PocaPal

Privacy Policy

Effective 28 October 2026

In short: PocaPal has no accounts, no ads, no tracking and no analytics, and we never sell or rent your data. Your collection lives on your devices and in your own iCloud, where we can't see it. Anything you share by link is kept in iCloud too, and only for as long as you choose.

This policy explains what the PocaPal app for iPhone, iPad and Mac ("PocaPal", "the app") and the website pocapal.mksvrcek.com handle, where it is kept and the choices you have. PocaPal is made by Michael Kimberly Svrcek ("we", "us").

Your collection

Everything you add (photocards, albums and other things with their photos, prices and notes, the groups and idols you follow and rank, events and what you got at them, sets, photobooks, playlists, your arena and what you place on it, your Korean words and how you're getting on with them, and your settings) is stored on your device. If iCloud is turned on, it syncs between your devices through your own private iCloud database, using Apple's CloudKit. That data is held by Apple under Apple's Privacy Policy. We have no access to your private iCloud data, and PocaPal has no server of its own that receives it.

Some things stay on the one device and are never synced: how you arrange Home and Me, your home pages, your view options, your Fanclub member name, and the list of share links you've opened.

Permissions, used on your device

• Camera. If you allow it, PocaPal uses the camera to scan cards and photograph your things. Finding the cards in a photo and cutting them out happens on your device. Only the pictures you keep are saved, in your library and your iCloud.
• Photos. If you allow it, PocaPal looks at the dates and places of your photos on your device to find the ones from an event, and keeps an album in your photo library for each group or idol you add photos to. Your photos aren't uploaded anywhere by PocaPal; the albums sync only through your own iCloud Photos, if you use it. Saving a card you've designed to your photos asks for permission to add to your library.
• Apple Music. If you allow it, PocaPal uses Apple's MusicKit to play the albums you own, match them with Apple Music, show new releases from the artists you follow, and find group photos to use as covers. Apple handles that under its own policy.
• Notifications. Reminders for releases, birthdays and events are scheduled on your device.
• Sensitive pictures. Where you've turned on Sensitive Content Warning or Communication Safety, PocaPal asks Apple's on-device analysis whether a picture is sensitive, so that it can keep it out of share links, pictures and widgets. The pictures never leave your device for this; only the answer is kept, with the thing it belongs to.
• Speaking Korean words. Pronunciation is spoken by your device's own voices; nothing is sent anywhere.

Widgets and Live Activities

So that Home Screen widgets, Control Center controls and Live Activities can show your collection, PocaPal writes a small copy of what they show (a few names, dates and small pictures) into a container on your device that only PocaPal and its widgets can read. It never leaves your device. Pictures marked sensitive are never put in it.

Linked events with Peregrino

If you link an event with Peregrino, our travel app, the details both apps show (the event's name, kind, days, times and place) are kept in a file on your device that both apps can read, and synced between your devices through a separate container in your own private iCloud. Nothing else of the event (your seat, photos, what you got, notes) is shared with Peregrino.

Sharing, only when you choose

Nothing is shared unless you share it. When you do, it stays within Apple's iCloud, and anything marked sensitive is left out.

People you invite

A share with people you invite is kept in your private iCloud and shared with them through Apple's iCloud sharing. Only they can open it, in PocaPal, signed in to iCloud. You can stop sharing at any time.

Anyone with the link

When you make a public link to a card, an album, a thing, an event, a set, a playlist, a photobook or your arena, PocaPal saves a copy of what it shows (its pictures, names and dates, and your name as the sharer) in PocaPal's public database in Apple's iCloud (CloudKit), under a long random link, with a preview picture for messages. Anyone with the link can open it, in the app or on this website at pocapal.mksvrcek.com/s/…; nobody can find it without the link. An arena's link carries its venues, seats and what stands on its plaza, and the name of the person your home page is about with the address of the directory's own picture of them; never your own photos.

• It all remains in iCloud. The website is a viewer: it reads the shared copy directly from iCloud in the visitor's browser and doesn't keep or forward it. We run no database of shares.
• It stays up to date. While a link is live, it is updated when you change what it shows.
• You stay in control. A link ends when you stop sharing it, when it expires (after 1, 7 or 30 days, or never, as you choose), when you delete the thing it shows, or when that thing turns out to be sensitive. Its copy is then deleted from iCloud, and the link stops working.
• Opening someone else's link needs no account, and nothing is saved to your iCloud or your collection.

The Fanclub

The Fanclub is a one-time purchase handled by Apple through the App Store. We never receive your payment details. Each member gets a member number: to keep it, PocaPal saves a record in its public iCloud database holding only the number, named by Apple's transaction identifier for the purchase, so that a restore on another device finds the same number; and it moves on one shared counter. It contains no name or contact details. The name on your membership card stays on your device.

Services the app contacts

• Apple Music, for the catalogue, playback and new releases, as above.
• The artist directory. PocaPal includes a directory of groups and idols from kpopping. Their pictures are loaded from kpopping's servers as you look at them.
• Apple Maps, for finding a venue and the country an event was in.
• Wikipedia, only when you press Learn more on a Korean holiday, in an in-app browser.

These requests carry only what is needed (an artist's or a place's name, a picture's address), plus what any internet request carries, such as your IP address. They aren't linked to you or your collection.

Diagnostics

PocaPal keeps Apple's performance and crash reports (MetricKit) on your device, and they leave it only if you choose to export them. If you share analytics with app developers in your device's settings, Apple may also share crash reports with us without identifying you.

Backups

Settings › Backup & Export makes files of your collection (a backup, with or without pictures, and a spreadsheet). They're made on your device and go only where you send or save them. We never receive them.

This website

pocapal.mksvrcek.com is a static site hosted by Cloudflare, which processes standard request data (such as IP addresses) to deliver and protect it. Its fonts are served from the site itself. A share page asks Apple's iCloud for the shared copy from your browser. The site sets no cookies and runs no analytics. When you choose a language, or close the note offering yours, your browser keeps that choice for this site in its own storage; it is never sent anywhere.

Keeping and deleting your data

• Anything you delete in the app is removed from your devices and your iCloud.
• You can stop any shared link or invite in the app (Me › Shared), which deletes its shared copy.
• To remove all PocaPal data from iCloud, delete the app's data in your device's iCloud settings (Manage Storage).
• For anything else, including a member number record, write to us and we'll delete it.

Children

PocaPal isn't directed at children under 13, and we don't knowingly collect their personal information. Because your data stays in your own iCloud, we hold none of it.

Your rights

Depending on where you live (for example under the GDPR or the CCPA), you have rights to access, correct, export and delete your personal data. Most of this you can do directly in the app; for anything else, contact us and we'll help.

Changes

If this policy changes, we'll update it here with a new effective date, and tell you in the app if the change is significant.

Contact

Questions or requests: [email protected]