Privacy Policy
Effective date: September 23, 2026
This Privacy Policy explains what information PoGo Alley collects, how we use it, and your choices.
1. Information we collect
Account: the email address you sign in with. If you sign in with Google, Apple or Discord, we also get the basic profile that service shares, such as your name, and for Discord your Discord user ID. If you sign in with email and a password, your password is stored only in hashed form by our hosting provider. Trainer profile: the username and level you confirm from your screenshot, plus the team, profile photo, friend code, bio and social handles you choose to add. Content: the inventory, wishlist and messages you create in the App, and the photos you send in chat. Notifications: your notification settings, a record of the reminder emails we send you, and, if you signed in with Discord, the Discord message channel we use to alert you. Activity: the time you last opened the App, so other trainers can see when you were last active. Technical data: your IP address and device or browser type, recorded by our hosting providers when you use the App. We may use IP addresses to see roughly which countries trainers are in. Feedback: if you send feedback, we store your message and its category, your account ID and username, the app version and platform you sent it from, and any screenshot you choose to attach; on the web app we also record the page you were on and your browser and screen size so we can reproduce the problem.
2. Your verification screenshot
When you verify your account, your profile screenshot is processed to read your username and level. On the mobile app the image is sent to a third-party OCR service (OCR.space) to extract that text; on the web app it is read on your device and never leaves it. We do not store the screenshot itself, only the values read from it. If you choose to join the leaderboard, the Pokémon caught and Total XP figures read from your screenshot are stored on your profile and shown publicly on the board alongside your username, team and level; each submission is also logged so we can review disputed entries. You can leave the leaderboard at any time from the Leaderboards tab. We do not read or keep the other stats the screen shows, such as distance walked or PokéStops visited.
3. How we use information
To create your account, match you with other trainers, power the marketplace and messaging, notify you about new messages, handle Pro subscriptions, provide support, and keep the service safe. We do not sell your personal information.
4. Sharing
Your username, team, level, rating, inventory and wishlist are visible to other trainers so trades can happen, along with when you were last active in the App. Messages, including photos you send in chat, are visible to you and the trainer you message. A chat photo is stored at an unlisted link, so anyone who has that link can open it. If you join the leaderboard, your username, team, level and the catches/XP you submit are visible to anyone, including visitors who are not signed in. We use service providers to operate the App: Google, Apple and Discord for sign-in; Supabase for hosting; Vercel to host the website and send reminder emails; OCR.space to read your verification screenshot; Apple, Google Play and Stripe for payments, and RevenueCat to check subscriptions in the iPhone and Android apps. For notifications we use Resend to send email reminders about unread messages. If you signed in with Discord, Discord also delivers a direct message from our bot when a trainer messages you; it says who messaged you, not what they said.
5. Data retention & deletion
We keep your data while your account is active. You can delete your account at any time from the account menu → Delete account, which removes your profile, inventory, wishlist, messages, the photos you sent in chat, and any feedback you sent (including attached screenshots). Feedback screenshots are stored privately with our hosting provider and are readable only by you and our support team. You can also ask us to delete your account by emailing hanwong118@gmail.com, without the app. See pogoalley.com/delete-account for how, and for exactly what is deleted and what is kept.
6. Security
We use industry-standard measures including row-level security so users can only edit their own data. No system is perfectly secure; please use a strong, unique password for the account you sign in with.
7. Children's privacy
PoGo Alley is not directed to children under 13, and we do not knowingly collect their personal information.
8. Your rights
Depending on your region you may have rights to access, correct, or delete your data. Contact hanwong118@gmail.com to make a request.
9. Changes
We may update this policy and will revise the effective date above. Contact: hanwong118@gmail.com.
PoGo Alley is an independent companion app. It is not created by, affiliated with, endorsed by, or sponsored by Niantic, Nintendo, The Pokémon Company, or any of their subsidiaries. All trademarks are the property of their respective owners.