Privacy Policy

Last updated: 19 September 2026

1. Who is responsible

The controller of any personal data described here is WEB rješenja d.o.o., Croatia (“we”, “us”), publisher of the Pocketlyne mobile application.

Privacy questions and requests: hello@ws.agency.

2. How Pocketlyne works, and why that matters here

Pocketlyne is a client for Outline. You supply the address of an Outline instance and an API token for it. The app then communicates directly with that instance. There is no Pocketlyne backend in between, so your documents, collections, comments, search queries and attachments are never sent to us and never stored by us.

The operator of the Outline instance you connect to is a separate controller of whatever is stored there. Their privacy policy governs that data, not this one. If the instance is run by your employer or a service such as Outline’s own cloud, direct questions about your documents to them.

3. What is stored on your device

All of the following stays on your phone and is never transmitted to us:

Instance address and API token

Kept in the operating system’s secure storage — Keychain on iOS, Keystore on Android — so that the app can reach your instance without asking you to sign in every time.

Cached documents and collections

A local database holds the content you have opened, so the app works offline. It contains whatever you have read in the app.

App preferences

Settings such as theme, starred items, and your last-opened document.

Signing out clears the stored token and the cache. Deleting the app removes all of it from the device.

4. What leaves your device, and to whom

4.1 Your Outline instance

Requests carrying your API token go to the address you entered, over HTTPS. What that instance logs is up to its operator.

4.2 Purchases — Apple, Google and RevenueCat

Pocketlyne Pro is sold through the App Store and Google Play. Payment is processed entirely by Apple or Google; we never see your card details, billing address or name.

We use RevenueCat, Inc. as a processor to check whether a subscription is active. Pocketlyne does not create a user account with RevenueCat and never sends it your email address, your name, or anything about your Outline instance. It uses an anonymous, randomly generated identifier together with the store receipt. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

4.3 Crash reports — Sentry

If crash reporting is enabled in a given release, a crash sends a technical report to Functional Software, Inc. (Sentry) as a processor. Personally identifiable information is switched off in our configuration, and reports are filtered before sending. A report contains the device model, operating system version, app version and the technical stack trace — not your documents, not your token, and not your instance address. Legal basis: our legitimate interest in a working app (Art. 6(1)(f) GDPR).

4.4 Nothing else

There is no analytics SDK, no advertising SDK, no attribution or fingerprinting library, and no social-network integration in Pocketlyne. We do not build profiles, we do not make automated decisions about you, and we do not sell or share personal data with anyone for any purpose.

5. International transfers

RevenueCat and Sentry are established in the United States and may process the limited data above there. Transfers rely on the European Commission’s Standard Contractual Clauses agreed with each provider.

6. Retention

We hold no database of users, so there is nothing for us to retain. Data on your device lasts until you sign out or delete the app. Crash reports are retained by Sentry for a limited period under its own schedule; subscription records are kept by Apple, Google and RevenueCat for as long as needed to run and account for the subscription.

7. Your rights

Under the GDPR you may request access to your personal data, and its rectification, erasure, restriction or portability, and you may object to processing based on legitimate interest. Write to hello@ws.agency and we will respond within one month.

Because we operate no account system, we usually cannot identify you from an email alone. In practice, the fastest way to exercise erasure over the data Pocketlyne holds is to sign out and delete the app, which removes it entirely.

You also have the right to lodge a complaint with a supervisory authority. In Croatia this is the Personal Data Protection Agency (AZOP), azop@azop.hr, azop.hr.

8. Children

Pocketlyne is a tool for working with a team wiki and is not directed at children. We do not knowingly collect personal data from anyone under 16.

9. Changes to this policy

If this policy changes we will update the date at the top of this page. Material changes will also be noted in the app’s release notes.

10. Contact

WEB rješenja d.o.o., Croatia — hello@ws.agency