Privacy Policy

Last updated: 29 September 2026

1. Data Controller

The controller responsible for processing data collected through the Pockety app and this website is:

Entity / Owner: [[TODO: legal owner name or company name]]
Tax ID / NIF: [[TODO: tax ID / NIF]]
Address: [[TODO: registered address]]
Contact: support@getpockety.com

2. Data We Process

Pockety processes only the data strictly necessary to provide shared expense management:

Account data: email address, display name, optional avatar photo, and authentication method (email and password, Sign in with Apple, Google Sign-In).
Groups: group name, member list, invite code, and placeholder or virtual members created by an administrator (name and optional email).
Expenses: receipt photos, merchant, transaction date, line items, amounts, who paid and who owes each item; as well as manual expenses (description, amount, date).
Settlements and payments: recorded payments between group members. Pockety does not process money transfers or hold user funds.
Plan and usage: current plan (free or Pro) and monthly scan quota count.

3. Purposes and Legal Basis

We process your personal data to provide our services, allowing you to create shared groups, scan receipts using AI OCR, calculate group balances, and settle debts. We also track monthly scan counts to enforce plan quotas and respond to customer support requests. The legal basis for this processing is the performance of the service agreement between you and Pockety.

4. Processors and Service Providers

We rely on trusted third-party technology providers to deliver Pockety:

Supabase: database, user authentication, file storage, and serverless functions, with data hosted in the EU (region eu-central-2).
Google (Gemini API): receives receipt images solely at the moment of scanning to extract text and receipt items (OCR). Pockety does not use this data for any other purpose. [[TODO: confirm Gemini API tier and data use terms]]
Apple / Google: single sign-on authentication if chosen by the user.
Cloudflare: static hosting and content delivery for this website.

International transfers: [[TODO: review international data transfers (Google)]]

5. Data Retention

Personal data is retained as long as your account remains active. Unfinished or abandoned receipt scans are automatically deleted after 7 days (or after 1 day if stuck processing). When an account deletion is requested, data is processed as described in section 7.

6. Your Rights

You have the right to access, rectify, delete, restrict, or object to the processing of your personal data, as well as the right to data portability. You can exercise these rights at any time by contacting us at support@getpockety.com. You also have the right to lodge a complaint with your competent data protection authority (in Spain, the AEPD at aepd.es).

7. Account Deletion

You can delete your account at any time directly in the app (under Profile → Delete account) or by sending an email request to our support team. For full instructions on account deletion, visit our Delete account page.

Your account, profile information (name, email, avatar), subscription plan and scan usage, and uploaded receipt photos are deleted.
Groups where you were the only registered member are deleted along with all their expenses.
In shared groups, existing expenses remain under your display name as an unregistered member so remaining members' balances stay accurate. Your email address and contact details are removed.

8. Minors

Pockety is not intended for users under the minimum legal age for digital consent. [[TODO: minimum age]]

9. Cookies and Tracking

Neither the mobile app nor this website uses advertising or analytics tracking cookies. The website loads the Inter typeface from Google Fonts.

10. Changes to this Policy

We may update this Privacy Policy periodically. When changes occur, the updated date at the top of this page will be revised.