Privacy Policy for Poka Reminder

Last updated: 1 August 2025

Poka Reminder ("the App") is developed and operated by a sole proprietorship registered in Sweden (“we”, “us”, “our”). We are committed to protecting your personal data and complying with Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

Business Name: Poka Reminder (sole proprietorship)
Jurisdiction: Sweden (EU)
Email: pokareminder@gmail.com

2. Personal Data We Collect

Account Data: email address and hashed password
Medication Data: medicines, dosage schedule, reminder frequency
Device Data: push-notification tokens, device type/OS, IP address
Usage Analytics: anonymised interaction and crash data

3. Purposes & Legal Bases

Purpose	GDPR Legal Basis
Create & maintain your account	Contract (Art 6 §1 b)
Send medication reminders	Consent (Art 6 §1 a)
Securely store your medication data	Contract (Art 6 §1 b)
Process in-app purchases	Contract (Art 6 §1 b)
Improve & maintain the App	Legitimate interest (Art 6 §1 f)
Meet legal/tax obligations	Legal obligation (Art 6 §1 c)

Sensitive health data is processed only with your explicit consent (Art 9).

4. Storage & Security

Passwords are hashed; transport uses HTTPS
Data stored in Firebase Firestore with security rules
Access restricted to authorised personnel only

5. Retention

Account data kept until you delete your account or request erasure
Medication data deleted upon request or account deletion
Payment metadata retained per tax requirements

6. Sharing & Processors

We never sell your data. Operational providers:

Firebase (Google LLC) – auth, database, analytics (Standard Contractual Clauses)
RevenueCat, Inc. – subscription handling
Expo (EAS Build) – build infrastructure (no direct user data)
Apple / Google – payment processing (no direct card data stored by us)

7. International Transfers

Where data leaves the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Your GDPR Rights

Access, rectify, erase, restrict, object, portability
Withdraw consent at any time
Lodge a complaint at your local DPA (e.g. IMY Sweden)

9. Children

The App is not directed to children under 16. We do not knowingly collect their data.

10. Changes

We may update this Policy; material changes will be announced in-app or via email.

11. Contact

Questions? Email us at pokareminder@gmail.com.