Privacy Policy

At a glance

• Pocket reads your bank accounts so you can see and plan your money. Access is read only. Pocket cannot move money, and your bank login never passes through Pocket.
• We use your financial data for one purpose: running Pocket for you. We never sell it, and we never share your account, balance or transaction data with anyone for advertising.
• We do not send your name or email to advertising platforms, and we use no analytics or advertising trackers in the apps or on the web app today. If that changes, we will ask you first.
• If you share a household, your partner sees the accounts, transactions, pockets and budgets of the household, except the transactions and pockets you mark private.
• Your data is stored in the EU (Frankfurt). Some service providers are in the US; we protect those transfers as described below.
• You can delete your account in the app at any time. Your data is deleted straight away and leaves our backups within 30 days.
• Questions and requests: hello@joinpocket.app. You can also complain to the Croatian or Irish data protection authority.

1. What we collect, why, and how long we keep it

In short: Everything below is either needed to run Pocket, something you chose to add, or needed to keep Pocket secure and billed. Each item says why we have it, the legal basis for having it, and when it goes.

Your account. Your email address, your name if you give one, and your password, stored only as a secure hash. If you sign in with Apple or Google, we receive the email and name they share. Why: to create and protect your account and to send you emails about it. Basis: our contract with you. Kept: until you delete your account.

Your bank data. When you connect a bank, we receive, through Salt Edge (see section 3), the accounts you selected: account names and numbers (IBANs), the account holder name where your bank provides it, balances, and transactions with their dates, amounts, descriptions, counterparty names and account numbers, and merchant details. We import up to 24 months of history and then new transactions for as long as your connection is active. Why: this is what Pocket is for, and every feature runs on it. Basis: our contract with you. Kept: until you delete your account, or until you disconnect the bank and ask us to remove that bank's data.

What you add. Categories, notes, labels, pockets, budgets, debts and their balances and rates, cash wallet entries, income, goals, receipt photos and a profile photo. Why: to give you the features you use. Basis: our contract with you. Kept: until you delete the item or your account.

Your household. If you invite a partner, the email address you invite, who joined, and which transactions and pockets each member marked private or assigned to the other. Why: to run the shared household. Basis: our contract with each member. Kept: until the household ends or you delete your account.

Your subscription. Whether you have Pocket Plus, which plan, where you bought it (App Store, Google Play or the web), its renewal date, and the identifiers Apple, Google or Stripe use for the purchase. Card and payment details stay with Apple, Google or Stripe; we never see them. Why: to know what you have paid for and to keep accounts. Basis: our contract with you, and accounting law for the payment record. Kept: subscription state until you delete your account; the payment record for as long as Croatian accounting law requires, up to 11 years.

Your devices and sessions. A push notification token and an app install identifier for each phone, its time zone, operating system and app version, and for each sign in the IP address and browser or device description. Why: to deliver notifications, keep you signed in and spot misuse. Basis: our contract with you and our legitimate interest in security. Kept: push records until you sign out or delete the app or your account; session records until the session ends or you delete your account.

Server logs. Our servers log each request with your user ID, the address requested (including any search term you typed in Pocket), the result and the timing. Why: to keep Pocket running and to fix problems. Basis: our legitimate interest in operating a reliable service. Kept: 30 days.

Emails we send you. A record of which emails we sent, whether they were delivered, and your email preferences. Why: so we can honour your preferences and not send the same thing twice. Basis: our contract with you. Kept: until you delete your account.

Support. If you email us, the emails and what we did about them. Why: to help you. Basis: our contract with you. Kept: two years after the conversation ends.

We do not collect your location, your contacts, or health data. Face ID and fingerprint unlock run on your phone; Pocket only learns whether the check passed. Pocket does not use advertising identifiers.

2. Sensitive things your transactions can reveal

In short: A pharmacy, a church, a union or a party membership can show up in a bank statement. We treat those lines like every other line: we show them to you, and that is all.

Transactions are financial data, and the law does not treat them as special category data. But single transactions can still reveal something sensitive about you, such as your health, religion, politics or union membership. We cannot filter those lines out before they reach us, and we do not try to recognise them. We use them only to show you, and anyone you choose to share a household with, your own finances. We never draw conclusions about you from them, never use them for advertising, and never send them to any advertising or analytics service. Because this data arrives as part of your bank feed, we ask for your explicit consent to receive it when you connect a bank. You can withdraw that consent at any time by disconnecting the bank.

3. How your bank connection works

In short: Salt Edge Limited makes the technical connection. A separately licensed account information provider, named on the consent screen, holds the regulatory permission. You approve access at your bank, not in Pocket.

When you connect a bank, the connection is made through Salt Edge Limited, 2nd Floor Amba House, 15 College Road, Harrow HA1 1BA, United Kingdom. The account information service itself is provided by a payment service provider authorised in the EU to provide account information services. That provider is named, with its authorisation details, on the consent screen you see before you connect. You authorise access on your bank's own page or app and give your consent on that screen, not in Pocket. Salt Edge and that provider act as separate controllers of your data under their own terms and privacy notices: Salt Edge terms and Salt Edge privacy policy. Pocket never sees or stores your online banking login details.

To set up the connection we send Salt Edge your verified email address and a Pocket user identifier. When you correct how a transaction is categorised, we send that correction back to Salt Edge, with the Salt Edge transaction reference and the category, so categorisation improves. We send Salt Edge nothing you type by hand, no cash wallet entries, and no notes.

You can disconnect a bank in Pocket at any time. We then stop receiving new data and ask Salt Edge to remove the connection. Your bank also lets you end the permission in its own app. The permission expires on its own after a period set by your bank and by law, and Pocket asks you to renew it. Renewing does not import your history again; the transactions you already have stay. You can also review or withdraw the consents you gave Salt Edge at saltedge.com/dashboard. For questions about Salt Edge's own processing, write to privacy@saltedge.com. If you send such a request to us, we pass it on.

4. What we never do with your data

In short: No selling, no advertising use, no money movement.

• We never sell your personal data. Our only income is the subscription.
• We never share your financial, account or transaction data with anyone for their or our advertising, and we never use it to build advertising audiences.
• We do not send your name, email address or any other identifier to advertising platforms such as Meta or Google. If we ever want to, we will ask you first with a separate choice you can decline, and this policy will describe exactly what would be shared.
• We do not use analytics or advertising trackers in the apps or in the web app. The only cookies and local storage we use keep you signed in and remember your settings. If we add product analytics, we will ask for your consent first, in the app and on the web.
• We cannot move money, and we never ask for your bank password.

5. Who receives your data

In short: Only the companies that run Pocket for us, each bound by contract to use your data only on our instructions, plus Salt Edge as described above, and the authorities when the law requires it.

These service providers process data on our behalf:

• Amazon Web Services, Frankfurt, Germany: servers, database, file storage for receipts and profile photos, and logs.
• RevenueCat (US): manages Pocket Plus subscriptions across the App Store, Google Play and the web. Receives your Pocket user ID and purchase history.
• Stripe and Link (US and Ireland): payment processing for subscriptions bought on the web. Receive your email address and payment details, which never reach us.
• Apple: App Store purchases, Sign in with Apple if you use it, and delivery of push notifications to iPhones.
• Google: Google Play purchases and Google sign in if you use them, and delivery of push notifications to Android phones.
• Expo (US): routes push notifications to Apple and Google and delivers app updates.
• Resend (US, sending from the EU): sends our emails to you.

Salt Edge Limited and the licensed account information provider named on the consent screen receive and share your bank data as separate controllers, as section 3 describes. Our exchange rate provider receives no personal data.

We disclose personal data to courts, regulators or law enforcement only when the law requires it, and we tell you unless the law forbids that. If Pocket is ever sold or merged, your data goes with it to the new operator under this same policy, and we tell you before that happens so you can delete your account first if you prefer.

Pocket has no staff screen that shows anyone's transactions. The founders can see operational records such as failed background jobs, which may contain fragments of personal data, and can see connection data in the Salt Edge dashboard. Access is limited to what running Pocket requires.

6. Sharing a household

In short: One household, two people, one shared picture. You decide what to mark private, and either of you can leave at any time.

A Pocket household has at most two members. Both members see all accounts connected to the household, all transactions, pockets, budgets, debts and recaps, including payee names and notes. You can mark a single transaction or a pocket private, and your partner will not see it. Accounts cannot be hidden: if you would rather your partner not see an account, do not connect it to a shared household.

When you invite someone, we send them your name and the invitation. When they join, their existing data merges into the household. Either member can leave at any time from Settings; the leaver takes their own bank connections, cash wallets and private pockets to a new household, and loses access to the other member's data immediately. Only connect a joint account if you are entitled to share its data.

If someone pays you or shares a household with you, but you do not use Pocket. Your name or account number can appear in a Pocket user's transactions as a counterparty, or in a joint account they connected. We process that data only to show the Pocket user their own finances, on the basis of our legitimate interest in providing the service, and never for anything else. We cannot contact you to tell you this individually, so this section is our notice to you. You can exercise the rights in section 10 against us.

7. Where your data goes outside the EU

In short: Your data lives in Frankfurt. A few providers are in the US, and each transfer is covered by the EU US Data Privacy Framework or the EU standard contractual clauses.

We store and process your data on Amazon Web Services in Frankfurt, Germany. RevenueCat, Stripe, Expo and Resend are US companies, and Apple and Google operate globally. Where your personal data leaves the EU, the transfer relies on the European Commission's adequacy decision for the EU US Data Privacy Framework for certified companies, and on the Commission's standard contractual clauses with each provider as a second safeguard. Salt Edge Limited is in the United Kingdom, which the Commission recognises as providing adequate protection. You can ask us for a copy of the safeguards.

8. How long we keep your data

In short: While you have an account. Delete it and the data goes straight away, and it leaves backups within 30 days. Only payment records stay longer, because accounting law says so.

• Everything in your account: deleted when you delete your account. Deletion runs straight away, and the data is gone from our backups within 30 days.
• Server logs: 30 days.
• Support emails: two years after the conversation ends.
• Subscription and payment records: as long as Croatian accounting law requires, up to 11 years, held by us and by the party that billed you.
• Bank data after a bank's permission expires: it stays in your account so your history is complete, until you disconnect the bank and ask us to remove it, or delete your account.

We do not delete inactive accounts automatically. If that changes, we will warn you by email well before anything is removed.

9. Deleting your account

In short: Settings, then Delete account, in the app or on the web. You sign in once more to confirm, and it is done.

Open Settings in the Pocket app or at https://dashboard.joinpocket.app and choose Delete account. You see what will be deleted, confirm it is you, and deletion starts immediately. We delete your data from our systems, ask Salt Edge to remove your bank connections and the consents behind them, ask RevenueCat and Stripe to remove your subscription record, revoke your Sign in with Apple token if you used one, and email you a confirmation. If you cannot sign in, or you have deleted the app, see how to request deletion by email.

Two things to know. If you pay through the App Store or Google Play, deleting your account does not cancel the subscription; cancel it in your phone's subscription settings first. If you share a household, your partner keeps the household and their own data; your bank connections, cash wallets and their transactions are deleted with your account, and anything you created in shared pockets stays, with your name replaced by "Former member".

10. Your rights

In short: See it, fix it, take it with you, delete it, or object. One email, one month.

You have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict how we use it, to object to processing based on our legitimate interests, and to receive the data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what happened before.

Most of this you can do yourself in Pocket: edit your details in Settings, disconnect banks, delete items, and delete your account. For anything else, email hello@joinpocket.app from the address on your account. We answer within one month, and we may ask you to confirm your identity first. There is no charge.

Pocket makes no decisions about you with legal or similarly serious effects. Categorisation and forecasts are calculations shown to you; you remain the one who decides.

11. Security

In short: Encrypted in transit and at rest, read only access to your bank, and your bank login never touches Pocket.

All traffic between your device and Pocket is encrypted (TLS). Data is encrypted at rest on our servers. Your bank login happens on your bank's own page or app, and the connection Pocket receives is read only. You can lock the app with Face ID or fingerprint. Access to our systems is limited to the people who run Pocket. No system is ever completely secure; if a breach ever affects your data, we will tell you and the authorities as the law requires.

12. Children

Pocket is for adults. You must be at least 18 to create an account. We do not knowingly collect data from anyone younger, and we delete it if we learn we have.

13. Changes to this policy

When we change this policy we update the date at the top and keep the history below. For changes that matter to you, we tell you in the app or by a dedicated email before they take effect.

• 12 October 2026: full rewrite. Company details completed; legal basis and retention for each kind of data; sections on sensitive inferences, the bank connection, households, transfers and deletion; one policy for the website and all apps.
• 8 October 2026: first published version.

14. Contact and complaints

Write to SinDev d.o.o., Braće Ružić 8, 51000 Rijeka, Croatia, or email hello@joinpocket.app.

Our lead supervisory authority is the Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, azop@azop.hr, +385 1 4609 000. If you live in Ireland you can also complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, www.dataprotection.ie. You can complain to the authority of any EU country where you live or work.