Privacy Policy

Last updated June 11, 2026

The short version

Pocket Register is a personal finance tracker. Your financial data is yours. We don't sell it, share it with advertisers, or feed it to any AI training pipeline. We only collect what we need to make the app work, and you can delete everything at any time from Settings → Delete account.

What we collect

When you sign in with Apple, Apple gives us:

  • An anonymous user identifier (the Apple "sub") so we can recognize you on return visits.
  • Your email address — either your real one or Apple's relay address, your choice. We use this only for support replies and (rarely) critical account notices.
  • Your name, if you chose to share it during Sign in with Apple. Shown only inside your own account.

As you use the app, you create:

  • Accounts, transactions, splits, categories, budgets, quick-fill templates, bills, debts, and paycheck settings.

That's it. We don't collect device identifiers for advertising, location, contacts, photos beyond receipt attachments you explicitly add, or anything else outside the app's core workflow.

What we don't collect

  • We don't read your bank accounts or use any aggregator (Plaid, etc.). You enter data yourself.
  • We don't run third-party analytics, ad SDKs, or social trackers.
  • We don't sell, rent, or share your data with anyone for marketing.
  • We don't use your financial data to train AI models.

Where your data lives

The web companion (this site) stores your data in a PostgreSQL database hosted by Railway. The iOS app stores data on your device via Apple's SwiftData; if you opt in, it also syncs to your private iCloud account via CloudKit. Apple never gives us access to your iCloud data.

Security

Connections to our servers use TLS. Your session cookie is httpOnly and tied to your browser. Backend authentication is handled with short-lived JWTs and verified Apple identity tokens.

No system is ever perfectly secure, but we keep dependencies patched and only collect data we need.

Deleting your data

Go to Settings → Delete account in the web companion. Confirming there permanently removes your user record and every row tied to it — accounts, transactions, splits, categories, budgets, templates, bills, debts, and paycheck settings. The cascade runs in a single database transaction.

You can also email support@pocketregister.app and we'll handle it within 7 days.

Backups: deleted data may persist in our encrypted database backups for up to 30 days before being permanently overwritten.

Children

Pocket Register is not directed at children under 13. We don't knowingly collect information from children. If you believe a child has signed up, email support and we'll delete the account.

Changes

If we materially change this policy we'll update the date at the top and, where appropriate, notify you in-app before the change takes effect.

Contact

Questions? Email support@pocketregister.app.