1. Processing depends on the feature used
The providers below may act on our behalf depending on the features used and services involved. Being listed does not mean that every provider receives every piece of content. Processing is limited to the data needed for its task.
Required consent is obtained in PokoClub before the relevant processing. The list identifies authorised recipients; it is not blanket permission for new purposes.
2. Authorised service providers
| Provider | Task | Data involved, depending on use |
|---|---|---|
| Google Cloud Platform | Responses, creations, computing and storage | Prompts, relevant context, content and files needed for the requested feature. |
| OpenAI | AI content generation and processing | Prompts, context and content needed for a creation or response. |
| Mistral AI | AI content generation and processing | Prompts, context and content needed for a creation or response. |
| RunPod | Computing and voice processing | Audio, text and parameters needed for voice features. |
| Supabase | Accounts, database and storage | Parent accounts, profiles, settings, content and service identifiers. |
| Vercel | Web hosting and service execution | Requests, data needed to process them and technical logs. |
| Upstash | Protection against abuse | Technical identifiers, counters and rate-limiting information. |
| Resend | Sending service emails | Email address and the content of messages requested or needed for the service. |
Google Cloud Platform
- Task
- Responses, creations, computing and storage
- Data involved, depending on use
- Prompts, relevant context, content and files needed for the requested feature.
OpenAI
- Task
- AI content generation and processing
- Data involved, depending on use
- Prompts, context and content needed for a creation or response.
Mistral AI
- Task
- AI content generation and processing
- Data involved, depending on use
- Prompts, context and content needed for a creation or response.
RunPod
- Task
- Computing and voice processing
- Data involved, depending on use
- Audio, text and parameters needed for voice features.
Supabase
- Task
- Accounts, database and storage
- Data involved, depending on use
- Parent accounts, profiles, settings, content and service identifiers.
Vercel
- Task
- Web hosting and service execution
- Data involved, depending on use
- Requests, data needed to process them and technical logs.
Upstash
- Task
- Protection against abuse
- Data involved, depending on use
- Technical identifiers, counters and rate-limiting information.
Resend
- Task
- Sending service emails
- Data involved, depending on use
- Email address and the content of messages requested or needed for the service.
3. Apple and Google
Apple and Google provide app distribution, purchases, sign-in when you choose it, and notifications. They may act as independent controllers for their own services. Data processed includes necessary platform identifiers, tokens and transaction references.
PokoClub does not receive full card details for an in-app purchase. The store’s rules apply to its payment processing and refund requests.
4. Retention, transfers and safeguards
Providers processing data on our behalf are subject to the contractual obligations applicable to their tasks. Technical processing needed for security and retention periods may differ between services. The absence of advertising use is not a guarantee of immediate erasure.
Data is not sold. Contact us to learn about transfer safeguards, retention or recipients associated with a specific use of your account. A material change requiring fresh agreement cannot be covered solely by updating this page.