Privacy Policy
Last updated: September 2026
The short version
Codiko is a local-first desktop app. Your manuscripts, characters, timelines, and other creative data are stored in project files you control and are not transmitted to Apoko during normal use. We only receive creative content if you explicitly choose to send it to us for support or troubleshooting.
1. Data Controller
The data controller is Apoko Ltd, a company registered in England and Wales (Company No. 13267255).
Registered office: 49 Station Road, Polegate, England, BN26 6EA.
Contact: [email protected]
2. What data the App collects
Codiko does not collect your creative content. Your manuscripts, characters, timelines, notes, and all project data are stored in local files on your device.
When you use AI features, queries are sent directly from your device to your chosen provider (OpenAI, Anthropic, or a local model via Ollama). We are not involved in this communication and do not have access to the content of your queries or responses. Each provider’s own terms and privacy policy govern that data.
The App communicates with our services for licence validation, update checks, and certain optional features described in Sections 6 and 8 below. No manuscript content, characters, or creative data is transmitted to us during these communications.
3. What data the website collects
We use Umami for privacy-focused website analytics. Umami does not set analytics cookies or store visitors’ IP addresses. It processes limited technical information to produce anonymised analytics such as page views, referrals, device/browser information, and approximate location. We cannot identify individual visitors.
We use Cloudflare for DNS, security, performance, and content delivery. Cloudflare processes limited network information such as IP addresses and request metadata in order to provide those services.
Legal basis: Legitimate interest in understanding, securing, and reliably operating our website.
4. Email & mailing list
If you sign up for our mailing list or email updates, your email address is processed on our behalf by MailerLite. MailerLite provides services to UK customers through MailerLite Limited in Ireland, and states that subscriber data for UK customers is stored within the EU. You can unsubscribe at any time via the link in any email. We do not sell your email address or disclose it for unrelated purposes.
Legal basis: Consent. You actively sign up and can withdraw at any time.
5. Purchases
Purchases are processed by Lemon Squeezy, our payment provider and Merchant of Record. They handle your payment information under their own privacy policy. We receive limited purchase and licence information from Lemon Squeezy, such as your name, email address, order and product information, licence details, and purchase status. We do not receive or store your full card details.
Legal basis: Performance of a contract (delivering and administering your licence).
6. Licence Validation & App Communications
When you activate a licence key in the App, it communicates with our server to verify the key and register your device. The data transmitted includes your licence key, a device identifier, and your app version. This requires an internet connection. The validation result is cached locally so the App works offline for up to 30 days before re-validation is needed.
The App also checks our server for available updates, transmitting your current version, platform, and architecture. No personal data or creative content is included in update checks.
If you use the in-app AI feedback feature (thumbs up/down on AI responses), feedback data is sent to our server. The feedback payload does not contain your messages, manuscript text, licence key, or personally identifiable information. It includes the rating, AI model and provider used, feature metadata, and a randomly generated identifier.
Legal basis: Performance of a contract (licence validation); legitimate interest (update checks, product improvement via feedback).
7. API keys
API keys you enter in Codiko (for OpenAI, Anthropic, etc.) are stored locally on your device. They are never sent to our servers.
8. Debug Reports & Support Files
Codiko does not automatically send crash reports or diagnostic data. However, the App includes a voluntary debug report feature that allows you to send your AI chat conversation (your messages and the AI’s responses) to us for troubleshooting. This is entirely opt-in and clearly labelled before you send it.
We may also ask you to share project files (e.g. your .codiko file or manuscript files) by email to help diagnose an issue. Any files or content you share with us voluntarily for support purposes will be used only to investigate and resolve the reported issue. We will only disclose it to service providers where necessary to provide that support, and we will delete it once the support case is resolved unless you ask us to retain it.
Legal basis: Consent (you actively choose to send the report or files).
9. Your rights
Under UK GDPR, you have the right to:
- Access any personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request restriction of processing
- Request data portability
- Withdraw consent at any time (where consent is the legal basis)
To exercise any of these rights, email [email protected].
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data rights have been violated.
10. Data retention
Email and mailing-list data is retained while you remain subscribed. Limited information may be retained after you unsubscribe where necessary to ensure we continue to honour your opt-out.
Licence and purchase information is retained for as long as reasonably necessary to administer your licence, provide support, prevent licence abuse, and meet legal and accounting obligations.
Support and debug content that you voluntarily send us is deleted when the relevant support case has been resolved, unless we need to retain it for a legal reason or you ask us to retain it.
Anonymous product feedback may be retained for product-improvement and statistical purposes.
We periodically review the personal data we hold and delete or anonymise information that we no longer need.
11. International transfers
Some of our service providers operate internationally. MailerLite provides services to UK customers through MailerLite Limited in Ireland and states that subscriber data for UK customers is stored within the EU. Lemon Squeezy and Cloudflare may process certain personal data outside the UK, including in the United States.
Where personal data is transferred outside the UK, we use service providers that maintain appropriate safeguards for international transfers as described in their privacy policies and data-processing agreements.
12. Children
Codiko is not directed at children under 13. We do not knowingly collect personal data from children.
13. Changes
We may update this policy from time to time. The latest version will always be available at this URL. Where changes materially affect how we process your personal data, we will make reasonable efforts to notify you.
14. Contact
Questions about privacy? Email us at [email protected] or use our feedback form.