Privacy Policy

Effective date: 5 July 2026

Privacy is the core of how Ponoki is built, not an afterthought. Ponoki is local-first: your emotional life stays on your device. This policy explains, in plain English, exactly what data exists, where it lives, and what your choices are.

Ponoki is offered to adults aged 18 or older only (see the Terms & Conditions).

You can reach us any time via the in-app feedback form (Profile → Send feedback).

1. The short version

• Without an account, nothing leaves your device.
• With an account, the server stores your email, a password hash, and numeric counters — no mood logs, no journal entries, no record of how you felt on any given day.
• Anything you type about your thoughts or feelings is never stored and never transmitted — with one deliberate exception: the feedback message you choose to send us.
• Analytics is off by default and only ever anonymous if you opt in.
• You can delete your account and all server data in-app, immediately.

2. Data stored on your device (no account needed)

Ponoki works fully without an account. In that mode, all data lives in your browser's local storage on your device (in keys namespaced ponoki:*) and never leaves the device:

• Streaks and session counts
• Simple per-game stats (sessions played, best scores)
• Aggregate "after playing I felt better / same / rough" tally counts (totals only — never tied to a date or a session)
• Your companion's state (level, name, treats) and settings (goals, reduced motion, breathing-sound calibration, onboarding progress, your consent choices)

You can erase all of it at any time by clearing this site's data in your browser.

3. Data stored on the server (only if you create an account)

Creating an account is optional — it exists so your progress can survive a lost device and sync across devices. If you do, we use Supabase (our database and authentication provider) to store:

• Your email address and a password hash, managed by Supabase Auth (we never see or store your plain password). If you sign in with Google, Supabase Auth handles that sign-in.
• Numeric counters and small settings only: total sessions, current/longest streak, milestone ranks, weekly goal progress, your selected goals, per-game session counts and best scores, the aggregate better/same/rough tallies, your companion's chosen display name, and a marketing-email opt-in flag (true/false).

What the server never stores:

• No mood logs
• No journal or free-text entries about how you feel
• No per-day emotional history of any kind
• No record linking any feeling to any date or session

One deliberate exception: the in-app feedback form. If you choose to send us feedback, the message you type is stored so we can read it and improve Ponoki. That table is insert-only — the app cannot read feedback back out (not even you can, from your own account). Feedback is deleted along with everything else if you delete your account.

4. Sensitive content stays on-device

Some Ponoki tools (like Thought Untangler) invite you to type out a thought. A safety check scans what you type for crisis-related keywords so the app can show support resources. This check runs entirely in-memory, on your device. Your typed thoughts are never stored and never transmitted — not to our servers, not to anyone.

5. Analytics — opt-in only, anonymous only

Ponoki currently sends no analytics at all. In the future, if (and only if) you turn on "Share anonymous usage stats" (off by default; you can turn it off any time in settings), Ponoki may send anonymous, mechanical events — things like "a game session was completed" or "the upgrade button was clicked" — tied to a random anonymous identifier.

Anonymous analytics will never include your email, your name, anything you typed, or any data about your feelings or moods. If you never opt in, nothing is ever sent.

6. Marketing email — opt-in only

At signup you can tick a box to receive occasional Ponoki update emails. It is unticked by default. If you opt in, we store a single true/false flag with your profile. You can opt out at any time via the unsubscribe link in any such email or by asking through the in-app feedback form.

7. Payments

If you buy Ponoki Pro, the payment is processed by Lemon Squeezy, acting as merchant of record. Your card and billing details go directly to Lemon Squeezy and are handled under its privacy policy — your payment card data never touches Ponoki's systems.

8. Cookies and tracking

Ponoki does not use advertising trackers or third-party tracking cookies. Local storage is used only for the app data described above, and Supabase uses the storage needed to keep you signed in.

9. Where your data lives, and for how long

• Account data is hosted by Supabase on its cloud infrastructure.
• We keep your account data until you delete your account — there is no other retention period, because there is nothing else to retain.
• Local device data stays on your device until you clear it.

10. Deleting your account

You can delete your account from inside the app (Profile → Delete account), with no email needed and nothing to ask us for. Deletion is immediate and cascades through everything on the server: your profile, counters, per-game stats, tallies, and any feedback messages you sent. Your local device data is untouched (it's yours, on your device) unless you clear the site's data.

11. Your rights

Whether you're covered by the GDPR, India's DPDP Act, or similar laws, we honor the substance of those rights for everyone:

• Access: everything the server holds about you is visible in the app (your progress numbers) — there is no shadow profile. For anything else, ask via the feedback form.
• Deletion: in-app, immediate, complete (Section 10).
• Correction / objection / portability and other requests: contact us via the in-app feedback form and we will respond.

We never sell your personal data, and there is no "consent to sale" anywhere in this policy.

12. If the business is sold or transferred

If Ponoki (or the business operating it) is involved in a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor as part of that transaction, under protections at least as strong as this policy. We will give you notice via the app before or promptly after such a transfer, and you will always retain the ability to delete your account.

13. Children

Ponoki is not directed to anyone under 18, and we do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it.

14. Security

Account data is protected by Supabase's security controls (encrypted connections, hashed passwords, and row-level security policies so each user can only ever access their own rows). No system is perfectly secure, but Ponoki's strongest security measure is structural: the most sensitive data — how you feel — is simply never collected.

15. Changes to this policy

If we change this policy in any material way, we will give notice via the app before the change takes effect, and the "Effective date" above will be updated. We will never retroactively weaken the protections on data collected under an earlier version without your consent.

16. Contact

For any privacy question or request, use the in-app feedback form (Profile → Send feedback).