Privacy

This page explains what Poqo actually collects, why, and for how long. The data controller is next2u S.à r.l.-S, Luxembourg. TODO: address of next2u S.à r.l.-S, Luxembourg

Privacy contact: [email protected]

What the app collects

  • Sign in with Apple: an identifier only. Poqo doesn’t ask Apple for your name or your email.
  • Sign in with Google, on Android once the app is available there: your Google account identifier. We don’t read your emails or your contacts. Google may send your email address along with that identifier; we don’t use it to contact you.
  • Profile: handle, photo or avatar, bio, favourite topics.
  • Direct messages between friends, and what you post in the community (questions, answers, votes). What you post in the community is visible to other players.
  • Gameplay: games, answers, progress, levels, leagues, challenges, and how you use the app, so topics and reviews can adapt to you.
  • Purchases: the history Apple or Google reports to us (Poqo+ subscription, Pearls). We never receive your card number.
  • Notifications: a technical token, only if you allow notifications. It is passed to Apple (APNs) or Google (Firebase Cloud Messaging) to deliver them.
  • Questions to the AI: if you ask the AI a question, its text is sent to an AI provider to produce the answer. The question and the answer then join the community, labelled “AI”.

The website waitlist

If you leave your email on this site, we store your address, your language, the page you signed up from, and when you gave consent. Nothing else: no name, no password. Your IP address is only used in memory, to limit abuse, and isn’t stored with your email. We use your email only to tell you when Poqo launches. We don’t sell it and we don’t use it for ads.

Every email will include an unsubscribe link. You can also write to [email protected] and we’ll take you off the list.

Why

To run your account, the game, leagues, messages, and purchases (providing the service). To adapt topics and reviews to your level. To keep the service secure and limit abuse (legitimate interest). To tell you about the launch if you joined the waitlist (consent). None of this is sold, and there is no targeted advertising.

Where it is hosted

Data is hosted in the European Union, on a Kubernetes cluster operated for next2u. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, is the content delivery network and proxy, so traffic passes through Cloudflare.

How long

  • Account data: for as long as the account exists, then deleted within 30 days. Backups may keep a copy for up to 90 days.
  • Waitlist email: until you unsubscribe, or at most 24 months after the last email we sent you.
  • Push token: until you sign out, uninstall the app, or delete your account.
  • Purchases: for as long as the account exists, then as long as Luxembourg accounting law requires.
  • Security logs: about 90 days.

Delete your account

In the app: Settings, then “Delete my account”, then confirm. Deleting your account doesn’t cancel a Poqo+ subscription: you do that in your App Store settings, or in Google Play on Android. Step by step instructions are on the Support page.

Your rights

You can ask to access, correct, erase, restrict, or port your data, and object to its processing. You can withdraw consent at any time. You can also complain to the Commission nationale pour la protection des données (CNPD) in Luxembourg. To use any of these rights, write to [email protected].

Poqo isn’t meant for anyone under 16 without a parent’s permission.