Privacy Policy for Poka Reminder

Last updated: 18 October 2025

Poka Reminder ("the App") is developed and operated by Poka Tech AB, a company registered in Sweden ("we", "us", "our"). We are committed to protecting your personal data and complying with Regulation (EU) 2016/679 ("GDPR").

1. Data Controller

Business Name: Poka Tech AB
Jurisdiction: Sweden (EU)
Org.nr: 559541-4730
Email: pokareminder@gmail.com

2. Personal Data We Collect

Account Data: email address and hashed password
Medication Data: medicines, dosage schedule, reminder frequency
Device Data: push-notification tokens
Analytics/Diagnostics: none. We do not collect usage analytics or crash/performance logs.

3. Purposes & Legal Bases

Purpose	GDPR Legal Basis
Create & maintain your account	Contract (Art 6 §1 b)
Send medication reminders	Consent (Art 6 §1 a)
Securely store your medication data	Contract (Art 6 §1 b)
Process in-app purchases	Contract (Art 6 §1 b)
Improve & maintain the App	Legitimate interest (Art 6 §1 f)
Meet legal/tax obligations	Legal obligation (Art 6 §1 c)

Sensitive health data is processed only with your explicit consent (Art 9).

4. Storage & Security

Passwords are hashed; all network transport uses HTTPS/TLS
Data stored in Firebase Firestore with security rules
Access restricted to authorised personnel only

5. Retention

Account data kept until you delete your account or request erasure
Medication data deleted upon request or account deletion
Payment metadata retained per tax requirements

5a. Account Deletion

You can delete your account at any time from within the App under Settings → Account → Delete account. When initiated, the App deletes your personal data stored in our systems that we control, including:

Account/profile document (user settings and identifiers)
Medication, reminders, streaks and reward cards data
Associated application data stored in our database (Firestore)

What is not cancelled or erased by us: Deleting your account does not cancel your App Store or Google Play subscription. To stop future charges, manage your subscription in your store account settings (e.g., App Store Subscriptions).

What we may retain: Certain records may be retained where required by law (e.g., tax/financial record‑keeping) and non‑identifying, aggregated analytics. Platform receipts and transaction records processed by Apple/Google are maintained by those platforms in accordance with their own policies.

We aim to process in‑app deletion requests immediately. Backup systems and logs are cycled and purged on a scheduled basis. If you have questions about account deletion or need assistance, contact us at pokareminder@gmail.com.

6. Sharing & Processors

We never sell your data. Operational providers:

Firebase (Google LLC) – authentication, database (Firestore), and cloud messaging (push tokens) (Standard Contractual Clauses)
RevenueCat, Inc. – subscription handling
Expo (EAS Build) – build infrastructure (no direct user data)
Apple / Google – payment processing (no direct card data stored by us)

6a. No Advertising or Tracking

We do not use third‑party advertising SDKs and we do not track you across apps or websites. We do not sell your personal data.

7. International Transfers

Where data leaves the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Your GDPR Rights

Access, rectify, erase, restrict, object, portability
Withdraw consent at any time
Lodge a complaint at your local DPA (e.g. IMY Sweden)

9. Children

The App is not directed to children under 16. We do not knowingly collect their data.

10. Changes

We may update this Policy; material changes will be announced in-app or via email.

11. Contact

Questions? Email pokareminder@gmail.com.
Poka Tech AB (org.nr: 559541-4730).