Skip to content

PRIVACY.md

Latest commit

 

History

History
143 lines (92 loc) · 6.03 KB

PRIVACY.md

File metadata and controls

143 lines (92 loc) · 6.03 KB
Raw

Privacy Policy for Pondr

Effective date: [INSERT TODAY'S DATE — e.g. May 20, 2026] Last updated: [SAME DATE]

This Privacy Policy explains how the Pondr mobile application ("Pondr", "we", "our", or "us") collects, uses, and protects your information. By using Pondr you agree to the practices described below.

Pondr is operated by [YOUR_NAME], contactable at [YOUR_EMAIL], based in [YOUR_COUNTRY].

1. What we collect

a. Account information

When you sign up, we collect:

  • Email address (used as your login identifier)
  • Display name (optional, for personalization)

This is stored in our authentication and database provider, Supabase (supabase.com). If you use the local-only mode (without configuring Supabase), no account data leaves your device.

b. Session content

When you use Pondr you may create "thinking sessions" containing:

  • Text messages you send to the AI
  • AI-generated replies
  • AI-generated action plans, insights, and titles
  • Category labels you select (career, finance, etc.)
  • Duration and timestamps of sessions

This content is stored locally on your device using AsyncStorage and, if you have configured Supabase, in your Supabase database under your user ID.

c. Voice recordings

When you use voice mode, Pondr temporarily records short audio clips from your microphone. Each clip is:

  1. Sent to Groq (groq.com) for speech-to-text transcription using the Whisper model.
  2. Discarded immediately after transcription. The audio file is not stored on our servers or on Groq's beyond the transcription request itself.

Only the resulting text transcript is saved as part of your session.

d. AI processing

Your messages and session context are sent to:

These providers process your data on our behalf to deliver the service. Their respective privacy policies apply to any data they receive.

e. Device permissions we request

  • Microphone (RECORD_AUDIO) — to record your voice in voice mode. You can deny this and use text-only mode.
  • Internet (INTERNET) — required to reach the AI providers.

We do not request or use: location, camera, contacts, calendar, files, photos, SMS, call logs, or any background tracking.

f. Analytics, ads, trackers

Pondr does not include third-party analytics SDKs, ad networks, or tracking pixels. We do not sell, share, or trade your data.

2. How we use it

We use the information above to:

  • Authenticate you and keep you signed in
  • Save your sessions and action plans so you can return to them
  • Generate AI responses and action plans tailored to your context
  • Provide voice transcription and text-to-speech
  • Display your insights (category breakdown, streak, weekly count)
  • Operate, maintain, and improve the service

We do not use your content to train AI models. Your messages are sent to Groq, Tavily, and ElevenLabs only for the duration of fulfilling your request.

3. Sharing

We do not sell or rent your information.

We share your data only with:

  • Service providers operating Pondr on our behalf (Groq, Tavily, ElevenLabs, Supabase), strictly to deliver the service.
  • Government or legal authorities, when required by law (e.g. a valid court order).

4. Data retention

  • Account data is retained for as long as your account is active.
  • Session content is retained until you delete it or your account.
  • Voice clips are not retained — transcription is the only purpose, and the audio is discarded immediately.

You can delete your account and all associated data at any time from the Profile screen → Delete account. Deletion is permanent and immediate.

5. Security

We use industry-standard practices to protect your data:

  • All network traffic between Pondr and our providers uses HTTPS / TLS encryption in transit.
  • Authentication tokens are stored using secure local storage on your device.
  • Supabase row-level security ensures users can only read/write their own data.

No system is 100% secure. If we become aware of a breach affecting your data, we will notify you and the relevant regulators where required by law.

6. Children's privacy

Pondr is intended for users 13 years of age or older. We do not knowingly collect data from children under 13. If you believe a child has provided us their information, please email [YOUR_EMAIL] and we will delete it.

7. Your rights

Depending on where you live (GDPR for EU/UK, CCPA for California, similar laws elsewhere), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (the in-app delete-account button satisfies this)
  • Export your data in a portable format
  • Object to processing, or withdraw consent

To exercise any of these rights, email [YOUR_EMAIL].

8. International transfers

Pondr's service providers operate servers in the United States and may process your data there. By using Pondr you consent to this transfer.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app or via the email associated with your account. The "Last updated" date at the top of this document reflects the most recent change.

10. Contact us

Questions, requests, complaints?

[YOUR_NAME] Email: [YOUR_EMAIL] [YOUR_COUNTRY]

This policy is a template provided alongside the Pondr source code. Review it with a lawyer before launching publicly. It does not constitute legal advice.