# Pokke Privacy Policy *Effective Date: September 22, 2026* *Last Updated: September 22, 2026* Pokke is developed and operated by Auralis Studio ("we," "us," or "our"). This policy explains what information Pokke handles, where it stays, and your rights under privacy regulations including GDPR and CCPA. --- ## 1. On-Device Processing Pokke runs AI models directly on your phone's processor (such as Qualcomm Snapdragon, Google Tensor, MediaTek, or ARM CPUs). - **No chat uploads:** Your prompts, messages, and chat history stay on your phone. They are never sent to Auralis Studio or any third-party server, and the app functions fully offline without an internet connection. - **No advertising or tracking:** Pokke contains no ad networks, behavioral tracking tools, or analytics SDKs (such as Google Firebase Analytics, Facebook SDK, AppsFlyer, or Adjust). - **No accounts:** You do not need to register, create an account, or provide an email address to use the app. --- ## 2. Information Handled by the App ### Local Device Storage The following data stays on your phone and is never transmitted automatically: - **Chat history and prompts:** Stored in an encrypted SQLite database in the app’s private directory (`com.auralisstudio.pokke`). - **Downloaded models (GGUF):** Stored locally in app storage. - **Keys and settings:** App preferences and deletion tokens are saved in encrypted storage backed by the Android Keystore. ### Voice Dictation When you use voice input, the app uses Android’s local speech recognition service (`RecognitionService`). Audio is converted to text in memory in real time. Pokke never records audio to disk, never caches it externally, and never transmits voice recordings over the network. ### Model Downloads When you download a model from the Model Hub, Pokke connects directly to Hugging Face (`huggingface.co`) over HTTPS using range requests. Once downloaded, the app verifies the file’s SHA-256 checksum. Auralis Studio does not proxy, track, or log these downloads. ### Benchmark Results (Optional) If you run the hardware benchmark, the app measures performance metrics including time-to-first-token (TTFT), prompt prefill speed, generation speed, peak memory usage, and battery temperature change. Submitting these results to the community leaderboard is disabled by default. If you choose to submit a score, Pokke sends only anonymous hardware specifications: chipset name, CPU core count, total RAM, and benchmark scores. Submissions do not include advertising IDs, device identifiers (such as IMEI), IP addresses, or conversation text. ### Web Chat Sharing (Optional) If you choose to share a conversation snapshot online (`pokke.app/s/:id`), the app displays a confirmation prompt before uploading: - **What is shared:** Only the thread you select. The public page includes the conversation title, model name, device chipset (such as `Tensor G2`), message text, and token generation speed. It contains no personal account details or network identifiers. - **Deletion:** When you create a shared link, Pokke generates a 64-character deletion token stored exclusively on your phone. You can use this token to send an authenticated `DELETE` request (`X-Delete-Token`) to remove the shared conversation from our servers at any time. ### Content Moderation and Abuse Reports To comply with Google Play policies for generative AI, you can report harmful or abusive model responses using the flag icon (`⚑`). When you submit a report, Pokke sends: - The flagged response snippet - The preceding prompt for context - The model name and quantization level - A pseudorandom app installation ID Reports are sent securely over TLS to our review database (`content_reports`) so human moderators can review the output and update safety advisories. --- ## 3. Legal Bases for Processing (EEA, UK, and Switzerland) If you are located in the European Economic Area, the UK, or Switzerland, we process data under the following legal bases: - **Consent (Art. 6(1)(a) GDPR):** For voluntary benchmark submissions and public web chat sharing. You can withdraw consent by disabling benchmark submissions or deleting shared chats. - **Legitimate Interests (Art. 6(1)(f) GDPR):** For reviewing user-submitted content reports to maintain safety and meet app store requirements. --- ## 4. Data Retention and Deletion - **Local data:** Tapping "Clear Cache" in settings or uninstalling Pokke immediately deletes all local conversations, downloaded models, and preferences. - **Shared web chats:** Shared conversations remain online until you delete them using your deletion token, or until they expire. They are automatically deleted after 30 days of inactivity, or earlier if an expiration timer was set. - **Benchmark data:** Submitted benchmark results are kept indefinitely in aggregated, anonymous form. --- ## 5. Security We protect data using several technical controls: - Public endpoints (`pokke.app`, `api.pokke.app`) require TLS 1.3 encryption and use Content Security Policy (CSP), HSTS, and restricted CORS headers. - On your phone, the user interface and the native `llama.cpp` inference engine run in isolated processes within the Android application sandbox. --- ## 6. Children’s Privacy Pokke does not collect personal information from children under 13 (or under 16 in the EEA). Because the app requires no accounts and collects no identifying details, we do not store or process personal data from children. --- ## 7. Your Privacy Rights (GDPR & CCPA/CPRA) Depending on your jurisdiction, you have the right to: - Ask what personal data we hold about you (by default, we collect none). - Request deletion of any shared web chats or content reports associated with your device identifiers. - Opt out of optional benchmark submissions or data sharing. - Contact us with questions or complaints regarding your data. --- ## 8. Contact For privacy inquiries or deletion requests, contact: - **Company:** Auralis Studio - **Legal:** `legal@auralis-studio.com` - **Privacy:** `privacy@pokke.app` - **Company Website:** [https://auralis-studio.com](https://auralis-studio.com) - **App Website:** [https://pokke.app](https://pokke.app)