Privacy is the core foundation of how Ponoki is built, not an afterthought. Ponoki is local-first: your emotional life, breathwork sessions, and CBT reframing notes stay safely on your device. This policy explains in plain English exactly what data exists, where it lives, and what your choices are.
Ponoki is offered exclusively to adults aged 18 or older. Please review our Terms of Service for full eligibility details.
1. The Short Summary
- Local By Default: Without an account, nothing leaves your device. All sessions and scores are saved in your browser storage.
- Optional Cloud Sync: With an optional account, our secure database stores only your email address, an encrypted password hash, and basic numeric progress counters.
- Zero Sensitive Surveillance: We never store mood logs, journal entries, or audio recordings on any server.
- Zero Data Selling: We do not sell, rent, or trade your personal information to third parties or advertising networks.
2. Data Stored on Your Device
Ponoki works fully offline without requiring an account. In local mode, all information lives in your browser or device local storage under namespace keys and never leaves your phone or computer:
- Session completion counts and daily streaks.
- Per-game statistics and high scores.
- Your companion character customization, treats, and display name.
- Your audio mixer volume settings and accessibility preferences.
3. Cloud Sync Account Data
Creating an account is completely optional. If you choose to sign up so your progress survives a device change, we use secure cloud authentication (Supabase) to store only:
- Your email address and encrypted password hash (or authentication token if signing in via Google).
- Numeric counters: total sessions played, streak counts, unlocked goals, and companion level.
4. Payment & Licensing Data (Gumroad & Google Play)
For Lifetime Pro Pass purchases made via Gumroad or Google Play In-App Billing, payment processing is handled entirely and securely by Gumroad, Inc. or Google LLC respectively. Ponoki does not collect, receive, or store your credit card numbers or banking details. We only receive an anonymous order verification key or license token to activate your Pro status within the application.
5. Third-Party Services
We rely on trusted, industry-standard infrastructure providers to operate the website and application:
- Netlify: Hosts our website and captures optional newsletter email submissions.
- Supabase: Powers optional cloud database authentication and numeric progress syncing.
- Gumroad & Google Play: Process secure merchant payments for the Pro Pass.
6. Your Rights & Data Deletion
You have total control over your digital footprint. You can clear your local data instantly by clearing your browser cache. If you created a cloud account, you can request full account and server data deletion directly within the app profile settings or by contacting us via email.