Pockit Money (“Pockit,” “we”) provides a budgeting app at pockit.money. The contact email on an account is for help and deletion. It is not a password and it is not a login.
1. Information we collect
Account information: the contact email you type, whether it has been confirmed, a passkey credential (a public key and sign-in counter, not a password), subscription status, and the trial end date.
Financial information you type: budgets, Pockits, recurring bills, goals, and net worth accounts. These are encrypted on your device before they are uploaded. We store ciphertext. We do not have the key that opens it. A recovery kit generated on your device is shown once and is not uploaded.
Bank information: if you connect a bank, Plaid receives the bank login because that is how the connection works. Pockit receives transactions and balances from Plaid, seals them to your public key, and does not keep the plaintext of those payloads. The Plaid access token is encrypted at rest with a server key. Someone who holds that server key and can call Plaid could request the bank data again.
Messages: help requests and deletion emails. Do not include balances, transactions, or account numbers. The form rejects long runs of digits.
Technical information: standard request logs from Cloudflare, such as IP address and a request path, used to operate and secure the service. We do not run a third-party advertising pixel on this site.
2. How we use it
We use the contact email to confirm the address, answer help, and process deletion or export when you no longer have the device. We use subscription status to decide whether editing and bank linking stay available. We use passkey credentials to sign you in. We use encrypted records only as storage. We cannot use the contents of a budget, a Pockit, or a net worth figure, because we cannot read them.
3. Cookies and similar technologies
The marketing site stores a theme choice in local storage on your device. The app stores a session token in the browser’s session storage, or in the device secure store on iOS and Android. We do not use advertising cookies.
4. Advertising
We do not sell personal information. We do not use budgets, transactions, balances, or goals to target ads or to train a model. We do not share those records with an advertising network.
5. How we disclose information
We disclose information to the companies listed on the subprocessors page so the product can run: Cloudflare for hosting, storage, and email; Plaid when you connect a bank; Stripe for web subscriptions; Apple or Google for store subscriptions and device passkeys.
We may disclose information if the law requires it. A legal demand can reach the contact email, subscription status, and ciphertext. It cannot produce the decrypted budget unless you, or someone with your passkey and data key, decrypts it.
6. How we protect information
Typed financial records are encrypted with XChaCha20-Poly1305 before upload. The data key is wrapped to the passkey. Transport uses HTTPS. Bank access tokens are encrypted with a server key. The practical limits of that design are described on the privacy and security page. No online service can promise that a breach is impossible.
7. Retention
We keep the account until you delete it. Deletion removes the user, passkeys, sessions, encrypted records, and bank links. Stripe, Apple, or Google may keep subscription records they are required to keep. A lost passkey without the recovery kit means the encrypted records cannot be restored. That is intentional.
8. Children
Pockit Money is not for anyone under 18. We do not knowingly collect information from children.
9. Your rights and choices
In Settings, with your passkey, you can download a decrypted copy on your device or an encrypted copy from the server, and you can delete the account. If the device is gone, email privacy@pockit.money from the verified address. We reply with a confirm link. Someone who can read that inbox can delete the account. They still cannot read the budgets or net worth.
Depending on where you live, you may have rights to access, correct, or delete personal information we can actually read, which is the contact email, subscription status, and help messages. Encrypted records are returned as ciphertext unless you decrypt them yourself.
10. California residents
We do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are used in the California Consumer Privacy Act. To make a request, email privacy@pockit.money.
11. Changes
If this policy changes, the date at the top of the page changes with it. Continued use of the service after the new date means the updated policy applies.
12. Contact
Help: help@pockit.money. Privacy, export, and deletion: privacy@pockit.money.