Privacy Policy
This policy explains what data Porkly collects, how it’s used, who it’s shared with, and the choices you have. By using Porkly you agree to the practices described here.
1. Who we are
Porkly is operated by [LEGAL ENTITY — fill in] (the “Operator”, “we”, “us”). For privacy questions, email support@porkly.app.
2. What we collect
Account information
- Email address and display name.
- If you sign in with Apple or Google: the identifier returned by that provider, plus the profile fields the provider exposes and you authorize (typically name, email, avatar URL).
- If you set a password: a salted hash. We never store passwords in plaintext.
- Account tier (free, Pro, etc.) and feature flags.
Authentication metadata
- Session tokens (so you stay signed in) and their expiration.
- The IP address and user-agent string of the device that created each session.
- Email-verification and password-reset tokens.
Your content
- The items you create — tasks, events, habits, projects, goals, and notes — including the text, dates, tabs, and categories you assign.
- Timer instances (running, paused, and completed timers and stopwatches).
- Subscription records (the platform you bought Pro on, the product ID, status, and renewal date) when applicable.
Device & push
- If you enable push notifications, we store an Expo push token so we can send notifications to your device.
- Basic device information (platform, OS version, app version) may be sent with API requests for compatibility and debugging.
Server logs & diagnostics
- Standard request logs: timestamp, route, response status, latency, IP address, and user-agent. These are retained for a limited window for security, abuse prevention, and debugging.
- Crash and error reports (if enabled in a future release) may include stack traces and the state of the app at the time of the error.
What we do not collect: we do not request your contacts, your camera roll, your precise location, your microphone, your health data, your calendar, or your phone number. If a future feature needs any of these, the app will request your permission first and this policy will be updated.
3. How we use it
- Operate the Service. Authenticate you, sync your content across your own devices, deliver notifications you asked for, and process subscription state.
- Keep it working. Diagnose bugs, monitor performance, prevent abuse, and improve reliability.
- Communicate. Send transactional emails (sign-in links, password resets, subscription receipts, important service notices). We do not send marketing email without your consent.
- Comply with law. Respond to lawful requests and enforce our Terms.
We do not use your content to build advertising profiles. We do not sell your data. We do not train third-party AI models on your content.
4. Who we share it with
- Infrastructure providers that host our database, servers, and storage. They process data on our instructions only.
- Authentication providers (Apple, Google) if you choose to sign in with them. They see only what is needed to authenticate you.
- Push providers (Expo, Apple Push Notification service, Firebase Cloud Messaging) to deliver notifications to your device.
- Payment platforms (Apple App Store, Google Play, or a payment processor we may use) for subscription billing. We do not see your card or bank details — those stay with the platform.
- Legal & safety: where required by law, lawful process, or to protect rights, safety, or the integrity of the Service.
- Successors: in the event of a merger, acquisition, or sale of assets, your information may transfer to the successor entity, subject to this policy.
5. Storage & retention
We retain your account and content for as long as your account is active, plus a short window to recover from accidental deletion and to meet legal obligations. Server logs are kept for a limited period for security and debugging and then rotated. When you delete your account, we soft-delete your content immediately and permanently remove it after a short retention window, except where we are legally required to keep specific records longer.
6. Security
We use industry-standard practices: encryption in transit (HTTPS), hashed credentials, scoped access controls, and routine patching. No system is perfectly secure. You use the Service at your own risk and we cannot guarantee that data will never be lost, accessed, or disclosed without authorization. Use a strong, unique password and keep your devices secure.
7. Your choices & rights
- Access & export. Use the data export feature on the Profile screen to download your data.
- Correction. Edit your profile and your content directly in the app at any time.
- Deletion. Use “Delete account” on the Profile screen, or email support@porkly.app.
- Push. Turn notifications off in your device settings or the app settings.
- Sign-in providers. Revoke Apple or Google access from your account settings with that provider.
Depending on where you live, you may have additional rights — to access, correct, port, or delete your personal data, to object to or restrict certain processing, or to lodge a complaint with a data-protection authority. To exercise any of these, email support@porkly.app. We may need to verify your identity before acting on a request.
8. Children
The Service is not directed to children under 13 (or the higher minimum age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
9. International transfers
Our infrastructure may store and process your data in countries other than the one you live in, including the United States. By using the Service you consent to those transfers. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data during international transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will give reasonable notice (for example, in the app or by email). The “Last updated” date below indicates when this policy was last revised. Your continued use of the Service after changes take effect means you accept the updated policy.
11. Contact
Privacy questions, requests, or complaints: support@porkly.app.