Privacy Policy

Last updated: 31 August 2026

My Pocket ("we", "our", "the app") is a personal and household finance app. This page explains what information we collect, why, how it's protected, and the choices you have. We built My Pocket to hold real financial information for real households, so we've tried to write this in plain language rather than boilerplate.

1. What we collect

• Account information — name, email address, mobile number, and the password you choose (stored as a one-way cryptographic hash, never in plain text).
• Financial data you enter — accounts, transactions, categories, budgets, savings goals, recurring bills, liabilities (loans/credit cards), insurance policies, and investment holdings/transactions you add to the app.
• Household member labels — names/relations you choose to tag items with (e.g. "Spouse", "Child") — these are labels within your own account, not separate logins with their own access.
• Documents you upload — receipts, invoices, policy documents, or warranties you choose to attach (PDF/JPG/PNG only, size-limited).
• Basic technical data — things like request logs and session information needed to keep the app secure and working (e.g. detecting repeated failed logins).

We do not collect more than the app's own features require, and we don't use third-party advertising trackers.

2. How your data is protected

• All traffic between your device and our servers is encrypted (TLS/HTTPS).
• Data is encrypted at rest, both in the database and for uploaded documents.
• Passwords are hashed with a modern, purpose-built algorithm — we never store or can see your actual password.
• Database access is scoped per-request using row-level security, in addition to application-level checks — this means even a bug elsewhere in the app can't leak another user's records.
• Our infrastructure runs in AWS's Mumbai (India) region — your data stays in-country.

3. Who we share data with

We don't sell your data, and we don't share it with advertisers. We do use a small number of infrastructure providers to actually run the app:

• Amazon Web Services (AWS) — hosts the app, database, and any documents you upload (encrypted, India region).
• Email delivery provider — used only to send account emails you'd expect (email verification, password reset), not marketing.

These providers process data on our behalf under their own security commitments; none of them are permitted to use your data for their own purposes.

4. Your choices

• You can view and edit your account information at any time within the app.
• You can view and revoke your active login sessions from Settings — useful if you lose a device.
• To request deletion of your account and associated data, contact us at the address below — we'll confirm once it's been removed.

5. Data retention

We retain your data for as long as your account is active, so the app can function (showing your transaction history, reports, etc.). If you request account deletion, we remove your data within a reasonable period, except where retaining specific records is required by law.

6. Children's privacy

My Pocket is not directed at children and is not intended for use by anyone under 18.

7. Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page and, where appropriate, notify you in-app.

8. Contact

Questions about this policy or your data — email us at privacy@mypocket.in.