Privacy Policy

Account information

When you sign in with Apple or Google, we receive your name and email address (or Apple's private relay address if you choose to hide it), a unique account identifier, and which sign-in method you used. We also store your time zone so check-ins arrive at a sensible time, and the date you last signed in.

What you tell Pondra

• Your answers during onboarding, such as the kinds of decisions you face, what you value, who your decisions tend to affect, and how you like to be spoken to.
• The decisions you talk through: what you write or say, your answers to Pondra's questions, and the options, values, fears and weights on your scale.
• The choice you make, your reason for it, when you'd like to check back, and how it turned out when you reflect later.

What Pondra learns from it

To make later conversations more useful, Pondra keeps short memories drawn from past decisions (for example, that you're weighing a move abroad) and builds a values profile that summarises what you tend to prioritise. You can see your memories in the app and delete any or all of them.

Voice input

If you choose to speak instead of type, your speech is transcribed by Apple's speech recognition, on your device whenever your device supports it. We never receive your audio, only the text that you then send. Where on-device recognition isn't available, Apple may process the audio under its own privacy policy.

Notifications

If you allow notifications, we store a device token so we can send check-in reminders. You can turn reminders off in the app or in your device settings.

Purchases

Subscriptions are bought and billed through Apple. We never see your payment card details. Apple sends us a signed record of the transaction, which we use to confirm your subscription and its status.

Technical information

The app tells our servers which version you're running so we can let you know when an update is needed. Like most online services, our servers also process basic technical data such as IP addresses and request times to deliver the service and keep it secure.

We use your information only to run and improve Pondra:

• to ask you relevant questions, build your scale and write the stories for each option;
• to save your decisions and keep them in sync across your devices;
• to remind you to check in and to build your values profile over time;
• to provide your subscription and enforce plan limits;
• to keep the service safe, including screening for signs that someone may be at risk;
• to respond when you contact us, and to fix problems.

We don't use your information for advertising, and we don't build profiles to sell to anyone.

Pondra uses a large language model to understand what you write and to generate questions, options and stories. To do this, the relevant parts of your conversation, together with your onboarding preferences and memories, are sent to our AI provider, currently OpenAI, through its API.

According to OpenAI's API data policies, data sent through the API is not used to train its models by default and may be retained for a limited period to monitor for abuse. You can read more in OpenAI's privacy policy. If we change AI providers, we'll update this policy.

AI can be wrong. Pondra's scale gives you a lean, not a verdict, and the decision is always yours.

We share information only with service providers who help us run Pondra, and only what they need to do that job:

• Google Firebase, for sign-in and for delivering push notifications.
• OpenAI, to process your conversations and to screen messages for safety.
• Apple, for Sign in with Apple, App Store purchases, speech recognition and notification delivery.
• Our hosting provider, which stores our servers and database.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the service, in which case this policy would continue to apply to your data.

We do not sell or rent your personal information.

People sometimes bring hard things to Pondra. Messages are automatically screened so that if something suggests you or someone else may be in danger, Pondra can point you to support lines and emergency services. Those phone numbers are built into the app rather than written by the AI.

The decisions you describe may include sensitive details about your health, relationships or finances. We treat everything you write as private, use it only to help you with your decisions, and you can delete it at any time.

Pondra is not an emergency or crisis service. If you are in danger, contact your local emergency number right away.

We keep your information for as long as you have an account, so your decisions, memories and values profile are there when you come back.

• When you delete a memory, it is removed from our database straight away.
• When you delete a decision or discard a conversation, it disappears from Pondra on all your devices. We keep a record marked as deleted so your devices stay in sync and so conversations still count toward your plan's monthly limit. It is never shown or used again, and it is permanently erased when you delete your account.
• When you delete your account, we delete your account and everything linked to it: decisions, conversations, memories, your values profile, subscription records and device tokens. We also ask Firebase to delete your sign-in identity.

Some data may persist for a short time in server logs or with our providers, as described in their own policies, before it is removed.

In the app, you can:

• export your decisions as text from the You tab;
• delete individual decisions, or all of them, at any time;
• view and delete the memories Pondra keeps;
• turn check-in reminders on or off;
• delete your account and all of its data from the You tab.

Depending on where you live, you may also have the right to access, correct, or receive a copy of your personal information, to object to or restrict how we use it, and to complain to your local data protection authority. To make a request, email us at support@pondra.app. We may need to confirm it's you before we act on a request.

Data travels between the app and our servers over encrypted connections. Your sign-in tokens are kept in your device's Keychain, and access to our systems is restricted. No service can promise perfect security, but we work to protect your information and will let you know if a breach affects you, as the law requires.

Pondra isn't intended for children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll delete it.

Our servers and service providers may be located in countries other than yours, including the United States. Where we transfer personal information internationally, we rely on our providers' safeguards for those transfers.

We'll update this policy as Pondra changes. When we make significant changes, we'll let you know in the app before they take effect. The date at the top shows when it was last updated.

Questions about your privacy, or a request about your data? Email support@pondra.app and we'll get back to you.