Privacy Policy

Last updated: 16 October 2026

This policy is maintained by the PocketTreasury team to answer common questions about how personal and financial information is handled inside the app. It is not a legal opinion or a certification.

1. Who we are

PocketTreasury is a personal treasury and cash-forecasting web application ("the Service"). This policy explains what data the Service collects, why, and what rights you have over it.

2. What we collect

Account details: email address, hashed password, optional MFA secret.
Financial inputs you type in: salaries, bills, one-off items, account balances, goals, scenarios.
Derived forecasts and snapshots generated from those inputs.
Usage metadata: sign-in events, audit-log entries, weekly AI question counts.

We do not collect bank credentials. If you connect a bank, the connection is read-only through Enable Banking, a regulated Open Banking provider: you sign in on your bank's own page, and we receive only balances and transactions for the accounts you link. Access expires after 90 days unless you renew it, and you can disconnect at any time from the Banks page.

3. How we use it

To operate the forecasting engine and show it back to you.
To authenticate you and protect your account (MFA, password checks).
To answer AI insight questions you submit — the request and answer are stored so you can revisit them.
If you enable weekly AI reviews, to generate and save one summary each week from your numeric forecast and spending totals. You can turn off future reviews in the Review page.
To alert you when a forecast breaches a threshold you set.

We do not sell your data, and we do not use your financial inputs to train third-party AI models.

4. Where it lives

Data is stored on managed cloud infrastructure with row-level security so each account can only read its own rows. AI questions are processed by third-party LLM providers to generate the answer; only the question text and relevant forecast summary are sent, never your credentials. Opt-in weekly AI reviews send numeric forecast figures and aggregate spending totals, not merchant names or transaction descriptions. Reviews are saved privately in your account.

5. Retention

Your data is kept for as long as your account exists. When you delete your account (Settings → Security → Danger Zone), your profile, ledger, forecasts, scenarios, goals, alerts, and audit log are removed permanently within 30 days. Anonymised aggregate counts may be retained for platform monitoring.

6. Your rights

You can export your ledger to CSV, download a PDF of any forecast version, correct any input at any time, and delete your entire account from within the app. If you're in the EU/UK you also have the rights granted by GDPR: access, rectification, erasure, portability, restriction, and objection.

7. Cookies

PocketTreasury uses a small number of first-party cookies and local storage entries to keep you signed in and remember UI preferences. No third-party advertising or tracking cookies are set.

8. Contact

Questions or requests: email pockettreasury@gmail.com or use the private contact form on the FAQ page. If a data-protection concern is not addressed, you may contact your local supervisory authority. For how we protect your data technically, see the Security page.

9. Changes

Material changes to this policy will be surfaced in the app before they take effect. The "Last updated" date above reflects the most recent revision.