Privacy
Consumer health data privacy policy
How Pocklo treats what you save that says something about your health: what it may collect, why, who receives it and your rights.
Some laws, such as Washington’s My Health My Data Act, protect information about your health that medical privacy law doesn’t cover. Pocklo isn’t a health service, but what you save in it can say something about your health, so Pocklo treats it with the care these laws ask for, wherever you live. This policy adds to the privacy policy.
What counts
Consumer health data is information linked to you that says something about your physical or mental health: a note about a medicine, a reminder for a doctor’s appointment, a photo of an insurance card, or the place of a clinic you go to.
What Pocklo may collect
- What you save: notes, reminders, lists, appointments, photos and memories that mention your health, such as “Refill the inhaler Friday” or “Dentist Tuesday at 3”.
- A document you photograph for its expiry date, such as an insurance card: after you say yes, the photo goes to OpenAI once to read the date and is then deleted. Only the date is kept.
- Places, if you turn on leave-by: the places your appointments name, which can be a clinic or a pharmacy, what a search found for them and the travel times, all kept encrypted.
- Calendars you connect: your events’ titles and times, and, for a calendar you turn leave-by on for, their places.
- How you answer reminders and what you check off, only after you turn on “Learn from my habits”, where it’s available.
- Signs that someone may be in danger: when the help check is on, Pocklo looks at what you type for them, only to show help numbers. The result isn’t kept, and no one is told.
Where it comes from
From you, and from the members of a shared space you’re in, who can add to it. Pocklo doesn’t buy health data or get it from anyone else.
Why Pocklo uses it
Only to give you what you ask for: saving it, reminding you, organizing what you save, answering your questions from it, telling you when to leave for an appointment and reading a date you asked Pocklo to read; and to keep Pocklo working and safe. Never for advertising, never to guess things about your health for anyone else, and never sold.
Who receives it
Only the companies in the privacy policy’s Who helps run Pocklo, each for its part: Render stores it; Cloudflare stores photos and backups and passes on forwarded email; OpenAI reads what an AI step needs, when AI is on, with storage turned off; Google Maps receives the words for a place and points rounded to about 100 meters, when leave-by is on; and Apple and Expo deliver notifications, with an item’s title only while “Show item names” is on. Also the members of any shared space you put it in.
Your consent
- Pocklo collects health data only to provide what you ask for.
- Before leave-by sends any place to Google, Pocklo asks once and says what goes.
- Before a photo is read for its date, Pocklo says it goes to OpenAI and waits for your yes.
- AI is your choice: Basic mode sends nothing to OpenAI.
- Pocklo never sets up a geofence around a health care provider, and never uses your device’s location for leave-by. Place reminders check where you are on your iPhone alone.
Your rights
- Know whether Pocklo collects or shares your consumer health data, and with whom.
- See and download it: Settings › Account › Download your data.
- Delete it: delete the item, or your account in Settings › Account › Delete account.
- Withdraw your consent: turn off leave-by, choose Basic mode, or turn off “Learn from my habits”, in Settings.
For anything else, or to ask in writing, email privacy@pocklo.com. Pocklo answers within 45 days, and tells you if it needs up to 45 more. If Pocklo turns down your request, reply to say you appeal; Pocklo answers the appeal within 45 days, and if it still says no, you can contact your state’s attorney general (in Washington, atg.wa.gov/file-complaint).
How long Pocklo keeps it
As the privacy policy’s How long Pocklo keeps things says: what you save until you delete it, forwarded email for 30 days, a place search for 30 days and a photo read for its date not at all once it’s read. Deleting your account deletes all of it 7 days later, and copies in backups expire within 30 days.
Changes and contact
Each version of this policy has a number, and Pocklo tells you in the app when it changes in a way that matters. Neatifai LLC · privacy@pocklo.com.