Pokopedia

Privacy Policy

Effective Date: March 2, 2026

Pokopedia is a free companion app for Pokémon Pokopia (Nintendo Switch 2). It provides a Pokédex, crafting recipes, and a personal progress tracker. Pokopedia is developed and operated by Hugo Alexandre Duarte Unipessoal Lda, a company registered in Portugal.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We are committed to transparency and to protecting your privacy.

Contact: mail@hiugo.com

1. Information We Collect

1.1 Information Stored Locally on Your Device

Pokopedia stores all of your personal app data directly on your device using on-device storage (MMKV). This data is never transmitted to our servers because we do not operate any servers. We have no ability to access, read, or retrieve this data.

Locally stored data includes:

  • Profile names — identify multiple save files
  • Game progress (befriended Pokémon, built habitats, crafted recipes, learned moves) — track your personal completion
  • Custom notes — your personal notes on Pokémon and items
  • Theme preference (light/dark) — display settings
  • Language preference — app language
  • Selected profile ID — remember which profile is active
  • Pro purchase status — remember your purchase locally for faster access
  • First-session flag — delay ads until your second session
  • Alpha banner and alert preferences — remember UI dismissals

This data exists only on your device. Uninstalling the app permanently deletes all of it.

1.2 Cloud Sync (Optional)

If you enable Cloud Sync, Pokopedia uses Google Drive's App Data folder (Android) or iCloud's Key-Value Storage (iOS) to back up your game progress to your own Google or Apple account. This data is only readable by this app, is never transmitted to or stored on our servers, and is deleted when you uninstall the app or revoke access in your Google/Apple account settings.

1.3 Information Collected by Third-Party SDKs

Pokopedia integrates three third-party services. Each may collect certain data as described below. We do not control or have access to the data these services collect — it is transmitted directly from your device to their servers.

Google AdMob (Advertising)

Google AdMob displays banner ads and rewarded video ads. The AdMob SDK may collect:

  • IP address — for ad delivery and approximate geographic targeting
  • Device advertising identifiers — IDFA (iOS) and Android Advertising ID, used for ad personalization and measurement
  • Ad interaction data — impressions, clicks, and video views
  • Device information — device model, operating system version, screen size, language
  • Crash and diagnostic data — SDK performance and error logs
  • SKAdNetwork attribution data — iOS ad attribution through Apple's privacy-preserving framework (50 registered SKAdNetwork identifiers)

Google processes this data according to its own privacy policy: https://policies.google.com/privacy

We use Google AdMob directly — we do not use any ad mediation networks or additional ad partners.

RevenueCat (In-App Purchases)

RevenueCat manages the optional one-time "Pokopedia Pro" in-app purchase. The RevenueCat SDK may collect:

  • Purchase history — specifically, whether you have purchased the "Pokopedia Pro" entitlement
  • Anonymous platform identifier — IDFV on iOS or an anonymous identifier on Android
  • Platform and app version — for receipt validation

RevenueCat does not receive your name, email address, or any other personal identification. We do not create user accounts or require sign-in.

RevenueCat processes this data according to its own privacy policy: https://www.revenuecat.com/privacy/

Expo Updates (Over-the-Air Updates)

Expo Updates delivers JavaScript bundle updates so we can publish data corrections and improvements without requiring a full app store update. The Expo Updates service may collect:

  • Platform (iOS or Android)
  • App version
  • Expo project ID

No personal data is collected. The update check is a simple request to determine whether a new bundle is available.

Expo processes this data according to its own privacy policy: https://expo.dev/privacy

1.4 Information We Do Not Collect

We want to be clear about what Pokopedia does not collect or access:

  • No email addresses, names, phone numbers, or account credentials
  • No precise or coarse location data
  • No camera, microphone, or photo library access
  • No contacts or address book data
  • No health, fitness, or biometric data
  • No analytics or usage tracking beyond what the third-party SDKs above collect
  • No crash reporting service (we do not use Sentry, Crashlytics, or similar)
  • No push notifications
  • No server-side data storage — we do not operate any backend servers or databases

2. How We Use Your Information

  • Profile names, game progress, notes — provide app functionality: track your completion of the Pokédex, habitats, and crafting recipes (stored locally, never transmitted)
  • Theme and language preferences — customize your app experience (stored locally, never transmitted)
  • Pro purchase status — remove ads and unlock premium features (stored locally + validated via RevenueCat)
  • Device advertising identifiers, IP address — serve relevant ads to support the free version of the app (Google AdMob)
  • Ad interaction data — measure ad performance (Google AdMob)
  • Purchase receipt data — validate your Pro purchase and restore it across devices (RevenueCat)
  • Platform, app version — deliver over-the-air updates with data corrections (Expo Updates)

3. Advertising and Your Choices

Pokopedia is free and supported by ads. Here is how advertising works in the app and how you can control it.

How Ads Work

  • Banner ads appear at the bottom of the main screens (Pokédex, Crafting, Tracker)
  • Rewarded video ads are optional — you can choose to watch one to receive a 30-minute ad-free period
  • First-session grace period — no ads are shown during your very first session with the app. Ads begin only after you have left the app and returned at least once

Your Ad Choices

You have several ways to control your ad experience:

  1. Consent preferences (GDPR/ATT): When you first open the app, you will be presented with a consent dialog. On iOS, you will also see Apple's App Tracking Transparency prompt. You can change your consent at any time in Settings > Ad Privacy Settings.
  2. Watch a rewarded ad: Voluntarily watch a short video ad to receive 30 minutes with no ads.
  3. Buy Pokopedia Pro: A one-time in-app purchase that permanently removes all ads.
  4. Platform-level opt-out:
    • iOS: Go to Settings > Privacy & Security > Tracking to disable tracking, or Settings > Privacy & Security > Apple Advertising to limit ad personalization
    • Android: Go to Settings > Privacy > Ads to delete your advertising ID or opt out of ad personalization

Consent Delay

The app is configured with delayAppMeasurementInit: true, which means no ad-related data is collected or transmitted until consent has been obtained.

4. Third-Party Services

We encourage you to review each provider's privacy policy to understand how they handle your data.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process data under the following legal bases:

  • Consent (Art. 6(1)(a) GDPR) — personalized advertising, access to device advertising identifiers (IDFA via ATT, Android Ad ID), GDPR consent for ad personalization
  • Performance of a Contract (Art. 6(1)(b) GDPR) — processing in-app purchases via RevenueCat, providing core app functionality (progress tracking, data display)
  • Legitimate Interest (Art. 6(1)(f) GDPR) — delivering over-the-air updates to fix bugs and update data, serving non-personalized ads to support the free app, fraud prevention in ad delivery

You may withdraw consent at any time through Settings > Ad Privacy Settings in the app. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

6. International Data Transfers

Pokopedia is operated by a company in Portugal (EU). The third-party services we use (Google, RevenueCat, Expo) are based in the United States. When these services process data from users in the EEA, UK, or Switzerland, data may be transferred to the United States.

These transfers are protected by:

  • EU-US Data Privacy Framework — Google LLC is certified under the EU-US Data Privacy Framework
  • Standard Contractual Clauses (SCCs) — where applicable, our third-party providers use European Commission-approved standard contractual clauses to safeguard data transferred outside the EEA

For details on how each provider handles international transfers, please review their respective privacy policies linked in Section 4.

7. Data Retention

  • Locally stored data (profiles, progress, preferences) — until you uninstall the app or clear app data. We cannot delete this data remotely because we have no access to it.
  • Google AdMob data— per Google's data retention policies (see Google's privacy policy)
  • RevenueCat data— per RevenueCat's data retention policies (see RevenueCat's privacy policy)
  • Expo Updates data— per Expo's data retention policies (see Expo's privacy policy)

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data.

European Economic Area, United Kingdom, and Switzerland (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access (Art. 15) — request a copy of your personal data
  • Rectification (Art. 16) — request correction of inaccurate data
  • Erasure (Art. 17)— request deletion of your personal data ("right to be forgotten")
  • Restriction (Art. 18) — request restriction of processing
  • Data Portability (Art. 20) — receive your data in a structured, machine-readable format
  • Object (Art. 21) — object to processing based on legitimate interests, including direct marketing
  • Withdraw Consent — withdraw consent at any time without affecting the lawfulness of prior processing

Since all personal app data is stored locally on your device and we have no access to it, most data-related requests can be fulfilled by you directly — for example, by deleting profiles in the app or uninstalling the app. For data held by our third-party providers (AdMob, RevenueCat), you may need to contact them directly.

You also have the right to lodge a complaint with your local supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD): https://www.cnpd.pt/

California, United States (CCPA/CPRA)

Under the California Consumer Privacy Act and the California Privacy Rights Act, California residents have the right to:

  • Know — what personal information is collected and how it is used
  • Delete — request deletion of personal information
  • Opt-Out of Sale or Sharing— we do not sell your personal information. Ad-related data sharing with Google may constitute "sharing" under the CCPA; you can opt out by adjusting consent in Settings > Ad Privacy Settings or via platform-level ad controls
  • Non-Discrimination — we will not discriminate against you for exercising your privacy rights

Brazil (LGPD)

Under the Lei Geral de Proteção de Dados, Brazilian residents have the right to:

  • Confirm the existence of processing
  • Access your data
  • Correct incomplete or inaccurate data
  • Anonymize, block, or delete unnecessary data
  • Request data portability
  • Delete personal data processed with consent
  • Obtain information about sharing with third parties
  • Revoke consent

Exercising Your Rights

To exercise any of these rights, contact us at mail@hiugo.com. We will respond within the timeframe required by applicable law (typically 30 days for GDPR, 45 days for CCPA).

9. Children's Privacy

Pokopedia is rated 13+ and is not directed at children under 13. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where a higher age of consent applies).

We do not:

  • Collect age or date of birth information
  • Create user accounts
  • Require any personal information to use the app
  • Target advertising to children

If you are a parent or guardian and believe your child under 13 has provided personal information through one of our third-party services, please contact us at mail@hiugo.com and we will take steps to address the issue.

10. Data Security

We take reasonable measures to protect the information associated with Pokopedia:

  • Local data:stored using MMKV (a high-performance key-value storage framework) directly on your device. This data is protected by your device's own security measures (passcode, biometrics, encryption).
  • Data in transit: all communication between the app and third-party services (AdMob, RevenueCat, Expo) uses TLS (Transport Layer Security) encryption.
  • No backend servers: we do not operate any servers, databases, or APIs. There is no central data store that could be breached.

While no method of electronic storage or transmission is 100% secure, the app's architecture — local-only storage with no backend — significantly limits the risk of data exposure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be delivered through app updates (via the App Store, Google Play, or over-the-air updates).

We will update the "Effective Date" at the top of this policy when changes are made. We encourage you to review this policy periodically. Your continued use of the app after changes are published constitutes acceptance of the updated policy.

For significant changes, we will make reasonable efforts to notify you, such as displaying a notice within the app.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Hugo Alexandre Duarte Unipessoal Lda
Email: mail@hiugo.com

For users in the European Union, the supervisory authority for data protection in Portugal is:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt/