Your Privacy. Your Garden. 🌱

Pocket OT is operated by Rumaiysa Bhyat, a HPCSA-registered Paediatric Occupational Therapist based in Johannesburg, South Africa. For privacy inquiries, contact us at privacy@pocketot.co.za.

We collect the following categories of personal information to provide and improve Pocket OT:

• •Account Information: Your name, email address, username, and encrypted password.
• •Child Profile Data: Your child's nickname or name, age/date of birth, specific sensory profiles, and tracked milestones. This data is kept strictly confidential and is used solely to generate personalized developmental suggestions ("play recipes"). You may also choose to enter free-text notes about your child — including details you consider health-related (such as a diagnosis or therapy history). By entering this information you consent to its storage and processing for the sole purpose of personalising your in-app experience. This information is never shared with third parties and is permanently deleted when you delete your account.
• •Camera & Photo Library Data: When you use "The Vault" to capture memories or milestones, we request access to your device's camera and photo library. Images you choose to upload are securely transmitted and stored on our servers to build your child's timeline. This media is entirely private to your account and is never shared publicly.
• •Device & Usage Data: Information about how you access our platform, including browser type, device type (iOS/Android/Web), IP address, and interactions with our application (e.g., features used, time spent).
• •Payment Information: All transactions are processed securely by our third-party payment processors (Apple App Store, Google Play Store, or Paystack). We do not store or process full credit card numbers on our servers.

We collect only what is necessary to provide the service:

• •To personalize toolkit guidance: Your child's sensory profile directly shapes the OT activity recipes and SOS plans.
• •To store your memories: Vault photos and notes are saved to our secure database so you can access them anytime.
• •To track growth: Milestones and goals give you a longitudinal view of your child's development.
• •To improve the product: Anonymized usage data helps us build a better app.

• •Database: Hosted on Supabase (PostgreSQL), with Row Level Security (RLS) enabled. No unauthenticated client can read your data directly.
• •Photos: Stored in a private Cloudflare R2 bucket. Photos are never publicly accessible. Every photo URL is a time-limited Signed URL that expires after 1 hour.
• •Authentication: Powered by NextAuth.js with bcrypt password hashing. Session tokens expire after 30 days of inactivity.
• •Transport: All data transmitted over HTTPS/TLS. API keys and secrets are never embedded in client-side code.
• •Automated Processing: Free-text inputs you submit to features such as the Activity Architect, SOS Rescue, and Anchor recipes are sent over encrypted connections to large-language-model providers via OpenRouter, who routes the request to the underlying model (currently Anthropic Claude, Google Gemini, and Meta Llama). Each provider is contractually a data sub-processor and is governed by their own data processing terms. We do not share your child's name or identifying details with these engines beyond what you type into the prompts.

Pocket OT uses first-party, privacy-respecting product analytics only. We do not embed Google Analytics, Meta Pixel, advertising SDKs, or any third-party tracking. We log a small set of events to operate and improve the product:

• •Page visits: The path of the page you visit (e.g. /architect) and a timestamp, linked to your account if you are signed in.
• •Feature usage: Counts of in-app actions such as recipe generations and saves, used to detect bugs and abuse.
• •Cookies: Strictly necessary cookies for authentication (NextAuth session cookie). No advertising or cross-site tracking cookies are used.

Under the GDPR/UK GDPR, we rely on legitimate interests (Article 6(1)(f)) to operate this minimal first-party analytics — specifically to keep the service secure, debug issues, and improve the product. The processing is limited, low-risk, and you may object at any time by emailing privacy@pocketot.co.za.

Because we do not use non-essential trackers or third-party advertising cookies, no consent banner is required under the ePrivacy Directive / PECR. If we ever introduce such trackers, we will request your consent first via an in-app banner before any tracking is fired.

Pocket OT uses the following sub-processors to deliver the service. Each is bound by a data processing agreement (or its public equivalent) and processes data only for the purpose listed below.

We do not sell, rent, or share your personal data with any third party for advertising purposes. Ever.

You have the following rights regarding your personal information:

• •Right to Access: Request a copy of all data we hold about you.
• •Right to Correction: Update any inaccurate personal information via the Settings page.
• •Right to Deletion: Permanently delete your account and all associated data using the "Delete My Account" button in Settings → Security. This erasure is complete and irreversible.
• •Right to Object: Object to any processing of your data for purposes other than core app functionality.
• •Right to Portability: Download a portable JSON copy of all your data yourself via Settings → Security → "Download my data", or email privacy@pocketot.co.za if you need a different format.

To exercise any of these rights, email privacy@pocketot.co.za. We will respond within 30 days as required by POPIA.

We retain your data for as long as your account is active. When you tap "Delete My Account" in Settings → Security, the request fires immediately: your photos are removed from Cloudflare R2 and every related database row (child profile, milestones, notes, vault memories, goals, sessions) is cascaded-deleted in the same request. Anonymized, aggregated usage statistics (which contain no personal information) may be retained indefinitely to improve the product. Audit logs of AI requests are retained for a maximum of 90 days for abuse-detection, then purged.

Pocket OT is a tool for parents and caregivers — not for children to use directly. The data collected about a child (nickname, date of birth, sensory profile) is entered and controlled by the parent or guardian, who is the account holder and the data subject under POPIA / GDPR. Account holders must be at least 18 years old; this is enforced at signup. If we discover an account was created by a minor, we will delete it.

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or an in-app notification. The "Last updated" date at the top of this page will always reflect the most recent version.