Pukuku
Join the pilot
Privacy › How to check us

Don’t take our word for it. Check.

We say your days stay on your phone. Here are five ways to see it for yourself, with no expertise and without asking us.

No trackers and no ads No account, no Pukuku server No analytics or crash service in the app

These checks are for Pukuku from Google Play, which is on its way. Until it is there, there is only the pilot version for invited testers. It also contains Firebase from Google for the optional upload, crash reports and updates, so in check 3 it can also connect to Firebase.

1A week, no extra effort

A week offline

  1. Turn off Wi-Fi and mobile data, leave location on.
  2. Go to work as usual.
  3. In the evening, look at Today and Week.
What you should see

Pukuku still records your days. It needs no server to work them out.

21 minute

Look at the data usage

  1. Android settings › Apps › Pukuku.
  2. Open the data usage (on many phones “Mobile data & Wi-Fi”).
What you should see

Almost nothing. A little traffic only on days you opened the map in Places: those are the map pictures.

310 minutes

Listen in with PCAPdroid

  1. Install PCAPdroid from Google Play (free, no root needed).
  2. Start a capture for Pukuku only.
  3. Leave it running for a day, and open the map in Places once.
What you should see

Only tile.openstreetmap.org, and only while the map was open. No other connection.

41 minute

Read the Exodus report

  1. Open reports.exodus-privacy.eu.org in your browser.
  2. Search for app.pukuku there.
What you should see

0 trackers, and the permissions Pukuku asks you for.

52 minutes

Check the dashboard

  1. Open pukuku.app/app, then the developer tools (F12) › Network.
  2. Move your days over from your phone with the QR code.
What you should see

No request to any other server. The page’s security header only allows connections to pukuku.app itself, and nothing there accepts data.

With every version

Our build stops as soon as a tracker library or an unknown web address gets into the app. The check runs on every change, before anything reaches you.

To be honest

What you can’t check yourself

The source code isn’t open. That’s why the checks above: they measure what the app really does, not what we say.

Google Play services. Your phone provides location, geofences and activity through Google Play services. Their connections are listed under Google Play services, not under Pukuku, and belong to your phone, not to us.

Android’s backup. If backup is on, Android copies Pukuku’s data, end-to-end encrypted with your screen lock. That traffic is Android’s, not Pukuku’s. Without a screen lock Pukuku isn’t backed up at all.

Buying Pukuku Pro. A purchase runs through the Google Play app, not through Pukuku, and its connections are listed there. Pukuku only asks Google Play on your phone whether you own Pro.

The pilot version is a separate app with the upload, only for invited testers. The version on Google Play doesn’t contain it.