Privacy Policy

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service.
• Company (referred to as "the Company", "We", "Us" or "Our" in this Agreement) refers to PocketPal.
• Cookies are small files placed on Your device by a website.
• Country refers to: Alberta, Canada.
• Device means any device that can access the Service, such as a computer or mobile phone.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to PocketPal, accessible from https://pocketpal-yaj9.onrender.com.
• Service Provider means any third party that processes data on behalf of the Company to help provide the Service.
• Usage Data refers to data collected automatically, generated by the use of the Service.
• You means the individual accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data. While using Our Service, We collect:

• Username and email address
• A securely hashed password, if You register with one (We never store passwords in plain text)
• Your Google account email and name, if You sign in with Google
• Expense data You enter or confirm: descriptions, amounts, categories, dates, and notes
• Custom categories, recurring bills, and Your monthly budget limit, if set
• Receipt photos, if You use receipt scanning (processed to extract merchant, total, and date, then discarded — see Third-Party Services below)
• Your profile picture, if You upload one (2MB limit)

Usage Data is collected automatically and may include Your device's IP address, browser type, the pages of the Service You visit, and the time and date of Your visit.

Tracking Technologies and Cookies

We use one essential Session Cookie to keep You logged in. This Cookie is required for the Service to function and is not used for tracking, analytics, or advertising. We do not use third-party advertising or analytics cookies.

Third-Party Services

PocketPal relies on the following Service Providers to operate certain features:

• Google — provides Google Sign-In if You choose to use it.
• Resend — delivers password-reset emails.
• Tabscanner — an OCR service that reads receipt photos You upload, if You use receipt scanning. Only the image is sent, solely to extract merchant, total, and date; it is not retained by Us after processing.
• Groq — powers the AI assistant. When You ask it a question, a summary of Your expense data (totals, category breakdowns, and itemized transactions) is sent to Groq to generate an answer. This only happens when You actively use the assistant.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including Your dashboard, budget tracking, and analytics.
• To manage Your Account, including authentication and access to Service features.
• To manage Your requests, such as a password reset, receipt scan, AI assistant question, or account deletion.

We may share Your personal information in the following situations:

• With Service Providers listed above, solely to operate the specific feature You are using.
• With Your consent, for any other purpose We disclose to You at the time.

We do not sell Your Personal Data, and We do not use it for advertising.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as Your account is active. Receipt images are not retained after they are processed into an expense entry.

Transfer of Your Personal Data

Your information is processed by Our hosting and infrastructure providers, which may operate servers outside of Your state, province, or country. By using the Service, You consent to this transfer. We take reasonable steps to ensure Your data is treated securely wherever it is processed.

Delete Your Personal Data

You have the right to delete the Personal Data We have collected about You. You can permanently delete Your account from Your profile page at any time — this action is immediate and cannot be undone. You can also export Your full expense history as a CSV or PDF before deleting Your account.

Disclosure of Your Personal Data

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, protect the rights or property of the Company, or protect the personal safety of Users of the Service.

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data — including hashed passwords and signed access tokens — We cannot guarantee its absolute security.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and are aware Your child has provided Us with Personal Data, please contact Us so We can remove it.

Links to Other Websites

Our Service integrates with third-party services listed above (Google, Resend, Tabscanner, Groq) to provide certain features. We have no control over and assume no responsibility for the content or privacy practices of these or any other third-party site.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You by updating the "Last updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, you can contact us at the email listed on our landing page.