Access
You can download a readable copy in Settings. That copy is decrypted on your device. You can also download the encrypted copy the server holds. You can delete the account in Settings with your passkey, or by emailing privacy@pockit.money from the verified address. We send a confirm link before anything is removed.
We can read the contact email, subscription status, and help messages. We cannot read budgets, Pockits, goals, or net worth figures. Support does not include opening your numbers. Do not put balances, transactions, or account numbers in a help message.
Encryption
Numbers you type are encrypted on the device with XChaCha20-Poly1305 before they are stored. The data key is wrapped to your passkey. The recovery kit is the data key written out for you to keep. It is never uploaded. Lose the passkey and the kit, and the ciphertext cannot be opened. That is the point.
Transport is HTTPS. Encryption at rest on Cloudflare is in addition to the encryption you do, not a replacement for it.
Sign-in
There is no password. You create a passkey. The contact email is for help and deletion, not for logging in. The recovery kit is the only way to attach a new passkey if the old one is gone.
Banks
Bank linking uses Plaid. Plaid sees the bank credentials because the bank connection requires it. Pockit does not see or store your bank password. After a sync, transactions and balances are sealed to your public key. The Plaid access token is encrypted with a server key. An operator who has that server key could ask Plaid for the data again. We say that here so the claim is not larger than the system.
Retention
Deleting the account removes the user, the passkey, the encrypted records, and the bank link. Canceling a store subscription is separate: Apple and Google bill those, and you cancel them in the store. Web billing is Stripe, and deletion on the web is the place to stop that subscription as well when billing is configured. Payment processors may keep the records their own rules require.
Infrastructure
The site, the API, the database, file storage, and email run on Cloudflare. Cloudflare publishes its own security reports. Pockit does not claim those certifications as its own, and Pockit has not completed a public penetration-test program. The protection we do rely on for your budgets is the encryption on your device, not a badge on a host.
What stays in Pockit
We do not sell personal information. We do not use your spending, balances, or goals for ads. We do not use them to train a model. The purchases inside a Pockit do not become an ad audience.
Questions
help@pockit.money for support. privacy@pockit.money for privacy, export, or deletion.