Your data is yours. Always has been.
Pocket is built with a privacy-first architecture that keeps your financial life completely under your control.
- Local-first
- Your data lives on your device, not on our servers.
- No cloud required
- Works offline. Optional online services (market prices, your own backup folder) are strictly opt-in.
- No tracking. No ads.
- We don't track you. We don't profile you. We don't sell your data.
- Strong security
- Vault & backups use AES-256-GCM with keys derived from your passphrase; TLS secures optional price updates.
The Pocket difference
Most apps put your data in the cloud. Pocket keeps it where it belongs — with you.
| Question | Most finance apps | |
|---|---|---|
| Where data lives | Cloud servers | Your device only |
| Internet required | Always required | Never (live prices are optional) |
| Who can see it | Company access | You only |
| Tracking & profiling | Tracking & profiling | No |
| Data monetization | Data monetization | No |
| Works offline | Rarely works offline | Yes |
| You own your data | They own it | Yes |
Privacy isn't a feature. It's our foundation.
There are no Pocket servers. Nothing leaves your device by default, and never quietly: live prices, encrypted sync and hosted AI happen only if you switch them on, and go only where you send them.
Built on a privacy-first architecture
Your device
All data is stored locally on your device. You are in control.
Encrypted vault and backups
Vault files and backups are sealed with AES-256-GCM, using keys derived from your passphrase.
No cloud by default
No Pocket servers and no Pocket cloud. Nothing leaves your device unless you switch something on. Privacy by design.
Optional sync
Choose to sync with your own encrypted cloud provider. You decide.
You own your data
Export. Backup. Restore. Your data, your lifetime. Always yours.
You're always in control
- Export your data anytime
- Backup to your own cloud
- Delete everything instantly
- No lock-in. Ever.
Security under the hood
Read the full security architecture — what is encrypted, how, and what is not →
- AES-256 encryption
- Vault files & backups sealed with scrypt-derived keys (AES-256-GCM).
- Local database
- Your database lives on your device and is never uploaded to Pocket. If you switch on encrypted sync, an encrypted copy goes only to the folder you choose. Add OS disk encryption (BitLocker) for at-rest protection.
- App lock
- Protect Pocket with Windows Hello, fingerprint or PIN — an in-app lock for the screen, not a replacement for disk encryption.
- Secure backups
- Encrypted backups that only you can access and restore.
- No third-party trackers
- We don't use analytics SDKs, trackers or advertising.
- Honest by design
- Real numbers, clear assumptions, no dark patterns.
Data stays on your device
Pocket is local-first. Your financial life never leaves your device unless you choose to export, sync or back up, or switch on live prices or hosted AI. Windows today, with macOS and Android in internal testing.
“We built Pocket because we believe privacy is a fundamental right — not a premium feature. Your trust is our most valuable asset.”
Current security limitations — read before relying on Pocket
Early access means honesty about what is not finished yet. The full detail lives in the security architecture.
- The main database is not yet encrypted at rest by Pocket. It stays on your device; enable BitLocker / Windows Device Encryption. App-level encryption is scheduled on the roadmap (Q4 2026); the mobile apps now in internal testing already encrypt their database at rest.
- The early-access installer is not yet code-signed. Only run a build received directly from us; we confirm SHA-256 checksums by email.
- No independent security audit has been completed yet. One is planned before wide release; results will be published.
- Backups are your responsibility. Pocket copies your database before every risky change and can restore one, and Founder Pro encrypts a backup for the cloud folder you choose. A local backup is a plain copy of a plain database, so protect your device like the vault it is.
Your financial life. Your data. Your rules.
Runs locally. Works offline. Local-first, no cloud required, no tracking and no ads. Built for India, designed for the world — for people who value privacy and clarity.