Privacy
Privacy policy
Pocklo is a household assistant for notes, lists and reminders, made by Neatifai LLC in the United States. This policy says what Pocklo collects, why, who helps run it, how long things are kept and the choices you have.
The short version
- Pocklo keeps what you save so it can remind you and help you follow through. It doesn’t sell your information, show ads or use trackers.
- AI help is your choice. When it’s on, the words, photos or voice notes a step needs go to OpenAI with storage turned off; OpenAI doesn’t train on them and may keep them for up to 30 days to check for abuse. Basic mode uses no AI.
- What you put in a shared space is seen by its members. Your Personal space is only yours.
- You can download everything you’ve saved, and delete your account, from Settings › Account.
- Pocklo is for adults 18 and older in the United States.
What Pocklo collects
- Your account: your email address, your name, your password (kept only as a salted hash), your time zone and your settings, such as quiet hours, your morning time and how notifications look.
- What you save: notes, lists, reminders, appointments, checklists, photos, saved memories and categories, and the text Pocklo reads from photos. Location and camera details are removed from photos on your device before they’re uploaded.
- Voice notes: the recording goes to OpenAI to become text and isn’t kept. Pocklo keeps the text.
- Shared spaces: who’s in each space, invitations, and the space’s Activity: who added, finished or changed what, recorded without the note’s text.
- Calendars, if you connect Google Calendar: read-only access to the calendars you choose. Pocklo copies their events (title, time and place) to spot conflicts and plan around them, replaces the copy each time it checks, and keeps the access tokens encrypted.
- Devices and sign-ins: a label such as “Safari on Windows”, sign-in times, and the push tokens that let reminders reach your devices. Pocklo doesn’t store IP addresses; it uses them briefly, hashed, to slow down abuse.
- Usage and diagnostics: how much AI help each person and household used each month, for budgets, with no content; crash reports from the iPhone app with your notes removed; and server error reports and logs with no note content.
- AI activity: when AI help is on, what each request was for and which of your items and memories it read, recorded without their text, so Settings › Privacy & AI can show you what Pocklo saw. You can clear it at any time.
- Feedback you send: your message, and technical details or an item’s text only when you choose to include them.
- If you subscribe: your plan, its renewal dates and payment status. Pocklo never sees your card number.
Pocklo doesn’t collect your precise location, your contacts, health records or advertising identifiers.
How Pocklo uses it
- To run Pocklo for you: saving, syncing between your devices and your household, reminding you, organizing what you save, and answering questions from your notes.
- To send account email: codes, security notices such as a new sign-in, and messages about your account. Optional email has a one-click unsubscribe.
- To keep Pocklo working and safe: fixing crashes, limiting abuse, keeping AI spending within each household’s budget, and backing everything up.
- Never for advertising. Pocklo doesn’t sell or share your information for targeted advertising.
If someone may be in danger. Pocklo checks what you type to it for signs of crisis or emergency so it can show help numbers. The result isn’t saved, and no one is told. This check is switched off while a legal review finishes; Settings always lists the help numbers. How it works.
Learning from your habits. Pocklo doesn’t keep a record of how you answer reminders yet. When habit learning arrives, it will be on by default with a switch for each person in Settings, its record will be kept for 180 days, and “Forget my habit history” will clear it.
Pocklo and AI
When AI help is on, each step sends OpenAI only what it needs, with storage turned off. OpenAI doesn’t use it to train its models and may keep it for up to 30 days to check for abuse. Pocklo’s AI can get things wrong, so it shows where answers come from, and nothing it suggests happens until a person chooses it. Its rules are published at pocklo.com/ai.
| When | What goes to OpenAI |
|---|---|
| You save something | Your words, a few related notes from the same space and the space’s saved memories |
| You record a voice note | The recording, to turn it into text |
| You add a photo | The photo, read once when it’s saved (unless you choose “Don’t read”) and again when you ask |
| You ask Pocklo a question | Your question and the matching parts of your notes |
| Pocklo suggests a time or an answer, or you reply to a reminder | The item, your reply and, for times, your busy times |
| The Morning Brief and appointment prep | The titles and times of the to-dos it’s choosing from, your busy times, and related notes for an appointment |
| Calendar conflicts | Busy times and the titles of the events involved, to phrase the question |
| Search by meaning | The text of your notes, turned into numbers that stay on Pocklo’s server |
Your choice. You can choose “Use AI” or “Use Basic mode” at any time in Settings. Basic mode organizes with simple rules and sends nothing to OpenAI. A shared space uses AI only while everyone in it has AI on.
Health information. Pocklo isn’t a health service and doesn’t give medical advice. Notes and photos can contain health information; when Pocklo reads a photo, it removes card numbers and pharmacy dosing lines from what it keeps.
Feedback. What you send Pocklo’s team is read to fix problems and improve Pocklo, and isn’t used for anything else. It never goes to OpenAI.
Who helps run Pocklo
Pocklo is made by one small company, Neatifai LLC. These companies process information on its behalf, only to provide their part of Pocklo:
| Company | What it does | What it receives |
|---|---|---|
| Render (United States) | Runs Pocklo’s servers and database. | Everything Pocklo stores, to keep it for you. |
| Cloudflare | Stores photos and Pocklo’s encrypted nightly backups (R2). | Photo files and backups, which only Pocklo can read. |
| OpenAI | Provides the AI behind Pocklo’s help, when AI is on. | What each AI step needs (see “Pocklo and AI”), with storage turned off. |
| Resend | Sends Pocklo’s email: sign-in codes, security notices and account messages. | Your email address and the message, which it keeps for 30 days. |
| Expo and Apple Push Notification service; the push services of Google, Apple and Mozilla for browsers | Deliver notifications to your devices. | A device token and the notification. With “Show item names” on, it includes the item’s title. |
| Apple | Runs Siri, and the App Store for purchases on iPhone. | What you say to Siri about Pocklo, and App Store purchase details. |
| Google Calendar, only if you connect it. | Pocklo’s read-only requests for the calendars you choose. | |
| Sentry | Collects crash and error reports so problems get fixed. | Technical details, with your notes removed. You can turn crash reports off. |
| Better Stack | Watches whether Pocklo is up and keeps its operational logs. | Logs with no note content. |
| RevenueCat and Stripe | Handle subscriptions, only if you subscribe. | A random billing id and the purchase details, plus the email address Stripe asks for at checkout on the web. Never your notes. |
Pocklo’s founder can reach the service’s data to run and support it, and every such action on an account is recorded. Contractors who help with support work under confidentiality and see only what you send to support. Pocklo discloses information to authorities only when the law requires it.
Google Calendar
Pocklo asks Google for read-only access to your calendars
(calendar.readonly), to show your day, find conflicts and suggest times
around what’s already booked. It never changes your calendars. Busy times, and the titles
of events involved in a conflict, go to OpenAI with storage turned off, to phrase conflict
questions and the Morning Brief. Your calendar stays private to you, even in a shared
space.
Pocklo’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
How long Pocklo keeps things
| What | Kept |
|---|---|
| Your notes, lists, reminders, memories and settings | Until you delete them |
| Items in Trash | 30 days, then every trace is gone |
| A photo removed from an item | 30 days, in case you want it back |
| Undo and edit history, and capture records | 90 days |
| Activity in a shared space | 12 months, without note text |
| AI activity: what each AI request was for and which items it read, without their text | 30 days, or until you clear it |
| Sign-in records | 30 days after the sign-in ends |
| Codes for sign-up, sign-in and resets | 7 days |
| Encrypted backups | 30 days |
| Monthly AI usage totals, with no content | 13 months |
| Feedback you send | 12 months |
When you delete your account, Pocklo signs out every device and deletes everything that’s yours 7 days later, unless you sign in and keep it. What you added to a shared space stays for its other members, shown as added by “Former member”. A record that the account was deleted (its id and dates, nothing else) is kept for a year, so a restored backup deletes it again.
Your choices and rights
- See and download everything you’ve saved: Settings › Account › Download your data.
- Correct anything by editing it, and your account details in Settings › Account.
- Delete your account: Settings › Account › Delete account.
- Choose Basic mode to keep your words away from AI, and turn off crash reports, item names in notifications or optional email in Settings.
Depending on where you live, the law may give you rights to know, access, correct, delete or get a copy of your information, to appeal a decision about a request, and to opt out of a sale of your information (Pocklo doesn’t sell it). Pocklo honors these requests for everyone. Email privacy@pocklo.com, and we’ll answer within 30 days.
Keeping it safe
Connections are encrypted, passwords are stored only as salted hashes, calendar tokens and backups are encrypted, and new sign-ins can email you. No security is perfect: if something goes wrong that affects your information, Pocklo will tell you as the law requires. Report a security problem to security@pocklo.com.
Adults only, in the United States
Pocklo accounts are for adults 18 and older, and Pocklo is offered in the United States, where its data is stored. If we learn that an account belongs to someone under 18, we’ll delete it.
Changes to this policy
Each version of this policy has a number. When it changes in a way that matters, Pocklo tells you in the app and asks you to accept the new version before you go on.
Contact
Neatifai LLC · privacy@pocklo.com for privacy, support@pocklo.com for anything else.