Privacy Policy.

Who is responsible

The controller for this app is Alain Kessler, a sole proprietorship in Switzerland, operating under the brand Klar. For any privacy question or request, contact feedback+pocketmate@reply.getklar.org.

What we collect

Account data. Your email address, so you can sign in and keep your widgets across devices. If you sign in with Google, we receive your email address and basic profile from Google, nothing else. A nickname and an avatar are optional and set by you.

iPhone onlySign in with Apple. If you use it, we receive the email address Apple gives us, which can be a private relay address instead of your real one, and your name if you choose to share it. Nothing else.

Your circle. Who you are paired with, the people in your circle, and when you connected. Only the people you added see what you share.

What you put on a widget. The status you set, whether you are asleep or awake if you tell the app, dates you add such as a countdown, a birthday or the day you got together, the doodles you draw and the photos you send. These are stored so the people you share them with can see them, and they appear in your shared moments timeline.

Photos you send to one person. A photo for the photo widget, or one you send to the person you are paired with, is uploaded to a private storage area. Only you and that person can open it, and the app shows it through links that expire after an hour. Photos are never public.

iPhone onlyThe tracker. The iPhone app includes a private tracker for bowel movements. Each entry stores when you logged it. If you add details to an entry, such as the type on the Bristol stool scale, a colour, symptoms or a note, those are stored with it. This is health data, and we process it only with the explicit consent you give when you create your account. The people in your circle see at most how many entries you logged this week, and your streak and calendar only if you switch that on. Bristol type, symptoms, notes and photos are never shared with anyone. A photo attached to an entry stays on your phone and is not uploaded.

iPhone onlySleep from Apple Health. Only with your explicit consent does Pocketmate read your sleep from Apple Health. It reads sleep and nothing else, and never writes anything to Health. Whether you are asleep and how long you slept is shared only with the person you are paired with, and only while that sharing is on. You can withdraw it at any time in the app or in the iOS Settings.

Distance, if you turn it on. To show how far apart you are, the app reads your location while it is open and rounds it to about a kilometre before it leaves the phone. Your exact position is never sent to us, and the app does not read your location in the background.

Finding friends in your contacts, if you choose to. Phone numbers and email addresses from your address book are turned into unreadable checksums on your phone. Only those checksums are compared with the ones other users chose to publish, and only the matches come back. We do not store your address book or who is in it.

Messages to support. If you write to us from inside the app, your message is stored so we can answer it.

Purchase status. Payments are processed by Apple through the App Store on iPhone, and by Google Play on Android. We receive only the resulting entitlement status, active or not, through our subscription provider RevenueCat. We never receive your card or payment details.

Notifications. Our server sends you push notifications, for example when someone in your circle does something for you or a date you share comes up. If you allow notifications, your phone gets a push token that we store with your account. We also store the language you use the app in and your time zone, so that a notification arrives in your language and at a sensible local hour. Notifications are delivered through the Expo push service, which passes them on to Apple or Google for the last step.

iPhone onlyDrawings on the lock screen.When someone draws for you, the drawing can appear live on your lock screen. For that, your iPhone gives us a token for this lock screen display, which we store with your account. These updates go from our server straight to Apple's push service.

Usage statistics. Which screens are opened, sent to our analytics provider PostHog in the European Union. After you sign in they are linked to your account ID, never to your name or email.

Crash reports. If the app crashes, a technical report (stack trace, device model, system version, app version) goes to our own crash server in Germany. It is used to fix bugs and nothing else.

Recommendation links. If you installed the app through a link from someone who recommends it, we compare your IP address and browser type once, at your first sign-in, with recent clicks on such links, to credit the person who recommended it. The IP address is only ever stored as a salted checksum, and the click records are deleted after 7 days. Your account keeps only the name of the person who recommended the app.

What stays on your phone

The camera.Used to scan a friend's QR code, and to take a photo for the photo widget if you choose to. A scanned code is read on the phone and nothing is recorded.

Your exact location, and your address book. See above: only a rounded position and unreadable checksums ever leave the device.

Appearance. Your theme and how you arranged your widgets are kept on the device. The widget images themselves are drawn on your phone.

What we do not do

No advertising and no ad networks. No cross-app or cross-site tracking, and no advertising identifier. No precise location and no background location. Nothing about you is public: only the people in your circle see what you share. We do not sell or rent personal data to anyone.

The Android app processes no health data at all. On iPhone, health data (tracker entries and, if you allow it, sleep) is used only to run those features for you, and never for advertising or for anything else.

Why we process this data

To provide the app and your account, to show your circle what you share, to send you notifications, to unlock and restore the paid features, to fix crashes and to understand how the app is used. Legal bases under the GDPR are the performance of our contract with you (Art. 6 para. 1 lit. b), our legitimate interest in stable software and basic usage statistics (Art. 6 para. 1 lit. f), and your consent for location, contacts and notifications (Art. 6 para. 1 lit. a), which you can withdraw in the system settings at any time. The Swiss Data Protection Act (DSG) applies in parallel.

iPhone onlyTracker entries and sleep are health data. We process them only on the basis of your explicit consent (Art. 9 para. 2 lit. a GDPR). You can withdraw the consent for sleep at any time in the app or in the iOS Settings, and the consent for the tracker by deleting your account.

Service providers

Supabase for sign-in, database and file storage, in the European Union (Frankfurt). Apple for Sign in with Apple, payments and push delivery on iPhone. Google for Google sign-in, and for payments and push delivery on Android. Expo for delivering push notifications. RevenueCat for subscription entitlements. PostHog for usage statistics, in the European Union. Vercel for hosting the web page behind recommendation links, which logs the click described above. Crash reports go to a server we run ourselves in Germany. These providers process data on our behalf under data processing agreements.

Where data is stored and how long

Your account and everything you share are stored on Supabase servers in Frankfurt, Germany, for as long as your account exists. You can delete your account at any time in the app: open the Me tab, scroll to the bottom and tap Delete account. That removes your account, your profile and avatar, your widgets and doodles, your tracker entries on iPhone, your notification tokens, and your place in every circle. A photo you shared into a pair is kept for the other person until you ask us to remove it; write to the address above and we delete it within 30 days. How to ask for deletion without the app is described at getklar.org/delete-account. Server logs are kept for at most 30 days.

Your rights

You have the right to access, correct, delete and export your personal data, to withdraw a consent you gave, and to object to or restrict its processing. The fastest way to delete everything is the in-app account deletion. For any other request, write to feedback+pocketmate@reply.getklar.org. You also have the right to lodge a complaint with a data protection authority.

Children

Pocketmate is not directed to children. We do not knowingly collect personal data from children under 13, or under 16 in the European Union. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. The current version is always available at this page, with the date shown below.