Privacy Policy

Pouch takes your privacy seriously. This policy explains what information we collect, why we collect it, and what your rights are. It's written in plain language because we'd rather you actually read it.

Who runs Pouch

Pouch is operated by Rachel Guglietti, based in Haarlem, the Netherlands. Rachel is the data controller for any personal information you share with Pouch. You can reach her at thepouchapp@gmail.com for any privacy questions or requests.

What we collect

Your email address — when you sign up for the weekly recall digest. That's it. No name required, no phone number, no demographic data. We don't ask for, and we don't want, more than we need.

Email engagement data — whether you opened a given email, and whether you clicked any links inside it. This is collected by our email provider (Resend) and used to understand which content is useful and to detect delivery problems. We do not share this data with third parties.

Anything you tell us — if you reply to a Pouch email, that reply lands in our inbox. If you write to us, we keep that correspondence so we can respond.

What we do not collect

• We do not collect data about your children
• We do not collect location data
• We do not use third-party advertising trackers
• We do not sell or rent your data to anyone, ever
• We do not use your data to train AI models

Why we collect it

Your email address is collected for two purposes:

• To deliver the weekly recall digest you signed up for (lawful basis: consent, under Article 6(1)(a) of the GDPR)
• To send you occasional important updates about Pouch itself — for example, if there's a critical recall that needs faster communication than the weekly email

Who we share it with

We share your data only with the service providers we need to actually run Pouch. These are:

• Resend — sends our emails. They process your email address to deliver our newsletter. Based in the US, GDPR-compliant via Standard Contractual Clauses.
• Supabase — stores our subscriber list. Based in Singapore with EU data residency available, GDPR-compliant.
• Vercel — hosts our website. They process basic server logs (IP address, request URL) for technical operation. Based in the US, GDPR-compliant.

We do not share your data with any other party, for any other reason, ever.

How long we keep it

We keep your email address for as long as you're subscribed to the newsletter. When you unsubscribe (one click in any email), we delete your record from our active subscriber list within 7 days.

If you write to us, we keep that correspondence for as long as it's useful for context, and no longer than 2 years.

Your rights under the GDPR

Because Pouch is operated from the Netherlands, the GDPR applies to everyone, regardless of where you live. You have the right to:

• Access — ask us what data we hold about you
• Rectification — ask us to correct anything that's wrong
• Erasure — ask us to delete everything (the "right to be forgotten")
• Portability — ask us to send you a copy of your data in a portable format
• Withdraw consent — unsubscribe at any time, which immediately stops all email sending
• Lodge a complaint — with the Dutch data protection authority (Autoriteit Persoonsgegevens) if you think we've handled your data improperly

To exercise any of these rights, email thepouchapp@gmail.com. We will respond within 30 days.

Cookies and tracking

Pouch's website uses no advertising cookies, no tracking pixels, and no analytics that identify individual users. Vercel (our host) keeps basic server logs for operational purposes, which are not personally identifiable.

International data transfers

Some of our service providers (Resend, Vercel) are based in the United States. When your data is transferred there, it's protected by Standard Contractual Clauses, the GDPR-approved mechanism for international transfers.

Children

Pouch is intended for parents and other adults. We do not knowingly collect any data from anyone under 16. If you believe we have collected data from a child, please contact us immediately and we will delete it.

Changes to this policy

If we change this policy in any meaningful way, we'll email all current subscribers before the changes take effect. You'll always be able to find the current version at this URL.

Contact

Questions, requests, complaints — anything privacy-related — email thepouchapp@gmail.com.