Pokke Privacy Policy & Data Sovereignty

Effective Date: September 22, 2026
Last Updated: September 22, 2026

Pokke ("the Application", "the Service") is developed, owned, and operated by Auralis Studio ("we", "us", "our", or "the Company"). We believe that conversational intelligence and personal notes belong entirely to you. This Privacy Policy sets out our strict data minimization architecture, on-phone computing guarantees, and legal rights under GDPR, CCPA, and Google Play Data Safety standards.

1. The Core Sovereign Guarantee

100% Air-Gapped. Zero Cloud Servers for Inference. Zero Behavioral Tracking.

Unlike conventional AI services that stream your personal thoughts, prompts, and queries to third-party data centers, Pokke executes all neural network operations directly on your local phone silicon (Qualcomm Snapdragon NPU, Google Tensor TPU, MediaTek APU, or ARM NEON CPU).

• No Conversation Uploads: Your chat messages, system instructions, and prompt histories are never uploaded to Auralis Studio or any cloud entity. The application functions with full capabilities when Wi-Fi and Cellular data are completely turned off.
• Zero In-App Advertising & Trackers: Pokke contains no advertising SDKs, no behavioral tracking frameworks, and no surveillance telemetry (no Google Firebase Analytics, no Facebook SDK, no AppsFlyer, no Adjust).
• No Mandatory Accounts: Using Pokke requires no registration, no user account, no password, and no email address.

2. Information We Process & Technical Scopes

A. Local On-Phone Data (Remains Strictly on Your Phone)

• Chat Histories & Prompts: Stored in an encrypted SQLite database within the app's sandboxed private storage directory (com.auralisstudio.pokke).
• Model Weights (GGUF): Quantized model weights stored in the local application storage.
• Hardware Cryptographic Keys: Secret deletion tokens and application settings are persisted in Android Keystore / encrypted preferences.

B. Ephemeral On-Phone Voice Dictation

• Voice input uses Android's local on-phone RecognitionService.
• Audio waveforms are converted to text in volatile memory in real time.
• Acoustic data and voice audio recordings are never recorded to disk, never cached externally, and never transmitted over any network. In accordance with Google Play Data Safety requirements, audio data processing is strictly ephemeral and non-retained.

C. GGUF Model Retrieval from Hugging Face Hub

• When you initiate a model download in the Model Hub, Pokke connects directly to the Hugging Face Hub CDN (huggingface.co) using encrypted HTTPS Range requests.
• Pokke transfers model weights and verifies their cryptographic SHA-256 fingerprint upon completion. Auralis Studio does not proxy, monitor, or log your model downloads.

D. Optional Anonymous Hardware Benchmark Telemetry

• If you run the Hardware Benchmark Suite, Pokke measures physical execution metrics (time-to-first-token TTFT, prompt prefill tok/s, generation tok/s, peak working memory, and battery temperature delta).
• Strict Opt-In: Telemetry contribution to the community leaderboard is disabled by default. If you explicitly tap "Contribute to Leaderboard", Pokke transmits strictly anonymous hardware specs (chipset name, CPU core count, RAM total, and benchmark score).
• Zero Personal Identifiers: Benchmark reports contain no advertising IDs, no IMEI numbers, no IP addresses, and no conversation contents.

E. Voluntary Public Web Chat Sharing

• If you explicitly choose to publish a conversation snapshot to the web (pokke.app/s/:id), Pokke prompts you with a mandatory Confirmation & Privacy Notice.
• Shared Scope: Only the specific conversation thread you select is exported.
• Shared Metadata: The public snapshot contains the conversation title, selected model name, phone chipset badge (e.g., Tensor G2), message texts, and token speed badges. It contains no personal identity, account credentials, or network identifiers.
• Cryptographic Author Deletion Secret (delete_token): Upon creating a web share, Pokke generates a 64-character random cryptographic secret stored exclusively on your phone. Only your phone holding this key can issue an authenticated DELETE request (X-Delete-Token) to immediately and permanently purge the shared snapshot from our servers at any time.

F. Message-Level Content Moderation & Reporting

• In compliance with Google Play Generative AI Policy, users may flag model responses that generate harmful, dangerous, or abusive outputs using the report flag icon (⚑).
• To evaluate the report, the app submits the flagged assistant output snippet, the preceding prompt for context, the model identifier/quantization, and an anonymous, pseudorandom installation ID.
• Reports are transmitted securely over TLS to our administrative review database (content_reports) and reviewed by human moderators to refine model safety advisories.

3. Legal Bases for Processing (GDPR / European Privacy)

For individuals within the European Economic Area (EEA), United Kingdom, and Switzerland, Auralis Studio processes minimal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR): For voluntary participation in anonymous hardware telemetry and public chat snapshot sharing. Consent may be withdrawn at any time by unsharing or disabling telemetry.
• Legitimate Interests (Art. 6(1)(f) GDPR): For processing user-submitted content abuse flags to maintain safety and comply with app store generative AI policies.

4. Data Retention & Deletion

• Local Data: All local conversations, model files, and settings are erased immediately when you tap "Clear Cache" in Settings or uninstall the application.
• Shared Web Chats: Public snapshots remain accessible until pruned by the author using their on-phone delete_token, or automatically purged after 30 days of inactivity (or earlier based on custom link expiry timers).
• Benchmark Telemetry: Retained in aggregate anonymized format for hardware capability comparisons.

5. Security Architecture

Auralis Studio enforces state-of-the-art security practices:

• Hardened HTTPS/TLS 1.3 encryption across all public web endpoints (pokke.app, api.pokke.app).
• Strict Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and restrictive CORS policies.
• Local application isolation and sandboxed process separation between the Flutter UI isolate and the native llama.cpp inference isolate.

6. Children's Privacy

Pokke does not knowingly collect personal information from children under the age of 13 (or under 16 in the EEA). Because Pokke requires no user registration and does not collect personal identities, child personal data is not processed.

7. Rights Under GDPR and CCPA/CPRA

Depending on your jurisdiction, you possess the right to:

• Know what personal data is processed (we process none by default).
• Request deletion of any shared web chats or content reports created with your phone's identifiers.
• Opt out of any automated processing or telemetry.
• Contact our Data Protection representative at any time.

8. Developer & Legal Entity Contact

For privacy inquiries, audit verification, or deletion requests, contact:

• Company: Auralis Studio
• Legal Email: [email protected]
• Privacy Desk: [email protected]
• Company Website: https://auralis-studio.com
• Application Website: https://pokke.app