Draft, not yet published. Open items before release: the server hosting region, the final ad provider (AppLovin MAX), subscription billing details, the owner’s country, and a match against the Google Play Data safety form.
This policy explains what information the Pokku Android app and the Pokku Desktop Windows app (“Pokku”) collect, why, and the choices you have.
Who we are
Pokku is made by Waxoo Studio, the trade name of Wasif Younus, an independent developer. Waxoo Studio is responsible for the personal data described here. Contact: support@waxoostudio.com.
The short version
- Pokku connects phones you approve into a private group called a mesh. A phone can only join after a QR code is scanned and approved.
- We collect what is needed to show your phones’ status, find them, relay missed calls and send items between them.
- We keep only the latest location of each phone, not a location history.
- We never upload your contacts or your call log.
- Photo and video backups go directly from your phone to your own PC over your local network. They never pass through our servers.
- We don’t sell your data, and Pokku contains no analytics or tracking SDK of our own.
- You can delete your account and cloud data at any time.
Information we collect
Account
- Email address, and the basic profile Google provides (name and email) if you sign in with Google.
- A recovery code, stored only in hashed form so we cannot read it.
Your phones
- Each phone’s name, model, platform, battery level, charging state, sound mode, storage space, connection state and last-seen time, and its access level in your mesh (Full control, Find only or Alerts only).
- Technical identifiers needed to deliver commands: an app installation ID and a push notification token.
- If you turn on optional background status updates, the same basic status is sent about every 15 minutes, without location.
Location
- The last-known location of a phone (latitude, longitude, accuracy and time). Only one location per phone is kept; each new one replaces the previous one.
- It can only be viewed from phones in your mesh that have permission to find it, and every view is recorded in your security history.
- Camera guide uses the live location of the phone in your hand only on that phone, to point you toward the saved location. That live location is not uploaded.
Missed calls
- With your permission to read notifications, Pokku detects missed calls, including from calling apps such as WhatsApp. It relays the caller name or number shown in the notification, which phone received the call, the time, and whether you marked it handled.
- Ringing calls, message notifications and other apps’ notifications are ignored.
- Contacts (optional): if a notification shows only a name, Pokku can look up that name in your contacts on the phone itself to find a callback number. Your contact list is never uploaded or synced.
- Priority contacts are numbers you choose to mark as important. They are stored with your mesh.
Pokku Drop
- Text, links, phone numbers, map points and files (up to 10 MB) that you choose to send to your other phones.
- Drop content is temporary. It is erased once the receiving phone has it, and in any case after 15 minutes. Files are kept in private storage and shared only through a link that expires after 15 minutes.
- Delivery status (sent, delivered, opened or failed) is kept for 7 days. It does not include the content.
Activity and security history
- A record of actions between your phones, such as ring requests, sound changes and location views, and security events such as phones joining, leaving or changing access level. It includes the phone names at the time.
Backup & clean up (Pokku Desktop)
- Pairing and backup happen directly between your phone and your Windows PC on your local network, over an encrypted connection.
- Your PC stores the photos and videos you select, plus a record of which files were verified. Your phone keeps a matching record so it can offer a safe clean-up. None of this is sent to Waxoo Studio.
- Pokku Desktop finds your phone with a small network message on your local network (UDP port 42423). That message contains no personal data.
Advertising
- The free version of Pokku shows ads. Our ad partners may collect your device advertising ID, IP address, device and app information, and how you interact with ads, to serve ads, measure them and prevent fraud.
- Before ads are requested, Pokku uses Google’s consent tool to collect any consent required in your region. You can change your choices at any time under You → Privacy options in the app.
- Pokku requests ads with settings intended for a teen audience, which limits personalized advertising.
- If you earn points by watching a rewarded ad, we keep a record of the reward so the points can be spent.
What we don’t collect
- We don’t read your messages, call log, photos (except files you choose to send or back up) or browsing activity.
- We don’t use a product analytics or crash reporting SDK. Our push delivery records contain only the receiving phone, the notification type and whether delivery succeeded, never caller details or message content.
App permissions and why Pokku asks
Pokku asks for each permission only when you set up the related feature, never all at once at startup.
| Permission | Used for |
|---|---|
| Location | Saving a phone’s last-known location so your other phones can find it, and Camera guide |
| Camera | Scanning QR codes to join a mesh or pair a PC, and Camera guide |
| Notification access | Detecting missed calls to relay them to your other phones |
| Contacts (optional) | Looking up a callback number on the phone when a missed call shows only a name |
| Notifications | Showing alerts, missed calls and received Drops |
| Do Not Disturb access | Changing sound mode when you ask from another phone |
| Foreground service (media playback) | Ringing loudly while you look for a phone |
How we use information
- To provide Pokku’s features: showing your phones, delivering commands, finding phones, relaying missed calls, delivering Drops, and keeping your mesh secure. (Legal basis: performing our agreement with you.)
- To protect accounts and prevent abuse, for example with rate limits and the security history. (Legal basis: legitimate interests.)
- To show ads in the free version, with consent where the law requires it. (Legal basis: consent or legitimate interests, depending on your region.)
- To answer your support requests.
Who we share information with
- Phones in your mesh: information is shared between your phones according to the access level you set.
- Service providers that run Pokku for us:
- Supabase: account sign-in, database and temporary file storage.
- Google Firebase Cloud Messaging: delivering push notifications.
- Google Sign-In: signing in with Google, if you choose it.
- Advertising partners: Google AdMob.
- Google Play: app distribution and, when available, subscription payments.
- Legal reasons: if required by law or to protect the rights and safety of users or others.
We do not sell your personal information.
Where your data is stored
Pokku’s cloud data is stored by Supabase in [region to be confirmed]. Our providers may process data in other countries, protected by safeguards such as Standard Contractual Clauses.
How long we keep data
| Data | Kept for |
|---|---|
| Account, phones and settings | Until you delete your account or remove the phone |
| Last-known location | One per phone, replaced on each update, deleted with the phone or account |
| Drop content and files | Until received, and at most 15 minutes |
| Drop delivery status | 7 days |
| Missed calls, activity and security history | Until you delete your account |
| Backups on your PC | Under your control; we never have a copy |
Deleting your account
You can permanently delete your account from the app. It is deleted immediately, together with your phones, locations, missed calls, activity and security history. See how to delete your Pokku account for the steps, including how to ask by email.
Security
Connections to our servers are encrypted. Each phone’s access level is checked on the server, so a phone cannot give itself more access. Backups to your PC use an encrypted connection tied to the specific PC you paired. No system is perfectly secure, but we work to protect your information.
Children
Pokku is intended for people aged 13 and over. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how it is used, and to withdraw consent. Email support@waxoostudio.com to use these rights. You can also complain to your local data protection authority.
Changes to this policy
When we update this policy, we change the date at the top of this page. If the changes are significant, we will let you know in the app.