Pocketkeep is an expense tracker and budget planner published by Gafat Software. This policy explains what the app stores, what leaves your device, and why. It applies to the Pocketkeep Android app.
Pocketkeep does not have accounts and does not run a server that stores your data. Everything you enter is kept in the app's private storage on your phone:
None of this is sent to Gafat Software or to anyone else. We cannot see it.
Advertising. Pocketkeep is free and shows ads served by Google AdMob. To show and measure ads, Google may collect and process information such as your device's advertising ID, IP address (which can indicate approximate location), device and app information, and how you interact with ads. Google's use of this information is described at https://policies.google.com/technologies/partner-sites. Pocketkeep never shares your transactions, budgets, receipts or any other financial data with advertisers.
Consent. In the European Economic Area, the United Kingdom, Switzerland and other regions where it is required, Pocketkeep asks for your consent through Google's consent platform before personalised ads are shown. You can change your choice at any time in Settings, under Ad privacy options.
Ad configuration and fraud prevention. When the app opens, it asks a Gafat Software server whether ads should be shown for this app. The request carries the app's package name and a hashed identifier of your device: a one-way SHA-256 hash of your device's Android ID. We use it only to prevent ad fraud, never for advertising and never to identify you, and it carries none of your financial data.
To protect advertisers and keep the app free, Pocketkeep stops showing ads for a while after an ad is tapped, and for longer if ads are tapped unusually often. When that happens, the app sends that hashed identifier, the reason and the length of the pause to our server, so the pause still applies if the app's data is cleared or the app is reinstalled. A record lasts only as long as its pause, at most one year. Pocketkeep works exactly the same while ads are paused.
Pocketkeep uses Google Analytics for Firebase to see how the app is used, so that the parts people rely on get the attention. It records a small set of pseudonymous events: the app being opened, onboarding finished, a transaction saved (its type, and whether a receipt or a recurrence was attached), a budget saved, a backup, export, import or PDF finishing, the reminder being switched on or off, and the widget being pinned.
The events never carry an amount, a category name, an account name, a note, a receipt or any other content you entered. They are linked to a random identifier created for this installation, and Google estimates an approximate location from your IP address. Clearing the app's storage or uninstalling Pocketkeep resets that identifier.
Where consent is required, analytics storage stays off until you give it in Google's consent form, and it follows any later change you make there.
Backups, CSV exports and transaction PDFs are saved only where you choose using your phone's save dialog. These files are not encrypted. Anyone or any app that can open the place you save them to can read them, so choose that location with care. Importing a CSV or restoring a backup reads only the file you pick.
Pocketkeep is excluded from Android's automatic cloud backup, so your data is not copied to your Google account. Android's direct device-to-device transfer, when you move to a new phone, can still carry it across.
Notifications, only if you turn on the daily reminder or budget alerts. Notifications are created on your phone and are not sent from a server.
Run at startup, so that reminders and recurring transactions keep working after your phone restarts.
Camera and photos are used only when you choose to attach a receipt. The app uses your phone's own camera and photo picker, so it never has access to your whole photo library.
Advertising ID, used by Google AdMob as described above.
Your data is stored in the app's private storage, which other apps cannot read on a normal, unmodified phone. The database is not encrypted and the app has no lock of its own, so anyone who can unlock your phone can open Pocketkeep.
Pocketkeep is a personal finance tool intended for adults. It is not directed at children under 13 and does not knowingly collect personal information from them.
Your data stays until you delete it. Deleting a transaction removes it and its receipt photo. Clearing the app's storage or uninstalling Pocketkeep deletes everything the app stored. Backup, CSV and PDF files you saved elsewhere are not affected and must be deleted separately. To reset the advertising ID or opt out of personalised ads, use your phone's Google or privacy settings.
An ad-pause record on our server deletes itself when the pause ends, at most one year after it began. It holds only the hashed identifier, the reason and the length of the pause, and nothing that names you, so we cannot link a record to you.
E-mail developer.gafatsoftware@gmail.com from any address, with "Pocketkeep data deletion" as the subject. Tell us roughly when you last used the app and which phone you used, so we can find the records that belong to your install: the analytics data is filed under a random identifier and holds nothing that names you.
We delete the analytics data for your install, and any ad-pause record held for your device, within 30 days of your request. There is no account to close: the app has never asked for one. Clearing the app's storage or uninstalling it resets the analytics identifier straight away, without waiting for us.
Deleting that data does not touch anything on your phone. Your transactions, budgets and receipts live only on your device and are removed by clearing the app's storage or uninstalling it.
If this policy changes, the updated version will be published at https://gafatsoftware.com/apps/pocketkeep/privacy_policy.html with a new "last updated" date.
Questions about this policy can be sent to developer.gafatsoftware@gmail.com.