Privacy Policy

Effective 4 November 2026

Pockit keeps your spending so it can show it back to you. It does not show you ads, track you across other apps or websites, or sell or share your data with anyone for their own use.

Who we are

Pockit is made and run by Wisam Armaly, an individual developer in Israel (“we”, “us”). We are the controller of the personal data described here. Contact: support@pock-it.io.

What we collect

Your account

A random identifier from Sign in with Apple. We never see your Apple ID password.
Your name and email address, if you let Apple share them. Apple may give us a private relay address instead of your real one.
Your currency and time zone, so figures and dates are right for you.

What you put in

Purchases and income: amount, date, merchant, category and any note you add.
Accounts, categories, plans, goals and recurring payments you create.
Statement files you choose to import. We read the transactions from them; we do not keep the file.
Shared spaces: who is in them, and the bills and amounts added to them.

From your device

A push notification token, if you allow notifications.

Pockit never connects to your bank and never asks for bank credentials.

What stays on your phone

Face ID is handled entirely by iOS; we never receive biometric data. Your App Lock and app-switcher settings are stored only on the device.

How we use it

To run the app: work out what your month has cost, what you can still spend, and everything else it shows you.
To keep shared spaces in step between their members.
To send notifications you have turned on.
To suggest categories. When you categorise a purchase, we record the merchant and the category you chose — with no amount, date, name or account attached — and use everyone’s choices together to suggest a category for that merchant. Where a merchant page shows how others categorise it, it does so only once enough people have, so no one person can be singled out.
To keep the service secure and fix problems.

We use your data to provide the service you asked for (performance of a contract), and for the category suggestions and security, our legitimate interest in a working, safe app. We do not use it for advertising or profiling, and we do not use it to train AI models.

Who else handles it

Amazon Web Services hosts our servers and database, in Ireland (EU).
Apple provides Sign in with Apple and delivers push notifications.
We fetch currency exchange rates from a public rates service. Only currency codes are sent, never anything about you.

We have no analytics, advertising or tracking SDKs in the app. We will disclose data if the law requires us to.

International transfers

Your data is stored in the European Union. Israel and the EU recognise each other’s data protection as adequate.

How long we keep it

For as long as you have an account. When you delete your account in the app, your data is deleted from our database straight away, including your share of shared spaces. That includes the category choices you contributed to merchant suggestions.

Your rights

You can see, correct and delete your data in the app at any time. You can also email us to ask for a copy of your data, a correction, its deletion, or to object to how we use it. Depending on where you live — including under Israel’s Privacy Protection Law and the EU and UK GDPR — you may also complain to your data protection authority, such as Israel’s Privacy Protection Authority.

Security

Everything travels over encrypted connections. Your session is stored in the iPhone’s keychain and never leaves that device, and you can lock the app with Face ID. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

Children

Pockit is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

Changes

If we change this policy, we will post the new version here with a new date, and tell you in the app if the change is significant.