PocoStep legal
Privacy Policy
Effective date: July 30, 2026
PocoStep is designed to keep your everyday planning data on your device. This policy explains what stays local, what may leave your device, and what we keep.
1. Data stored on your device
PocoStep is local-first. Your tasks, steps, reminders, due dates, hydration progress, energy check-ins, personalization survey answers, XP, badges, themes, app preferences, and the data shown in home-screen widgets are stored on your device. PocoStep does not sync your task list to our servers as a background or account-sync feature. Android home-screen widgets display data from the app on your device, such as your One Thing Now, next step, and due date or reminder hints.
Local data may be lost if you delete the app, clear its data, reset your device, or lose access to your device. Your device platform or backup settings may separately back up app data under its own terms.
2. Account information
You may sign in with your Google account. We store account identifiers needed to sign you in, protect your account, and provide account-based features such as AI consent, usage limits, and subscription access. If you agree to use AI features, we also store your AI consent status and the version of the consent you accepted in your profile.
3. Optional AI features
AI features require your action. Nothing is sent to AI unless you start an AI action. When you use an AI feature, the information needed for that request is sent through our backend to our AI infrastructure provider, OpenRouter, and may be processed by the model provider used for that request, such as OpenAI. Depending on the feature, this may include:
- task information for Pick One Thing
- one task's text for Break Down Task
- brain dump text for Sort this out
- when relevant, your current energy level and a compact summary of your personalization preferences
We do not store task text, brain dumps, prompts, AI replies, generated steps, generated task items, or your personalization survey answers on our servers.
We do store AI usage metadata connected to your account: the feature used, model name, token counts, success or error status, and timestamp. This helps us operate the feature and understand usage and reliability.
4. Purchases and subscriptions
Purchases are processed by Google Play. RevenueCat is used to manage subscription status. We may receive information needed to confirm your entitlement or subscription state, but we do not store your full payment card details. Google Play and RevenueCat process information under their own privacy policies.
5. Analytics, selling, and tracking
We do not use third-party analytics in the app at this time. We do not sell your personal data. This website uses no analytics, cookies, or tracking technologies.
6. Service providers and legal needs
We use service providers described above to operate sign-in, AI features, and subscriptions. They receive only the information needed to provide those services. We may also disclose information if required by law, to protect users or the service, or to investigate fraud or misuse.
7. Data retention and deletion
Data kept on your device remains there until you remove it or the app's data. We retain server-side account information and AI usage metadata only as long as reasonably needed for the purposes described in this policy, including security, operations, and legal obligations.
You can delete your PocoStep account and its associated server-side data directly in the app from Settings. You can also contact privacy@pocostep.com for privacy or deletion questions, and we may need to verify your identity before completing a request. Deleting your PocoStep account, deleting the app, or resetting local data does not cancel a Google Play subscription.
8. Security
We use reasonable safeguards for the information we handle. Your everyday PocoStep data is stored on your device, and we do not have access to your local task list unless you choose to send specific text through an AI feature. No storage or transmission method is completely secure.
9. Children
PocoStep is not designed for children. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy as PocoStep changes. We will post the revised policy here and update the effective date. If a change materially affects how we handle personal information, we will provide additional notice where appropriate.
11. Contact us
For privacy questions or deletion requests, email privacy@pocostep.com.