Poquito Privacy Policy

Effective date: 7 October 2026

Last updated: 7 October 2026

Poquito is operated by Odd Potato. This policy explains what Poquito stores and sends when you use the Android app.

Accounts and information stored on your device

Poquito does not require an account. The app stores some information in its private app storage so its features work:

• Favorites, recently used tools, appearance and language preferences, and the local session information used to show temporary tool labels.
• Saved TV names, network addresses, pairing details and shortcuts. Pairing details can include credentials or tokens supplied by a TV.
• Scanned document copies, their index, and OCR text when OCR is run.
• Feedback that has not yet been delivered, including the message and submission metadata described below.
• Remove Ads entitlement state and the expiry time for temporary ad-free access. Google Play remains the source for restoring a purchase.
• Cached value-conversion responses and temporary or generated files used while processing media and documents.

These items are stored on the device. Poquito does not claim that app-private files are encrypted at rest. You can remove saved remotes, scans, and queued feedback from their respective features; favorites can be removed in the app. The app does not currently provide a single control to erase every local setting and recent-tool entry. Uninstalling Poquito removes its app-private data. Android cloud backup and device transfer are disabled for Poquito app data. Files you export, save elsewhere, or share are outside Poquito's control and may remain with the destination you choose.

Camera, scanning, and files

The TV Size Visualizer requests camera access when you use its AR view. Camera data is used for the on-device AR experience; Poquito does not upload camera frames to a Poquito server. The feature uses Google Play Services for AR (ARCore), which collects identifiers, API-usage, performance and diagnostic information for Google as described in Google's documentation. Poquito does not use ARCore Geospatial or Cloud Anchors.

Document Scanner uses the Google Play services document-scanning flow. Google describes that scan flow as on-device; you choose which scan results are returned to Poquito. Poquito copies returned scans and any OCR text into app-private storage. The app also uses bundled ML Kit text recognition on-device. ML Kit processes the input and result on-device, while its SDK may send device/app information, performance metrics, API configuration, feature events and diagnostics to Google. The scanner's camera flow is provided by Google Play services; Poquito's camera permission is used by its AR feature.

File and media tools process files you select on-device. Android's system picker grants access to selected files rather than Poquito requesting broad media-library access in its app manifest. If you choose to export or share a result, Android and the destination app handle that transfer. The Media Converter requests a direct media URL that you enter and follows redirects. The URL host and any redirect destination contacted receive the request and ordinary network information such as your IP address; Poquito does not route that download through its feedback service. A URL can use HTTP or HTTPS, so the remote connection is not always encrypted. The app also allows some local-network TV communication over HTTP as required to control compatible devices.

Advertising and privacy choices

Poquito uses Google Mobile Ads (AdMob) for banner ads and optional rewarded ads. Google Mobile Ads may collect or share IP address, ad and app interaction information, diagnostics, and device or account identifiers for ad delivery, measurement, analytics, and fraud prevention, as described by Google. Depending on your region and choices, Google may use information to provide and measure ads. Google's User Messaging Platform (UMP) presents consent and privacy choices where required; when Google reports that privacy options are available, you can reopen them in Settings under Ad privacy choices.

After UMP allows ad requests, Poquito initializes Google Mobile Ads during startup, including when Remove Ads is owned. Remove Ads suppresses ad display in Poquito; it does not disable the advertising SDK or guarantee that its data processing stops. Google and Android settings provide additional controls for advertising identifiers and privacy choices.

Value conversion services

When you use Value Converter, Poquito may contact Frankfurter for currency lists and rates, Gold API for metal symbols and prices, and CoinGecko for cryptocurrency lists, supported currencies and prices. Requests contain the currency pair, metal symbol, or asset and quote currency needed for the request; the amount you enter and the conversion calculation remain in the app. These services and their hosting providers receive ordinary network metadata, such as an IP address, as applicable to their own service. Some responses are cached in app-private storage for later use. Their logging, retention, and privacy practices are controlled by those providers, not by Poquito. Review their current privacy information before using these features.

TV Remote and your local network

TV Remote discovers compatible devices on your local Wi-Fi network and communicates with the TV you select to pair or control it. Depending on the TV, the app sends commands and pairing information such as a PIN, token, client key, or other credential to that TV over your local network. Saved device and pairing details stay in Poquito's app-private storage. TV Remote is not a Poquito cloud service; the selected TV and your local network receive the communications needed for discovery, pairing, and control.

Purchases

Poquito uses Google Play Billing for Remove Ads and optional one-time support purchases. The support purchases are consumable; Remove Ads is a non-consumable purchase that can be restored through Google Play. Google handles the payment transaction and payment credentials. Poquito does not access your card number or other payment credentials. The app receives purchase product and status events needed to apply or restore the feature, and stores the Remove Ads entitlement locally. See Google's Privacy Policy and Google Payments Privacy Notice for Google's handling of Play and payment data.

Feedback

Sending feedback is optional. When you submit feedback, Poquito sends your message and these fields: a random submission ID, product (poquito), source (Home, a tool, or Settings), optional tool identifier, feedback type, app version, and timestamp. The production route is Poquito → Poquito's feedback service on Google Cloud Run → Resend → Odd Potato's recipient inbox. Cloud Run also uses the direct network peer address for an in-memory rate limit; this address is not a field in the app payload. The service has short-lived duplicate protection and no feedback database. Email and service-provider systems may process or retain copies under their own settings and policies; no fixed retention period is promised here.

If delivery fails, a copy can remain in the local feedback queue until you retry or delete it. You can delete queued messages in the app. Poquito cannot recall a message after it has been delivered to the recipient inbox. You can contact Odd Potato about a privacy or deletion request using the address below.

Analytics, diagnostics, and service providers

Poquito does not include a separate product-analytics SDK or dedicated crash-reporting SDK. This does not mean that no usage or diagnostic information leaves the device: Google Mobile Ads, ARCore, ML Kit, Google Play Billing/Google Play services, Android, Cloud Run, Resend, and external API providers may process the information described in this policy to provide their services, diagnose them, prevent abuse, or handle transactions. Their own policies apply to their processing.

Security

Poquito stores its app data in Android app-private storage and disables Android backup and device transfer for that data. Feedback is sent to the configured production service over HTTPS. Value-conversion API requests use HTTPS. A direct media URL can use HTTP or HTTPS as entered, and local TV communication may use HTTP on your Wi-Fi network. Do not include sensitive information in a URL or feedback message unless you are comfortable sending it to the destination described above. Poquito does not claim encryption at rest for local files; provider security practices are described by the providers themselves.

Android permissions and network access

Poquito uses camera access for its AR feature and network/Wi-Fi access for online features and local-network TV discovery/control. The app uses Android's system picker to access files you select. Android or Google Play services may show their own permission or privacy prompts when you use a feature they provide.

Third-party information

The services currently used include Google Mobile Ads, Google Play services for AR / ARCore, ML Kit, Google Play Billing and Google payments, Google Cloud, Resend, Frankfurter, Gold API, and CoinGecko. Their services and disclosures can change; consult each provider's current policy for details.

Changes and contact

Odd Potato may update this policy when the app or its data practices change. The effective and last-updated dates at the top will be maintained explicitly. For privacy questions or requests, contact Odd Potato at odd.potato.labs@gmail.com.