Privacy Policy
Last updated: July 28, 2026
1. Overview
poitoko consists of a web app, an iOS app and its extensions, and a Chrome extension. This
policy covers all of them.
2. What We Collect
Content you explicitly save:
- The selected text you choose to save
- The URL and title of the page where you saved it
- Page metadata: article title, author, and preview image, sourced from the page's meta tags
- Kindle highlights when you use the Kindle Sync feature
Account data:
- Your email address and user ID, obtained at login via Google or Apple
- An authentication token, stored locally on your device
Usage metadata attached to each save:
- Timestamp of when the highlight was saved
- How you saved it (context menu, keyboard shortcut, or button)
iOS app analytics:
- Product interactions, such as app lifecycle events, features opened, capture methods,
reading duration, search result counts, and notification or widget opens
- An internal poitoko account ID, a random app-installation ID, and internal content IDs used
to associate events with the correct account, installation, and feature
- App and device information, such as app version, build, operating system, device type,
screen dimensions, language, and whether the app is a debug build
- Coarse account attributes, such as plan, sign-up date, locale, notification status, digest
frequency, and a bucketed—not exact—count of saved fragments
3. What We Do NOT Collect
- We do not read or record pages you merely browse — the extension only accesses page content
when you actively trigger a save
- We do not track your browsing history
- We do not send saved quote text, memo text, or search queries to our analytics provider
- We disable GeoIP enrichment for analytics events and do not use analytics to derive precise
location
- We do not use analytics data for advertising or cross-app tracking
- We do not sell your data to third parties
4. How We Use Your Data
Your data is used solely to provide the poitoko service: storing and organizing your personal
highlights, powering search, and generating AI-assisted features when you request them.
To provide some of these features, your highlight text may be processed by third-party AI
services. This processing is used only to power poitoko features and is not used for
advertising or sold.
We use iOS app analytics to understand whether features are useful, measure reliability and
engagement, identify content gaps, and improve poitoko. Analytics is not used to build
advertising profiles.
5. Third-Party Services
| Service | Purpose |
|---|
| Google Sign-In | Authentication |
| Apple Sign-In | Authentication |
| Third-party AI services | Powering search and AI features, processing your highlight text outside Japan |
| Product analytics provider | Processing iOS product analytics on our behalf in the United States |
6. Data Storage and Security
- Your data is stored on poitoko's servers
- Your authentication token is stored locally on your device
- iOS analytics data is processed and stored by our analytics provider in the United States
under contractual data-protection terms
- Highlight text sent to third-party AI services is processed outside Japan under contractual
data-protection terms, and is not used to train those providers' models. We cannot identify
the destination country in advance, because these providers operate globally distributed
infrastructure and do not commit to a specific processing region for the service we use.
- We retain personal data only for as long as needed to provide, secure, and improve the
service, meet legal obligations, and resolve disputes
- You can delete any saved highlight at any time from the poitoko web app
7. Permissions We Request and Why
| Permission | Why we need it |
|---|
| storage | Store your authentication token locally |
| activeTab | Access the current page when you trigger a save |
| scripting | Extract selected text and page metadata when you save |
| contextMenus | Add "Save to poitoko" to the right-click menu |
| notifications | Show save confirmation or error notifications |
| tabs | Detect if you have the poitoko web app open to retrieve your auth token |
| host_permissions: <all_urls> | Allow saving highlights from any website |
8. Your Rights
You may:
- Access all your saved data via the poitoko web app
- Delete individual highlights at any time
- Request deletion of your account and associated analytics data by contacting us, subject to
any retention required by law
- Sign out at any time, which clears the locally stored token
9. Children's Privacy
poitoko is not directed at children under 13. We do not knowingly collect data from children.
10. Changes to This Policy
We will update this page if our data practices change. Continued use of the extension after
changes constitutes acceptance.