Who operates Poimio
Poimio is a personal course project operated by Joni Mertoniemi, the data controller. It recommends links to Finnish and English articles and videos based on your feedback. For privacy questions or requests, email privacy@poimio.cc.
Information we process
- Account information supplied through Google sign-in, including your email address, name, profile image URL where supplied, and account identifiers. Supabase Auth stores authentication and session information. Poimio does not receive your Google password or request access to Gmail, Drive, or your contacts.
- Your feedback: items you like, mark as not interested, or mark as seen, together with timestamps and whether you used a button or swipe. This information is associated with your account.
- Technical information needed to deliver and secure the service, such as IP addresses, browser information, and request or authentication logs processed by our hosting providers.
- Information you send us when contacting us about the service or exercising your privacy rights.
How and why we use information
We use account information to sign you in and keep your feedback separate from other users. We use feedback to personalise your feed, hide rated items, and show your liked items. Recommendations are automated, but do not make decisions with legal or similarly significant effects. Your feedback is not shared with other users.
Our legal basis for account and recommendation processing is providing the service you request (performance of a contract). Security, troubleshooting, and handling enquiries rely on our legitimate interests in maintaining and protecting the service. We do not sell your personal information or use it for advertising.
Service providers and external content
Google handles Google sign-in. Supabase provides authentication and database storage, and Vercel hosts the application. These providers process information needed to perform their respective services.
OpenAI processes public feed titles and descriptions to create numerical representations used for recommendations. Poimio does not send your Google account information or personal feedback to OpenAI. Recommendation comparisons run in the database.
Thumbnails may load directly from external publishers or image hosts, which receive your IP address and browser request information. Opening an article or video takes you to another website, whose own privacy policy applies.
Providers may process information outside your country, including outside the European Economic Area. Their privacy documentation describes their processing locations and international-transfer safeguards: Google, Supabase, Vercel, and OpenAI.
Cookies
Poimio uses necessary authentication cookies to maintain your session. It does not use advertising cookies or install analytics trackers. Google and websites you visit through external links may use their own cookies under their own policies.
Retention and deletion
We keep your account and feedback until you request deletion. To request deletion, email privacy@poimio.cc, preferably from the address associated with your account. We may need to verify your identity before acting. Account deletion also removes the associated feedback from the active database. Provider logs and backup copies may remain for their applicable retention periods or where legally required; deletion is not a promise of immediate removal from all backups. Public feed content is not deleted with your account.
Your rights
Where applicable under data-protection law, you may request access, correction, deletion, restriction, or a portable copy of your personal information, and object to processing based on legitimate interests. Contact privacy@poimio.cc to exercise these rights. You may also lodge a complaint with your local data-protection authority. Removing Poimio from your Google account connections revokes Google access, but does not by itself delete information already stored in Poimio.
Changes to this policy
We will update this page when our data handling changes and revise the date above. Material changes will be brought to users' attention within the service.