platform:

• Contact information — your WhatsApp phone number and display name as provided by the WhatsApp platform.
• Message content — the text, images, documents, and other media you send to us through WhatsApp Business conversations.
• Business information — details you voluntarily share about your business, services, or needs in the course of our communications.
• Technical metadata — timestamps, message delivery status, and platform identifiers provided by WhatsApp/Meta as part of the messaging infrastructure.
• Usage data — information about how you interact with any automated messaging flows, templates, or interactive features we may deploy.

How We Use Your Information

We use the information collected through our WhatsApp Business Account for the following purposes:

• To respond to your inquiries and provide customer or business support.
• To deliver services, updates, and transactional communications you have requested.
• To manage and fulfill business relationships with clients and partners.
• To operate, maintain, and improve our WhatsApp Business messaging flows and automated agent tools.
• To comply with applicable legal obligations and Meta's Platform Terms.
• To prevent fraud, misuse, or unauthorized access to our systems.

Meta Platform & WhatsApp Data Handling

Our WhatsApp Business Account is operated through the WhatsApp Business API (Cloud API), provided by Meta Platforms, Inc. As a condition of using the WhatsApp Business platform, your data is also subject to Meta's own privacy policies and terms of service:

• WhatsApp Privacy Policy
• Meta Privacy Policy
• Meta Platform Terms

MDO Labs acts as a data controller for communications we initiate or receive directly. Meta acts as a data processor for the underlying message transmission infrastructure. We encourage you to review Meta's privacy documentation to understand how they handle data at the platform level.

Data Sharing & Disclosure

We may share information in the following limited circumstances:

• Service providers — We may engage trusted third-party service providers (e.g., cloud hosting, CRM, analytics) who process data on our behalf under appropriate data processing agreements.
• Legal compliance — We may disclose information where required by law, court order, or governmental authority.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent — We may share information for any other purpose with your explicit consent.

We do not share your WhatsApp message content with advertisers or data brokers.

Data Retention

We retain communications and associated data for as long as necessary to fulfill the purposes described in this policy, maintain business records, and comply with legal or contractual obligations. When data is no longer needed, we delete or anonymize it in accordance with our internal data management practices.

WhatsApp message history retention is also subject to Meta's own retention policies and any applicable data backup or deletion settings within our WhatsApp Business Account configuration.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect the information we collect against unauthorized access, disclosure, alteration, or destruction. WhatsApp Business messages are transmitted using end-to-end encryption provided by the WhatsApp platform.

However, no method of transmission or storage is 100% secure. We encourage you to communicate only information appropriate to a business messaging channel.

Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to applicable legal requirements.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us using the information in the section below. We will respond within a reasonable timeframe in accordance with applicable law.

Children's Privacy

Our WhatsApp Business services are intended for business and professional communications and are not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

okAndi is written for high-school students and adults and has its own age rules. See section 10.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our WhatsApp Business channel after such changes constitutes your acknowledgment of the updated policy.

okAndi

okAndi (okAndi.app) is a language tutor made by MDO Labs LLC. You practise by answering out loud. This section explains what okAndi does with your information. okAndi is in beta and is being released in stages, so we say plainly what is true today and what is planned.

Today: the beta

• No accounts, nothing sent to us. The beta is a program for the Mac. Your practice history, settings and saved replies are kept in a folder on your own computer. We cannot see them or reach them.
• Downloads. When you download or update okAndi, our hosting provider (Cloudflare) records standard request logs such as your IP address, as any website does.
• Beta invitations. If you email us, we keep your message and address to answer you and to send the invitation you asked for.

What stays on your device

• Your voice when okAndi listens. Listening is off unless you turn it on. Speech is turned into text on your device, the sound is discarded, and the text is dropped when the exchange ends. okAndi never uploads your audio.
• “Hear yourself” recordings. Off unless you turn them on. Clips are saved on your device only, so you can play your answer back. They are never uploaded and never shown to a teacher, a parent or anyone else. You can switch this off and delete the clips in Settings.
• Translation help. What you type when you ask how to say something is translated by your device’s own translation feature.
• Scoring. Where your device supports it, okAndi scores the text of your answer on the device, as feedback on that one answer. It does not score your pronunciation or accent.
• The Spanish voice uses voices built into your device.

One optional exception: on the Mac you can choose Claude, an AI service from Anthropic, as your translator, using your own Anthropic key. okAndi never chooses it for you. If you do, the text you type and the phrase you were answering are sent to Anthropic under their terms. Only text is sent, never audio.

Planned: accounts, sync, classes and families

The phone apps, the web app and accounts are not available yet. When they are, and only if you make an account, we expect to collect:

• Account details: your name or display name, email address, the age band you confirmed, and the sign-ins you link (Google, Apple or email).
• Practice history: which lessons and phrases you practised, when, your grades, scores, streaks and progress, so your progress follows you between devices.
• What you type and say, as text: the answers you type, the transcript of what you say (never the audio), and what you ask for help translating. This is used to run and improve okAndi.
• Classes and families: which class or family you belong to, and the assignments you were given and finished.
• Plan and purchases: which plan you have and whether it is active. Card payments are handled by Apple, Google Play or Stripe. We never see or store your card number.

What teachers and parents will see. Someone who helps you learn can see that you practised, what you are working on and whether assignments are done. They will never see what you typed when you asked for help, the score okAndi gave an individual answer in practice, or your recordings. A teacher sees class work only. A parent can link to a teenager’s account only if the teen accepts, and either side can unlink at any time.

Schools. When a school uses okAndi with its students, the school controls its students’ school records. We use them only to provide okAndi to that school.

What we do not do

• Show ads, in the app or anywhere else.
• Sell your personal data, or share it for advertising.
• Use advertising trackers or third-party advertising cookies.
• Collect your audio, your card number, your precise location or your contacts.

Age

okAndi is written for high-school students and adults. It is not directed at children under 13, and a child under 13 will not be able to create their own account. The one planned exception is a student whose school has approved okAndi and signed a data agreement with us, for school work only. If we learn that a child under 13 has a personal account, we will close it and delete its data.

Your choices

During the beta your okAndi data is on your own device: delete the app and its folder and it is gone. For anything we hold, such as an email you sent us, you can ask us to show it, correct it or delete it by writing to [email protected]. We will update this section, and tell account holders, before accounts and sync open.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: