Privacy Policy

Effective 28 September 2026 · Applies to the Pocket application and this website

Plain-English summary: Pocket is local-first software. Your financial data lives in a database on your own device — we have no server that stores it, no account system, and no way to see it. The only personal data we ever hold is the email address you send us (for early access, support, or a purchase receipt). This website sets no cookies and runs no analytics.

1. Who we are

Pocket ("we", "us") is an independent, India-based software product. This policy covers the Pocket desktop application, its companion phone experience served from your own device, and the website you are reading. Contact for anything privacy-related: the email address on our Contact page (the address is being replaced; the new one will be published there).

2. The Pocket application

Pocket stores all of your financial information — transactions, holdings, goals, documents, settings — in a local database on your device. By default, nothing is uploaded anywhere. Specifically:

No account is required to use the app, and none exists. We cannot log into your data, reset it, or read it.
No telemetry, analytics or crash reporting is built into the app. We do not know how you use it — or whether you use it at all.
Optional market prices: if enabled, the app requests current prices from public market data feeds. Those requests contain instrument identifiers (for example, a ticker symbol) — never your name, holdings quantities, or any account information.
Optional backup & sync: you may point Pocket at a folder you choose (including a folder synced by your own cloud provider). Backups are encrypted on your device before they are written. Your cloud provider's own privacy terms apply to anything you store with them.
Optional hosted AI: the app's built-in intelligence runs on your device. If a hosted AI feature is offered and you explicitly enable it, the specific data sent will be described at the point you switch it on — it is off by default.
Document vault: vault files are encrypted on your device with a passphrase only you know. We never receive the files or the passphrase, which also means a lost passphrase cannot be recovered by anyone — including us.

Deleting the app's data folder (or using the in-app delete tools) permanently removes your data. You can export everything to CSV at any time, on every plan, forever.

3. This website

The site is static. It sets no cookies, runs no analytics, and contains no advertising or tracking pixels.
It is hosted on GitHub Pages, so GitHub may process your IP address in server logs as part of operating the hosting service (see GitHub's privacy statement).
Fonts are served from this site; no request goes to a font service.

4. Email, early access and purchases

If you email us, we receive your address and whatever you write. We use it to reply, send you the early-access build or a license key you asked for, and nothing else.
Purchases are handled by a third-party payment processor. The processor — not us — collects and stores your payment details under its own privacy policy. We receive the order confirmation and the purchase email address, which we use to issue and later recover your license key.
We do not sell, rent, or share your email with anyone, and we do not send marketing you did not ask for.

5. What we retain, and your rights

We keep purchase emails and support correspondence only as long as needed to provide license recovery and support, and for legal record-keeping. You may email us at any time to ask what we hold about you (it will be little), to correct it, or to have it deleted — noting that deleting a purchase record also removes our ability to recover your license key later.

6. Children

Pocket and this website are not directed at children under 18.

7. Changes

If this policy changes, the new version will be published here with an updated effective date. Material changes will be noted on the download page.

8. Contact

Write to the email address published on our Contact page.