Privacy Policy

Pabo · Last updated 18 October 2026

Pabo (“we”, “us”) is a pretend shopping app: you order things with a daily wallet of pretend money, watch them get delivered, and keep them in a virtual room. Nothing is bought, charged, or shipped. This policy explains what data the app handles.

Data stored on your device

Pabo does not require an account. The details of orders you simulate, your pretend wallet, streaks, room layout, and settings are stored locally on your device. We do not receive the names or descriptions of the items in your simulated orders. You can remove this local data by deleting the app.

Pseudonymous product analytics

Product analytics are enabled by default. Unless you turn them off, Pabo uses PostHog to send a persistent, randomly generated app-instance identifier; normalized screen names; individual interaction events; event properties such as item categories, counts, simulated prices and totals, durations, and Pro status; and basic app and device information such as app version, operating system, and device type. Pabo does not send your name, email address, advertising identifier, payment-card details, or simulated-order text to PostHog.

The same setting also sends app-lifecycle events (app installed, updated, opened, and moved to the background) and crash reports. A crash report contains the error type, error message, and code stack trace, plus the app and device information above; it does not include anything you typed or your simulated orders.

Analytics are hosted in PostHog’s EU region. GeoIP enrichment, session replay, automatic touch capture, console-log capture, and advertising tracking are disabled. You can stop future analytics and crash reports at any time in Pabo under Settings > Privacy by turning off “Share anonymous usage data.” Turning analytics off does not automatically delete events already received by PostHog.

Subscriptions

Optional Pro subscriptions are processed by Apple through the App Store or by Google through Google Play, depending on your device. RevenueCat is initialized when the app starts, including for users who have not purchased a subscription, so Pabo can check entitlement status, display plans, validate purchases, restore access, and help prevent fraud. RevenueCat receives a randomly generated, persistent App User ID that Pabo does not associate with an account, name, or email; product and entitlement information; purchase and subscription status; store transaction, receipt, or purchase-token data; and basic app, device, storefront, and locale information. Apple or Google processes your payment details under its own privacy policy; Pabo and RevenueCat do not receive your full payment-card details.

Notifications

If you opt in, the app schedules local notifications on your device: a delivery alert when an order arrives, and short morning notes about your pretend wallet after you last used the app (for example, that a fresh daily amount landed or that your wallet is full), never more than one per morning. These are generated on-device; no notification content is sent to a server. If analytics are on, Pabo records whether you allowed notifications and when you open one, along with which kind it was, but not its text. You can turn notifications off in Pabo under Settings > Notifications or in your device settings.

How we use and share data

We use the information described above only to operate subscriptions, provide app functionality, measure product usage, diagnose problems, prevent fraud, and improve Pabo. PostHog and RevenueCat process data as service providers on our behalf. Apple and Google process store and billing data under their own terms. We do not sell personal data, show third-party advertising, or track you across other companies’ apps or websites.

Retention and security

Local app data remains on your device until you delete it or the app. Analytics and subscription records are retained only as long as reasonably needed for the purposes above, legal obligations, fraud prevention, and dispute resolution, subject to the retention practices of PostHog, RevenueCat, Apple, and Google. Data sent to these services is encrypted in transit.

Children

Pabo is not directed to children under 13 and we do not knowingly collect data from them.

Your choices

You can disable future analytics in Pabo’s Privacy settings and clear locally stored data by deleting the app. You can manage or cancel a subscription in your App Store or Google Play account. To ask about access, deletion, or other privacy rights for data we control, contact us using the address below. We may need information such as your anonymous app user ID to locate subscription records. See Delete Your Pabo Data for request steps, the data covered, and applicable retention.

Contact

Questions? Email tomerlir95@gmail.com.