Legal

Cookie Policy

The Rajma Company Inc. | Effective August 28, 2026

The Rajma Company Inc. (“Rajma,” “we,” “us”) operates the meetoku.app website and the Oku mobile app (together, “Oku”). This Cookie Policy explains what cookies and similar technologies we use, why we use them, and how you can control them. For how we handle personal information more broadly, see our Privacy Policy at meetoku.app/privacy. (PIPEDA, S.C. 2000, c. 5, Sched. 1, Principle 9; Law 25, s. 8.1)

Oku is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.

1. What Are Cookies and Similar Technologies?

Cookies are small text files a website places on your browser. They remember information between page loads or visits.

Pixels and web beacons are tiny invisible images embedded in a page or email. When loaded, they signal to a third party that you visited a page or opened a message.

Local storage is a browser feature that stores data on your device without an expiry date, unless cleared manually.

Mobile advertising identifiers are device-level IDs — Apple’s IDFA (iOS) and Google’s Advertising ID (GAID) (Android) — that allow apps and ad networks to recognise your device across apps for attribution and advertising purposes.

Probabilistic fingerprinting estimates device identity from signals such as IP address, device model, and OS version, without placing a file on your device.

2. Cookie Categories

We use three categories of cookies and similar technologies.

2.1 Strictly Necessary

Purpose: Site operation, security, load balancing, and waitlist form submission. These are required for Oku to function and cannot be disabled.

First or third party: Primarily first party; some may be set by Framer (our website platform) as part of site infrastructure.

Duration: Session cookies expire when you close your browser. Persistent cookies in this category are retained for up to 12 months.

Consent required: No. (CASL, S.C. 2010, c. 23, s. 8; PIPEDA Sched. 1, Principle 3)

2.2 Analytics and Performance

Purpose: Understanding how visitors use the site and app — pages visited, time spent, errors encountered, and aggregate traffic patterns. This helps us improve Oku.

Providers:

Framer Analytics — built into our website platform. Framer sets its own cookies under its privacy policy at framer.com/privacy.

Google Analytics 4 (GA4) — standard mode. GA4 collects full IP addresses and retains data for up to 26 months (GA4 default). Google’s privacy policy is at policies.google.com/privacy.

First or third party: Third party (Framer, Google).

Duration: Session and persistent; up to 26 months or as set by the vendor.

Consent required: Yes. These cookies are not set until you accept the Analytics category. (PIPEDA Sched. 1, Principle 3; CASL s. 8(2)(b); Law 25, s. 8.1)

2.3 Marketing and Advertising

Purpose: Measuring the performance of our marketing campaigns and, where applicable, showing Oku ads to people who have previously visited the site or app. This category also covers mobile advertising identifiers used for install attribution and retargeting.

Providers:

Meta Pixel — tracks site visits and events for campaign measurement and retargeting on Meta platforms. Meta’s privacy policy: facebook.com/privacy/policy.

Reddit Pixel — tracks site visits for campaign measurement on Reddit. Reddit’s privacy policy: reddit.com/policies/privacy-policy.

LinkedIn Insight Tag — tracks site visits for campaign measurement on LinkedIn. LinkedIn’s privacy policy: linkedin.com/legal/privacy-policy.

AppLovin — operates an advertising network. AppLovin may share device-level data (including IDFA and GAID) with its publisher and advertiser partners. AppLovin’s privacy policy and opt-out page: applovin.com/privacy. (FTC Act, 15 U.S.C. § 45; Law 25)

Branch.io — see Section 2.4 below.

Mobile advertising identifiers: IDFA (iOS) and GAID (Android) are used by AppLovin and Branch.io for install attribution and retargeting. On iOS, Apple’s App Tracking Transparency (ATT) prompt will appear before IDFA is accessed; your response controls whether IDFA is shared. On Android, you can opt out via device settings (see Section 4.2). (Apple App Store Review Guidelines § 5.1.2)

First or third party: Third party.

Duration: Up to 26 months or as set by the vendor.

Consent required: Yes. These technologies are not activated until you accept the Marketing category. (Law 25, s. 8.1; CASL s. 8; CCPA/CPRA, Cal. Civ. Code § 1798.120; PIPEDA)

We may add further event-tracking or attribution tools in the future. Any such addition that materially affects this policy will be disclosed in accordance with Section 6 below.

2.4 Mobile Measurement and Attribution — Branch.io

Branch.io provides mobile deep linking and install attribution for the Oku app. Branch.io uses device identifiers (IDFA, GAID) and probabilistic fingerprinting — estimating device identity from signals such as IP address and device model — to determine how users discovered and installed Oku. This operates differently from browser cookies because it does not place a file on your device; instead, it infers identity from device signals.

Branch.io is gated behind the Marketing consent category. Branch.io’s privacy policy is at branch.io/policies/privacy-policy. (CASL s. 8; Law 25)

4. Browser and Device Controls

4.1 Browser Cookie Settings

Most browsers let you view, block, or delete cookies through their settings menu. Blocking all cookies may prevent some parts of the site from working correctly.

4.2 Mobile Advertising Identifier Controls

iOS: Go to Settings → Privacy & Security → Tracking to manage which apps may request your IDFA. If you deny tracking, IDFA is not shared with AppLovin or Branch.io.

Android: Go to Settings → Privacy → Ads to reset or opt out of personalised ads using your GAID.

4.3 Global Privacy Control (GPC)

If your browser or device sends a GPC signal:

California and Colorado users: We treat GPC as a legally binding opt-out of the sale or sharing of personal information via non-essential cookies, consistent with CPRA regulations (Cal. Code Regs. tit. 11, § 7025) and the Colorado Privacy Act (C.R.S. § 6-1-1306(1)(a)(III)).

Canadian users: We treat GPC as a preference signal and will apply it to non-essential cookies as a matter of good practice, but it does not carry the same legal effect as an explicit consent withdrawal.

5. Consequences of Rejecting Each Category

Strictly Necessary: Cannot be rejected. The site and app require these to function.

Analytics and Performance: If rejected, no analytics data is collected about your visit or app usage. The site and app continue to function normally.

Marketing and Advertising: If rejected, no retargeting pixels fire, no campaign measurement occurs, and IDFA/GAID are not accessed by AppLovin or Branch.io. You may still see Oku ads elsewhere, but they will not be based on your prior visit.

6. Third-Party Cookies — Limits of Our Control

When you accept Marketing or Analytics cookies, third-party vendors set cookies from their own domains. We do not control those cookies. Each vendor’s privacy policy governs their data practices. We encourage you to review the policies linked in Section 2 above.

7. Policy Updates and Material Changes

The effective date at the top of this policy reflects the most recent version. If we make a material change — such as adding a new advertising vendor or a new cookie category — we will email waitlist members with a summary of what changed and a link to the updated policy. The consent banner will be re-triggered for new visitors following a material change. (Law 25; PIPEDA accountability principle; CalOPPA, Cal. Bus. & Prof. Code § 22575(b)(5))

8. Do Not Sell or Share My Personal Information

California residents’ right to opt out of the sale or sharing of personal information is addressed in our Privacy Policy at meetoku.app/privacy. To exercise this right, email Info@meetoku.app. (CCPA/CPRA, Cal. Civ. Code § 1798.120)