Your records live on your phone
No sign-up and no bank login. We can’t see your entries, notes or receipt photos.
Privacy policy
What Pockabee knows, where it lives and who else ever sees it.
Last updated 1 November 2026Mostly? Nobody but you.
The short version
Two things are your call
Cloud backup and AI reports are both off until you turn them on.
Our server knows very little
A random ID, your subscription status and AI usage. No name, no email, no records.
Nothing to sell
No ads, no ad or analytics trackers, and we don’t sell your data.
Jump to a section
1
Who we are
In this policy, “we” and “us” mean the team behind Pockabee. We’re responsible for the personal data described here that reaches our server and this website.
This policy covers the Pockabee apps for iPhone and Android, the small server behind Premium, and this website. Pockabee is still in testing, so for now you can reach us through the channel your test invite came from. We’ll add our full legal name, address and a contact email here before public launch.
2
Your data at a glance
| What | Where it lives | Who can read it | How long |
|---|---|---|---|
| Records, notes and receipt photos | Your phone | You, and anyone with access to your unlocked phone | Until you delete them or the app |
| System backup, if your phone does one | Your Apple or Google account, or your computer | Controlled by you and that provider | Set by your device and provider |
| Cloud backup, if you turn it on | A hidden folder in your own Google Drive or iCloud | You and that provider’s systems, not us | Until you delete it |
| AI summary, if you ask for a report | Passes through our server to Anthropic | Our server while it works, and Anthropic | We don’t store it. See section 6 for Anthropic |
| Finished AI report, sealed | Our server | Your phone holds the key. Our stored copy can’t be read alone | Up to 35 days |
| Random ID, subscription status, AI usage | Our server | Us | See section 7 |
3
What stays on your phone
In plain wordsEverything you write down stays with you. We have no copy, so we can’t read it, and we can’t get it back for you either.
The app stores your accounts, balances, entries, items, categories, budgets, bills, debts, goals, notes, nickname, avatar, saved AI reports and settings in its private storage on your device.
- Receipt photos. Photos you attach are kept in the app’s private storage and read on your phone. The details it picks out (such as shop, date, taxes and total) stay with the photo. They aren’t included in Pockabee’s exports, cloud backups or AI summaries.
- Camera and photos. The app asks for access only when you choose to attach a receipt.
- Face ID or fingerprint. Your phone checks these for app lock. The app only gets a yes or no, and never sees your face or fingerprint.
- Notifications. Reminders are scheduled on your phone and don’t show names or amounts.
- Rating and upgrade prompts. The app counts entries and active days on your phone to decide when to ask. It doesn’t send those counts to us.
A plain note about protection. Your records rely on your phone’s own security and the app’s private storage. The app doesn’t add its own encryption to its database. App lock controls who can open the app, but it isn’t encryption. A strong screen lock on your phone matters.
4
Your phone’s own backups
In plain wordsYour phone may back itself up without Pockabee being involved, and that backup can include what’s in the app, receipt photos too.
Android Auto Backup, device-to-device transfer, iCloud device backups and computer backups are run by your phone’s operating system, separately from the Cloud backup feature below. Depending on your device and settings, they can include the app’s records and receipt photos.
These backups belong to your Apple or Google account or your computer, under that provider’s terms. We don’t receive them and can’t read them. You control them in your phone’s settings.
5
Cloud backup (optional)
In plain wordsIf you switch this on, a copy of your records goes to your own cloud account. It never comes to us.
Cloud backup is off until you connect it, and it’s free. Where iCloud is offered, it uses a private app container in your Apple account. On Google Drive it uses a hidden app folder, with permission limited to that folder (the drive.appdata scope), so the app can’t see your other Drive files.
- What’s included: your records and settings. Receipt photos aren’t included.
- Protection: your cloud account protects the backup, but the app doesn’t encrypt the file itself.
- On your phone: your Google email is kept on the device, just to show where backups go. We don’t receive it.
- Timing: if you leave automatic backups on, the app asks your phone to back up each evening. Your phone picks the exact time.
- Stopping: “Stop backing up” leaves the existing backup in your cloud. “Delete backup” removes it.
Pockabee’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use Drive access only to save and restore your backups.
6
AI reports (optional, Premium)
In plain wordsWhen you ask for a report, a summary goes to an AI company to write the words. Anything you type into the budget planner goes too, so type only what you’re happy to share.
The app asks for your agreement before the first request, and only generates a report when you tap to ask for one. The summary travels through our server to our AI provider, Anthropic.
What’s sent for weekly and monthly reports
- Your main currency and the report period, language, number of entries and days of history
- Income, spending and category names with their totals
- Budget use and savings goals
- Figures your phone works out, such as unusual spending, possible savings and financial health
Also sent for the budget planner
- Your income and how often you get it
- Names and amounts of your fixed bills
- Debts: the name you gave them, the amount left, payments and due dates
- Your priorities, and anything you type in your request (up to 1,000 characters). If you mention family, health or diet, or names, that goes too
What’s never sent
Individual entries, descriptions or notes on entries, account names, merchants, receipts, your nickname and your records’ local IDs. Names you’ve given categories, bills, goals and debts are part of the summary, so they can reveal something if you wrote it into them.
What happens to it
- Our server handles the summary and the answer while it works, and doesn’t store your summaries, prompts or readable answers. It keeps a sealed copy of the answer for up to 35 days so a dropped connection doesn’t lose your report. That copy is encrypted (AES-256-GCM) with a key your phone creates and doesn’t keep on our server. Our server has the key only while it’s handling that request.
- Anthropic processes the request under its own terms and may keep it for a limited time, for example to monitor for abuse.
- Your phone keeps the finished report, and your cloud backup includes it if you use one.
To stop, tap “Stop sending summaries” in the AI insights screen. Nothing more is sent. Reports explain your own records and aren’t financial, tax or investment advice.
7
What our server keeps
In plain wordsThe server knows a random ID, not you. That ID still counts as personal data, since it can link to a store purchase, so we treat it that way.
You only reach our server if you buy Premium, restore a purchase or use AI reports. There’s no email or password. The first time, the app creates a random account ID and a device secret, and the server stores only a hash of that secret.
| Data | Why | How long |
|---|---|---|
| Account ID, device IDs, device secret hash, platform, first and last seen times | To recognise your device and limit how many share an account (up to 5) | While the account is in use, until it’s no longer needed or you ask us to delete it |
| Subscription details: product, status, renewal and expiry dates, store country, price and currency, store transaction ID or purchase token | To confirm Premium with Apple or Google, and handle renewals and refunds | As long as needed for the subscription and our legal, tax and fraud duties |
| AI usage: feature, period, status, token counts, cost, provider and model, a hash of the request | Allowances, cost limits and preventing repeat charges | As long as needed for allowances and cost records, or until you ask us to delete it |
| Sealed AI answers | To recover a report if the connection drops | Up to 35 days |
| Store notifications and abuse flags | To process store events and stop abuse | About 90 days |
| IP address and technical request data | Delivering traffic, rate limits and security, through Cloudflare and our server | Not stored in our database. Our logs record the route, status, counts and pseudonymous IDs, not your IP address or the content of your requests. Cloudflare handles traffic data under its own terms |
8
Purchases
Apple or Google handles every payment. We never receive your card details or your store account’s email address. They send us signed proof of a purchase and its status, which we check against their systems. Their own privacy policies cover what they collect.
9
Who else is involved
In plain wordsA short list, and each one has a specific job. We don’t sell your data or use it for advertising.
- Cloudflare runs our server, database and network.
- Apple and Google run the app stores and subscriptions, and your cloud backup if you turn it on.
- Anthropic, our AI provider, writes AI reports you ask for.
The app has no advertising, analytics or crash-reporting SDKs. Apple and Google may separately give developers crash and usage statistics, depending on your device’s sharing settings.
We may also disclose data if the law requires it, to protect people or our rights, or as part of a sale or transfer of Pockabee. This policy, or one that protects you just as well, would still apply after a transfer.
10
This website
This site has no cookies, analytics or third-party scripts, and its fonts are served from here. Your browser remembers your theme choice in local storage, and it never leaves your browser. The “try it” phone in the hero runs only in your browser, and what you enter disappears when you leave the page.
Our website host, like any web server, processes technical data such as your IP address and browser type to deliver pages and keep the site secure.
11
Legal bases and international transfers
Where data protection laws require a legal basis, we rely on:
- Contract for Premium: recognising your device, checking your subscription and providing what you bought.
- Consent for sending AI summaries and for connecting cloud backup. You can withdraw it at any time.
- Legitimate interests for security, abuse prevention, cost control and keeping the service running.
- Legal obligation for tax, accounting and lawful requests.
Cloudflare, Apple, Google and Anthropic may process data in countries other than yours, including the United States. Those countries’ laws may differ from yours. Where the law requires it, we rely on appropriate safeguards for these transfers.
12
Your choices and rights
In plain wordsMost of it is in your hands, in the app. Erasing your phone, your cloud copy and your server ID are three separate steps.
| You want to | Here’s how |
|---|---|
| Take a copy of your records | Export a spreadsheet (CSV) from Settings. It’s always free, even after Premium ends |
| Erase your phone’s data | Settings → Privacy & data → Erase all data. This doesn’t touch backups in your cloud or your server account |
| Delete your cloud backup | In the app’s Backup settings, tap Delete backup. Uninstalling the app doesn’t do this |
| Stop AI reports | Tap “Stop sending summaries” in AI insights |
| Cancel Premium | In your App Store or Google Play account. Deleting the app doesn’t cancel it |
| Delete your server account | There’s no button for this yet, so please contact us (see section 16). Your account has no name or email, so please include your platform and the store order or transaction ID so we can find it. Apple and Google keep their own purchase records |
Depending on where you live, you may have the right to access, correct, delete, restrict or move your personal data, to object to how we use it, and to withdraw consent. Contact us to use these rights. We can only act on data we can link to you, and we’ll answer within the time the law requires.
You can also complain to your local data protection authority, such as the Data Protection Commission in Ghana or the supervisory authority in your EU or UK country.
13
Security
We keep what reaches our server small. Connections use HTTPS, purchases are verified with Apple and Google, service credentials stay on the server, and logs avoid request content. No system is perfectly secure, though, and we can’t promise yours or ours will never be compromised. If a breach affects your personal data, we’ll notify you and the authorities when the law requires it.
14
Children
Pockabee isn’t directed at children under 13, or under the higher minimum age for digital consent where you live. If you believe a child has sent us personal data through the app, contact us and we’ll delete it.
15
Changes to this policy
When the app’s handling of data changes, we’ll update this page and the date at the top. If a change is significant, we’ll also tell you in the app before it applies. We’ll ask for your agreement again if the law or the change calls for it.
16
Contact
During testing, please send questions, requests or complaints through the channel your test invite came from.
You read the whole thing!
Almost nobody does. Pockabee is deeply impressed. Next up, the terms of use, if you’re on a roll.