Pocketoro
Privacy policy

Your money records stay with you.

Pocketoro is a personal expense tracker. Your records stay on your own device and, if you choose, in your own Google Drive. This page explains exactly what the app handles and where it goes.

Last updated 31 October 2026 · Pocketoro by Vigil Thomas

No server copyYour entries are stored only on your phone.
No ads or trackingNo advertising IDs and no analytics.
Never soldWe don't sell, rent or share your data.

What stays on your device

Everything you enter: accounts, entries, categories, budgets, EMIs, bills, notes, receipt photos and your profile name and picture. It is stored only in the app's storage on your phone or browser. We do not run a server that keeps a copy.

Google sign-in (optional)

You can use Pocketoro without an account. If you sign in with Google, the app receives your name, email address and profile picture from Google, and uses them only to show who is signed in and to back up to your Drive.

Google Drive backup (optional)

  • Backups are saved to a folder named Pocketoro in your own Google Drive. They are not sent to us.
  • The app asks for two Drive permissions. drive.file lets it see and change only the files it created. drive.appdata gives it a hidden folder in your Drive that only Pocketoro can use; it keeps one small file there, the key that encrypts your Groq key in backups (see Assistant below). The app cannot read anything else in your Drive.
  • You can delete the backups at any time from Google Drive, or remove the app's access at myaccount.google.com/permissions.

Pocketoro's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Scan receipt, Paste SMS and shared screenshots (optional)

When you choose Scan receipt or Paste SMS, or share a payment screenshot to Pocketoro, the image or message text is sent over an encrypted connection to our reading service at expense.atovian.com, which returns the amount, payee and date it finds. To check that the request comes from a signed-in Pocketoro user, the service also receives your Google sign-in token and confirms your email address with Google.

  • The image and text are processed in memory and are not saved.
  • The server log keeps the time of the request and your email address, for security and to limit abuse. Web server logs also record your IP address. Logs are used only for security and troubleshooting and are deleted after 30 days.
  • Nothing else from the app is ever sent to this service.

Assistant (optional)

The assistant turns sentences like "Spent 250 on lunch" into entries for you to confirm. It works only after you paste your own API key from Groq, an AI service. When you send a message, the app sends it directly from your device to Groq (api.groq.com) over an encrypted connection, using your key. It does not go through us.

  • What is sent: your recent chat messages and the names of your categories, accounts, account types and people, so the assistant can pick the right ones. Balances and past entries are not sent. Long numbers such as card or account numbers are masked to their last 4 digits, and messages that look like one-time passwords are not sent at all.
  • Questions like "How much did I spend on food?" are answered on your device from your own data.
  • Groq handles what it receives under its own privacy policy, under your Groq account.
  • Your Groq key is stored on your device. If you use Drive backup, the backup holds it only in encrypted form; the key to decrypt it is kept in Pocketoro's hidden app folder in your Drive, never in the backup file.
  • To stop, remove the key in More → Assistant.

Reminders

Bill, EMI and budget reminders are scheduled on your device. They do not go through any server.

Bank SMS on Android (optional)

If you allow it, the Android app reads incoming and recent SMS from banks and payment services on your phone to suggest entries for you to confirm. Before Android asks for the permission, the app explains what it reads and why, and you can say Not now.

  • Messages are read and matched on your device only. They are not uploaded or shared. A message leaves your phone only if you choose Paste SMS yourself.
  • Messages from ordinary phone numbers and one-time passwords are skipped.
  • With Auto fetch on, new bank SMS are picked up as they arrive, even while the app is closed.
  • You can turn this off at any time by switching off Auto fetch or removing the SMS permission in Android settings.

What we do not do

  • No ads and no advertising IDs.
  • No analytics or tracking.
  • We do not sell or rent your data, and we do not share it with anyone. The only third party that receives anything is Groq, and only when you use the assistant with your own key.

Deleting your account and data

Pocketoro has no account on our servers. Signing in with Google only connects your own Drive. The data deletion page has every step in order.

  • On your device: open More → Erase all data, or uninstall the app. This deletes all your entries, accounts, settings, photos and your Groq key.
  • Backups: delete the Pocketoro folder in your Google Drive.
  • Disconnect Google: remove Pocketoro at myaccount.google.com/permissions. To also remove the hidden app folder, open Google Drive → Settings → Manage apps → Pocketoro → Delete hidden app data.
  • Server logs: the logs from Scan receipt, Paste SMS and shared screenshots (time, email address and IP address) are deleted automatically after 30 days. To have them deleted sooner, email vigilthomas17@gmail.com from the address you signed in with; we delete them within 30 days of your request.

Nothing else is kept. Messages you sent to the assistant are held by Groq under your Groq account; manage or delete them there.

Children

Pocketoro is not meant for children under 13.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date.

Questions about privacy: vigilthomas17@gmail.com

See also the terms of service.