Privacy Policy

Pocketly · Last updated: February 24, 2026

Pocketly ("we", "our", or "us") is a personal expense-tracking app. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Pocketly you agree to the practices described here.

      Short version: Your financial data never leaves your device. The only
      information sent off-device is an anonymous device ID (used for scan quotas and
      subscription validation) and receipt images you choose to scan via the cloud OCR feature.
    

1. Information We Collect

1a. Data stored only on your device

Expense records – amounts, dates, categories, merchants, and notes you enter.
Categories and budgets – custom labels and limits you create.
App preferences – currency, language, theme, and notification settings.

This data is stored in a local SQLite database on your device and is never transmitted to us or any third party.

1b. Data transmitted off-device

Data	Purpose	Recipient
Anonymous device ID (UUID)	Enforce free scan quota (10/month); link subscription entitlement to device	Our Vercel backend; RevenueCat
Receipt images (when you use cloud OCR scan)	Extract merchant, amount, and date from a receipt photo using AI vision	Our Vercel backend → Anthropic Claude API
Purchase / subscription information	Validate and manage in-app subscriptions (weekly, monthly, yearly)	RevenueCat; Apple App Store / Google Play

2. How We Use Your Information

Process receipt images to automatically fill in expense details (cloud OCR feature).
Track how many receipt scans a device has performed in a billing period to enforce the free-tier quota.
Verify active subscription entitlements so premium features unlock correctly.
We do not use your data for advertising, profiling, or selling to third parties.

3. Receipt Images & OCR Processing

When you tap "Scan Receipt" using the cloud OCR feature, the image is compressed and sent over HTTPS to our backend proxy hosted on Vercel (pocketly-proxy.vercel.app). The proxy forwards it to Anthropic's Claude API for text extraction. Receipt images are processed in real-time and are not stored on our servers or Anthropic's servers after processing. The extracted data (merchant name, total amount, date) is returned to your device and saved locally.

The on-device OCR feature (available on supported devices) processes images entirely on your device and never sends any data off-device.

4. Device Identifier

Pocketly generates a random UUID the first time the app is installed and stores it securely on your device using the OS secure keystore. This ID is anonymous — it is not linked to your name, email, or any other personally identifiable information. It is used solely to count scan usage per device and to associate your RevenueCat subscription entitlement with your device.

5. Third-Party Services

Service	Purpose	Privacy Policy
RevenueCat	In-app subscription management	revenuecat.com/privacy
Anthropic (Claude API)	AI-powered receipt text extraction	anthropic.com/privacy
Vercel	Hosting for our backend proxy	vercel.com/legal/privacy-policy
Apple App Store / Google Play	App distribution and payment processing	Apple & Google privacy policies

6. Permissions

Permission	Why it's needed
Camera	Take photos of receipts for OCR scanning
Photo Library / Storage	Pick existing receipt images from your gallery
Biometrics / Fingerprint	Optional app lock using Face ID or fingerprint — processed entirely on-device
Notifications	Optional reminders for recurring expenses
Internet	Cloud OCR, subscription validation, and restore purchases

7. Data Retention

On-device data: Retained until you delete the app or manually clear data.
Receipt images: Not retained on our servers after OCR processing.
Scan usage counters: Stored in our backend (keyed by anonymous device ID) and reset each billing period.
Subscription records: Managed by RevenueCat; subject to their retention policy.

8. Children's Privacy

Pocketly is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children.

9. Your Rights

Because most data is stored exclusively on your device, you can delete it at any time by clearing app data or uninstalling the app. For data held by RevenueCat (subscription history), please refer to their privacy policy or contact them directly. For any other requests or questions, contact us at the email below.

10. Security

All data transmitted to our servers is encrypted in transit using TLS. Sensitive local data (such as your device ID) is stored in the OS secure keystore (iOS Keychain / Android Keystore). We do not store financial data on any server.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of Pocketly after an update constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this privacy policy, please contact us at:
ahmedclubust@gmail.com