Privacy Policy

1. Information we handle

Account information

If you create an account, we process your email address and username. For password-based accounts, the server stores a password hash rather than your readable password. If you sign in with Google, we receive the verified account information needed to sign you in and link your account; Google handles its own sign-in process under Google's privacy policy.

Finance entries and preferences

We store the information you choose to enter or sync, which can include income and expense amounts, transaction type, category, optional description, date and time, investment entries and notes, budget amounts, savings goals, and currency preferences. Treat these records as private financial information and do not enter card PINs, CVVs, passwords for Telda, or full card numbers.

Optional Telda notification import (Android only)

If you enable the feature and grant Android Notification Access, Pocketjr reads notifications from the Telda app on your device. The app processes the notification text on the device to identify the transaction amount, direction, merchant text, and original notification time. It sends a parsed transaction record and a deduplication identifier to Pocketjr's server so the transaction can be added to your account. The full notification text is not sent as the transaction description; the imported record contains the parsed merchant text, amount, direction, and timestamp. Pending alerts may be held temporarily in the app's on-device queue until they sync or you clear that queue. Pocketjr does not ask for or collect your Telda password, PIN, CVV, or full card number.

Device and local storage information

For Telda imports, the Android app registers a device and uses an authentication token to associate an import with your account. The server stores a hash of the device token and limited device-registration timestamps. The app keeps session information securely on Android using Android Keystore and may keep pending Telda alerts locally until they sync. The website uses browser storage for your signed-in session and a local cache; guest-mode entries are stored on your device/browser and are not synced to the server unless you choose to create and use an account. Daily reminder schedules are configured locally on your Android device.

We do not request your contacts, camera, microphone, or precise location for the finance tracking features.

2. How we use information

We use the information to provide sign-in, synchronize your entries across devices, show your finance dashboard, save preferences, import transactions you enable, prevent duplicate imports, maintain service reliability and security, troubleshoot failures, and respond to privacy or support requests.

3. Service providers and sharing

We do not sell your personal or transaction data. Advertising is not currently active on Pocketjr. The website uses Google Analytics 4 (GA4) to measure visits, page views and limited interactions such as starting guest mode, opening the sign-in screen, using a budgeting calculator, or downloading the blank expense template. These events may include the page path, language and file format. Google may process technical and usage information under its own privacy terms. We do not send transaction amounts, account balances, descriptions, calculator input values, passwords, or notification text as analytics event data. Information is also shared as needed to operate the service with providers such as Google for sign-in, Render for API hosting, Supabase for database hosting, and Lovable for website hosting and deployment. We may disclose information if required by law or when reasonably necessary to protect the service, users, or others.

Relevant provider policies: Google, Render, Supabase, and Lovable.

A Google AdSense site-ownership verification meta tag is included in the website's HTML head. It identifies the publisher account for site ownership checks; it does not load advertising code or display ads. Advertising is not currently active on Pocketjr. If ads are introduced later, advertising partners such as Google may use cookies or similar technologies to deliver and measure ads and, where permitted, personalize them according to applicable settings and your choices. We will provide any required notice and consent choices before enabling ads. No advertising placements are currently configured, and we do not intend to include transaction amounts, balances or descriptions in advertising requests. You can learn more about Google's practices in its advertising technologies policy.

4. Security

Network requests to Pocketjr's API use HTTPS. Passwords are hashed before storage, API access requires authentication, and Android session/device tokens are protected using Android Keystore. We use reasonable safeguards, but no online service or device storage can be guaranteed completely secure. Keep your device and account credentials protected.

5. Retention and account deletion

Account information and synced finance records are kept while your account is active. You can initiate permanent account deletion from Settings in Pocketjr or from ouraccount deletion page. After a verified deletion succeeds, the live account record and associated server-stored transactions, investments, device registrations, and preferences are deleted. We may retain limited records where required by law or for legitimate security purposes.

Local guest entries, browser storage, Android app data, operating-system notification history, and any unsynced notification queue are stored on your own device and may need to be cleared from that device separately. Uninstalling the Android app or clearing its storage removes app-local data; Android Notification Access can also be disabled in system settings.

6. Your choices

You can choose whether to create an account, use guest mode, enable Telda importing, grant notification access, or enable daily reminders. You can disable Telda importing and revoke notification access at any time in Android settings. You can request account deletion using the method described above.

7. Changes and contact

We may update this policy when the service or its data practices change. The latest version will be posted at this URL with a revised update date. For privacy questions or support, email yousefaly147@gmail.com or contact us on Instagram @youssef3lyy.

Pocketjr is a personal recordkeeping tool, not a bank and not financial, tax, or investment advice.