Privacy Policy

Last updated: 27 April 2026

Póca is built by John Murphy. Your privacy matters. This policy explains what data Póca collects, how it's used, and your rights.

What Póca collects

Póca collects as little data as possible to provide its service.

Data you provide:

  • Articles and newsletters you save are stored on your device and synced via your personal iCloud account using Apple's CloudKit. This data is yours — Póca cannot access it.
  • A unique inbox code (e.g. 2zj450) is generated on first launch and stored in CloudKit. This is used to route newsletter emails to your device.

Data collected automatically:

  • Your device's APNs push token is stored securely on Cloudflare's infrastructure solely to deliver newsletter notifications to your device. It is never used for marketing or shared with third parties.
  • Anonymous usage signals are collected via TelemetryDeck to help improve the app. These signals contain no personal information and cannot be used to identify you. TelemetryDeck is privacy-first and GDPR compliant.

Newsletter processing

When you forward a newsletter to your Póca inbox address, that email is processed by Postmark and stored temporarily on Cloudflare's infrastructure for up to 30 days. The content is then delivered to your device and deleted from Cloudflare's servers on a rolling basis. Postmark and Cloudflare are bound by their own privacy policies and data processing agreements.

What Póca does not collect

  • No account or registration is required
  • No name, email address, or payment details are stored by Póca (payments are handled entirely by Apple)
  • No advertising identifiers
  • No location data
  • No data is sold or shared with advertisers

Data retention

Article and newsletter content is stored in your iCloud account and governed by Apple's iCloud terms. Your APNs token is retained in Cloudflare KV for as long as you use Póca. Anonymous analytics signals are retained by TelemetryDeck per their data retention policy.

Your rights

You can delete all your Póca data at any time by deleting the app. This removes local data immediately. CloudKit data is removed from iCloud per Apple's standard process. To request deletion of your APNs token from Cloudflare, contact us at privacy@pocareader.com.

Third-party services

Póca uses the following third-party services:

  • Apple CloudKit — cloud sync
  • Postmark — inbound email processing
  • Cloudflare — newsletter infrastructure
  • TelemetryDeck — anonymous analytics

Contact

Questions about privacy? Email privacy@pocareader.com.