Privacy policy

This policy covers the Poppot website and app. For questions about your data, contact hello@poppot.app.

What stays on your device

You can try Poppot without an account. Your learner name or nickname, answers, progress and settings are then stored locally. The lesson embedded on the website keeps its session in memory without creating an account.

Imported photos, their notes and your observation journal stay on your device: Poppot does not upload your album. An imported original may retain its metadata, including location. Framed exports create a new image without that metadata. Sharing only happens at your request, through the service you choose.

Location is optional: you can select a city manually. A device location is rounded to one tenth of a degree before it is saved locally. The camera displays a live view without recording or sending images; raw motion readings are not saved. You can manage permissions in your device settings.

Data used online

• Account and learning. Your email address, sign-in identifiers, sessions, profiles, answers, progress and rewards provide the account and synchronization you request. Apple or Google may supply the information needed to sign you in. For the adult account holder, this processing is necessary to perform the contract.
• Playing with friends. Friendships, invitations, participation, answers and scores enable private quizzes. Participants can see your nickname and game information; friends cannot access your private learning history. These data support the game you request.
• Purchases. Your plan, transaction reference and payment status verify and restore access. Payment providers handle card details; Poppot does not store them. This processing is necessary to fulfil the purchase and meet applicable legal obligations.
• Support and security. Your emails and reports help us answer requests and correct content. A report includes the question, your answer and an optional comment, without automatically attaching your name or profile. Technical logs, including IP addresses depending on the service, support operation and security. These activities rely on the legitimate interests of supporting users, improving content and preventing abuse.

Sign-in information is necessary for an account, and transaction information is necessary to verify a purchase. Without it, those features cannot be provided. Photos, location, comments and analytics remain optional.

Children, notifications and analytics

A child’s profile does not need a personal email address. An adult manages the family account and approves friendships for child profiles. Consent arrangements and the legal basis for processing children’s data must be finalized for the launch countries. The suggested learning age is not legal authorization.

Learning reminders are optional and scheduled on your device. Game notifications, if enabled, use a delivery token linked to your profile. You can turn them off in the app or system settings.

Poppot does not display advertising. PostHog statistics are enabled by default on the website and for non-child profiles in the app to help improve Poppot. They use pseudonymous identifiers and usage events, without names, emails, photos, locations or raw answers. Statistics are disabled for child profiles; session recording is not enabled in this version. You can turn them off at any time in the privacy preferences in the website footer or in the app’s Settings without limiting features. A previously saved choice to disable statistics is respected.

The website and app also use local storage needed for sessions, preferences and learning. This is separate from optional analytics.

Who receives data

Depending on the features used, Poppot relies on Render for the website, Convex for accounts and synchronized data, Resend for email codes, Apple or Google for sign-in and mobile purchases, RevenueCat for purchase validation, Stripe Managed Payments for web purchases, Expo and Apple/Google services for notifications and PostHog for authorized analytics.

Each service receives the data needed for its role; sign-in and payment providers also process some data under their own responsibility. Hosting the analytics project in Europe does not guarantee that all provider processing stays within the European Economic Area. The countries and safeguards applicable to transfers must still be confirmed for the public version.

Retention and deletion

Local data remains until you erase it in Poppot or remove the app’s or browser’s storage. Export photos you want to keep before deleting a profile or signing out: signing out removes linked profiles and their local photos after confirmation.

Your account and synchronized progress are kept to provide the service until deletion. A minimal technical deletion record remains to prevent reactivation by delayed events. Retention periods for logs, reports, analytics, backups and commercial records still need to be established and verified with providers; no unverified fixed periods are stated here. Deleting an account does not automatically refund a purchase.

Your rights and contact

Settings → Account and data provides export and deletion. Data exports do not include photo files, which must be exported separately from the album. You can also request account deletion by email, including after uninstalling the app.

Contact hello@poppot.app to request access, correction, erasure, restriction or, where applicable, portability and objection. For analytics without an account, include the reference available in privacy preferences. Proportionate identity verification may be needed. Requests under the GDPR receive a response within one month, unless a justified extension permitted by that regulation applies. You can complain to the CNIL or your competent supervisory authority.

The date above shows the latest update. Any new use requiring your consent is subject to a separate choice.