← Back to Ponoki

Privacy Policy

Effective date: 3 August 2026

Privacy is the core of how Ponoki is built, not an afterthought. Ponoki is local-first: your emotional life stays on your device. This policy explains, in plain English, exactly what data exists, where it lives, and what your choices are.

Ponoki is offered to adults aged 18 or older only (see the Terms & Conditions).

You can reach us any time via the in-app feedback form (Profile → Send feedback).

1. The short version

2. Data stored on your device (no account needed)

Ponoki works fully without an account. In that mode, all data lives in your browser's local storage on your device (in keys namespaced ponoki:*) and never leaves the device:

You can erase all of it at any time by clearing this site's data in your browser.

3. Data stored on the server (only if you create an account)

Creating an account is optional; it exists so your progress can survive a lost device and sync across devices. If you do, we use Supabase (our database and authentication provider) to store:

What the server never stores:

One deliberate exception: the in-app feedback form. If you choose to send us feedback, the message you type is stored so we can read it and improve Ponoki. That table is insert-only; the app cannot read feedback back out (not even you can, from your own account). Feedback is deleted along with everything else if you delete your account.

4. Sensitive content stays on-device

Some Ponoki tools (like Thought Untangler) invite you to type out a thought. A safety check scans what you type for crisis-related keywords so the app can show support resources. This check runs entirely in-memory, on your device. Your typed thoughts are never stored and never transmitted, not to our servers, not to anyone.

5. Analytics: opt-in only, anonymous only

Analytics is off unless you turn it on. You are asked once, plainly, and nothing is pre-ticked. You can change your mind any time in settings.

If you never opt in, nothing is ever sent. No analytics code is even loaded: without your recorded consent the app does not fetch it, so there is no connection to any analytics service at all, not merely a switched-off one.

If you do opt in, Ponoki sends anonymous, mechanical events to Mixpanel, our analytics provider. These are counters, meaning a thing the app did, never a thing you felt. The complete list is:

Each event is tied only to a random identifier generated on your device. That identifier is never linked to your account, your email, or your companion's name, and we do not send your IP address for location or attach it to events.

Anonymous analytics never include your email, your name, anything you typed, or any data about your feelings or moods. That is enforced in the code itself: events and their fields are checked against a fixed list before anything is sent, so there is no path by which a mood, a typed thought, or an email address could be transmitted even by mistake.

6. Marketing email: opt-in only

At signup you can tick a box to receive occasional Ponoki update emails. It is unticked by default. If you opt in, we store a single true/false flag with your profile. You can opt out at any time via the unsubscribe link in any such email or by asking through the in-app feedback form.

7. Payments

If you buy Ponoki Pro, the payment is processed by Gumroad, acting as merchant of record. Your card and billing details go directly to Gumroad and are handled under its privacy policy; your payment card data never touches Ponoki's systems.

8. Cookies and tracking

Ponoki does not use advertising trackers or third-party tracking cookies. Local storage is used only for the app data described above, Supabase uses the storage needed to keep you signed in, and, only if you opted in to analytics, Mixpanel keeps one local storage entry for the random identifier in section 5. No cookies are set for analytics.

9. Where your data lives, and for how long

10. Deleting your account

You can delete your account from inside the app (Profile → Delete account), with no email needed and nothing to ask us for. Deletion is immediate and cascades through everything on the server: your profile, counters, per-game stats, tallies, and any feedback messages you sent. Your local device data is untouched (it's yours, on your device) unless you clear the site's data.

For the exact steps, and an email fallback if you cannot open the app, see How to delete your account.

11. Your rights

Whether you're covered by the GDPR, India's DPDP Act, or similar laws, we honor the substance of those rights for everyone:

We never sell your personal data, and there is no "consent to sale" anywhere in this policy.

12. If the business is sold or transferred

If Ponoki (or the business operating it) is involved in a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor as part of that transaction, under protections at least as strong as this policy. We will give you notice via the app before or promptly after such a transfer, and you will always retain the ability to delete your account.

13. Children

Ponoki is not directed to anyone under 18, and we do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it.

14. Security

Account data is protected by Supabase's security controls (encrypted connections, hashed passwords, and row-level security policies so each user can only ever access their own rows). No system is perfectly secure, but Ponoki's strongest security measure is structural: the most sensitive data, how you feel, is simply never collected.

15. Changes to this policy

If we change this policy in any material way, we will give notice via the app before the change takes effect, and the "Effective date" above will be updated. We will never retroactively weaken the protections on data collected under an earlier version without your consent.

16. Contact

For any privacy question or request, use the in-app feedback form (Profile → Send feedback).