Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Your email address, and your name or nickname if you add one or your Google or Apple account shares it
• Monthly income and budget targets you enter manually
• Bill and expense information
• Accounts and balances you add by hand
• Receipts you photograph, attach in Atlas or forward by email
• Transactions you add yourself or approve when Atlas suggests one
• Email addresses of people you invite to your household
• Questions you ask Atlas, the AI assistant, typed or dictated
• Messages you send us through the feedback form or by email

1.2 Financial Data via Plaid and SnapTrade

• Plaid and SnapTrade retrieve account balances, transactions and investment holdings in read-only mode
• Pocket Check cannot move, transfer or trade funds
• We do not store bank or brokerage login credentials. That is handled securely by Plaid and SnapTrade
• Plaid is governed by their own Privacy Policy at plaid.com/legal
• SnapTrade is governed by its own Privacy Policy at snaptrade.com/privacy-policy

1.3 Device Information

• Device token for push notifications (if permission is granted)
• Error reports and performance data (such as device type, app version, what went wrong and how long a page took to load), used to fix bugs

1.4 Cookies

We use strictly necessary cookies to keep you signed in and to process payments. On our public website only, and only if you choose Allow on the cookie card, we also use analytics cookies (Google Analytics) and advertising cookies (Google Ads and Meta) to see how people find the site and whether our ads work. These never run inside the App after you sign in, and your financial data is never in them. You can change your choice at any time from Cookie settings in the website footer, and we honor the Global Privacy Control signal as a No. For details, see our Cookie Policy.

2. How We Use Your Information

• To show whether you are on track with your budget and whether you can afford a purchase
• To power Atlas, the AI assistant, with context about your finances
• To track budget targets and upcoming bills
• To send the reminders and alerts you control in Settings, such as trial reminders, bank reconnect alerts and reminders you ask Atlas to set
• To run your subscription, process payments and answer support requests
• To improve app performance and fix bugs

We do not use your financial data for advertising or profiling.

3. How We Store Your Information

Your account data, budget settings, bills, income sources, savings goals, transaction overrides, bank and card accounts with their balances and transactions, investment holdings, what we read from receipts you forward (the sender, subject line and receipt details, never the email body or its attachments), household settings, notification settings, reminders you ask Atlas to set, notifications we have sent you and net worth snapshots are stored in our Supabase Postgres database. Postgres row-level security lets you read and write only your own data. Other users cannot see your records, except what you choose to share with your household: your name, and each account you share (its balance, and its transactions if you share them too). We access the database with administrator credentials only to run the service, give support you ask for, fix problems, or when the law requires it. Plaid access tokens are stored in our database, encrypted with a key that only our backend server holds, and are used only to retrieve your account data. Your Atlas conversations are saved only on your device: in your browser’s local storage on the web, and in the app’s storage on iPhone. They are not stored on our servers. Starting a new chat moves the old one to History, where you can delete it. A receipt you photograph, pick from your photos, attach in Atlas or email to us is saved to your account so you can view it with the purchase. Receipt photos are stored privately and can be opened only by you and by a household member you have shared that account with in full. A photo is deleted when you remove it, when you delete the purchase, when you delete your account, or after seven years. To read a receipt, the photo is sent to our AI provider, which may not use it to train AI models. What was read from it (the merchant, date, total and how it was split) is saved with the transaction and, for a receipt attached in Atlas, in that conversation on your device. We do not sell or rent your personal or financial information. The only data that reaches an advertising company is the website visit data described under Cookies, and only if you allowed advertising cookies; California law calls that “sharing”, and you can opt out on our Your Privacy Choices page.

Voice input. If you dictate a question to Atlas, your browser or your phone’s keyboard turns your speech into text. Pocket Check receives only the text, which is handled like a typed question. We do not record, receive or keep audio. The maker of your browser or device (for example Google for Chrome, Apple for Safari and iPhone, or Microsoft for Edge) may process the audio under its own privacy policy; you can use the microphone permission in your browser or device settings to turn this off at any time.

To load quickly, the App also keeps a copy of your data on your device (your browser’s local storage on the web). It is tied to your account, so someone else who signs in on the same device does not see it. Clearing your browser data removes it.

Plaid End User Privacy Policy.By connecting your bank through Pocket Check, you agree to Plaid’s End User Privacy Policy, which governs how Plaid collects, uses, and shares the financial data it accesses on your behalf. Read it at plaid.com/legal/#end-user-privacy-policy.

Data retention. If your subscription ends or you cancel it, your data remains in your account in read-only mode, so you can see your history and pick up where you left off if you come back. We keep it until you delete it. Your bank connections stay linked, without syncing, until you disconnect them. You can disconnect a bank, clear your data or delete your account at any time from Settings, or request deletion by emailing support@pocketcheck.app.

After you delete your account. We keep a one-way fingerprint of your email address (a hash, not the address itself) with your the date of your free month, so a second free month cannot be started with the same email. It contains no financial data. We also keep a short record that the deletion happened. Contact support if you want the fingerprint removed.

4. Third-Party Services

• Plaid Technologies, Inc. - Used to connect bank, card and investment accounts in read-only mode. plaid.com
• SnapTrade - Used to connect brokerage accounts in read-only mode. snaptrade.com/privacy-policy
• Stripe - Processes web subscription payments. We never see or store your full card number. stripe.com/privacy
• Apple and RevenueCat - Process subscriptions bought in the iPhone app. We receive your subscription status, not your payment details. revenuecat.com/privacy
• Google and Apple sign-in - If you sign in with Google or Apple, they share your name and email address (or an Apple relay address) with us.
• Google Analytics, Google Ads and Meta - On the public website only, and only after you choose Allow on the cookie card, these receive the pages you visit, how you reached the site, your device and browser type, and whether you signed up. They never receive your account data. policies.google.com/privacy, facebook.com/privacy/policy
• AI service provider- Atlas and smart features (categorizing transactions, reading receipts, suggesting budgets) use a third-party AI provider. We send it only what the feature needs: for Atlas, your question, the recent conversation, your name, any instructions you gave Atlas and a summary of your finances (such as account names and balances, income, bills, budgets, goals, spending by category and top merchants), plus this month’s transactions when you ask Atlas to review them and any receipt you attach; for the others, the transactions, merchant names or receipt involved. When Atlas suggests a change, such as adding a transaction, nothing is saved until you approve it in the app. Under its terms, the provider may not use this data to train its AI models.
• Railway - Backend hosting. railway.app/legal/privacy
• Supabase - Authentication and user data storage. supabase.com/privacy
• Vercel - Website hosting. vercel.com/legal/privacy-notice
• Resend - Sends our emails, such as trial reminders and alerts, and receives email sent to our support and receipt addresses. resend.com/legal/privacy-policy
• Sentry - Error and crash reports from the website, the iPhone app and our server, and a small sample of performance data from the website and our server. sentry.io/privacy
• Expo and Apple Push Notification service - Deliver push notifications to your phone. Notification text can include amounts, such as a bill that is due. expo.dev/privacy
• Market data and logo services- To show price charts, our server asks Twelve Data for prices by ticker symbol. To show logos, the App asks logo services (logo.dev, Clearbit, Google, Financial Modeling Prep and CoinCap) for a logo by ticker symbol or a company’s web address, such as the website of a store you bought from. Like any web request, this shows them your device’s IP address. No balances, amounts or account numbers are sent to them.

5. Data Security

• Bank and brokerage passwords are never stored by Pocket Check. We keep only read-only access tokens from Plaid and SnapTrade, and Plaid tokens are encrypted.
• Sensitive data is stored using encrypted secure storage
• All communication uses HTTPS encryption

No method of transmission or storage is 100% secure.

6. Your Rights and Choices

6.1 Disconnect Your Bank

You may disconnect a bank at any time from within the App. When you do, we revoke the connection at Plaid and delete its access token and that bank’s saved transactions and balances from our database.

6.2 Delete Your Data

You can clear your data, or delete your account entirely, from Settings. Deleting your account removes your data from our servers, except the email fingerprint and deletion record described under After you delete your account, billing records that Stripe and Apple keep (and that we may need for tax and accounting), messages you sent us through the feedback form, service cost records that contain no financial data, and system logs that are removed on their normal schedule (for example, most payment event logs after 90 days). Contact us for any other deletion request.

6.3 Push Notifications

You can disable push notifications at any time through your device's Settings.

6.4 Cookies and Advertising

Choose Allow or No thanks on the cookie card the first time you visit the website, and change it any time from Cookie settings in the footer. Choosing No thanks is also your opt-out from the “sharing” of visit data with advertising companies under California law. See Your Privacy Choices.

7. Children's Privacy

Pocket Check is for adults. It is not intended for anyone under the age of 18, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has created an account, email support@pocketcheck.app and we will close it and delete its data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page will reflect any changes. Continued use of the App after changes constitutes your acceptance of the updated policy.

9. Contact Us