The short version
PocketFi is a personal finance app. The transactions you record live in your own Firebase document, tied to your Google account. We don't sell, rent, or share your financial data. You can export or delete everything at any time.
If you want the long version, every section below explains a specific piece. If you'd rather see the code, the entire app is open source at github.com/boonyongyang/pocketfi — Firestore rules and all.
Data we collect
To make PocketFi work, we collect:
- Account info from Google Sign-In — your name, email, and profile photo URL. Provided by Google when you authorize the app.
- Transactions you create — amount, category, date, description, optional notes, optional photos of receipts.
- Wallets and shared-wallet membership — wallet names, members (other users you've invited by email), splits.
- Receipt images — only when you scan a receipt. Stored in Firebase Cloud Storage under your account.
- Bookmarks, budgets, savings goals, bills — anything you create in the app.
- Crash and basic usage logs — via Firebase Crashlytics. App version, device model, OS version, anonymized session length. No transaction content is sent.
We do not collect your contacts, location, microphone, or any data from other apps. We do not connect to your bank.
How we use it
Your data is used to:
- Display your transactions, budgets, and overviews back to you.
- Sync across your devices via Firebase.
- Share specific wallet entries with people you've explicitly added to a shared wallet.
- Diagnose crashes and improve stability.
That's it. We don't profile you, target ads, or feed your data into machine-learning training sets.
Where it lives
PocketFi runs on Google Firebase. Specifically:
- Firebase Authentication — manages your Google sign-in.
- Cloud Firestore — stores your transactions, wallets, budgets, etc.
- Cloud Storage — stores receipt images you upload.
- Crashlytics — stores anonymized crash reports.
Firebase data is hosted on Google Cloud infrastructure (multi-region asia-southeast1). Google's own privacy practices apply to that storage; see their Firebase privacy page.
Your rights
Regardless of where you live, you can:
- Access everything we have on you — most of it is visible inside the app; the rest can be exported via the in-app Account → Export my data action.
- Correct anything by editing it in the app.
- Delete your account and all associated data (see below).
- Object to processing — uninstall the app and request deletion.
If you live in Malaysia, the EEA, UK, or California, you have additional statutory rights under PDPA / GDPR / UK GDPR / CCPA. Email us to exercise them and we will respond within 30 days.
Delete your data
In the app: Go to Account → Settings → Delete account. This deletes your Firebase Auth record, every Firestore document under your user ID, and every receipt image you've uploaded. Shared wallets you created are reassigned to a remaining member, or deleted if you were the only member.
By email: If you can't sign in, email hello@pocketfi.app from the address tied to your Google account, and we'll delete it manually within 7 days.
Backups in Google's infrastructure are purged within an additional 30 days. After that, your data is gone for good — including from our side.
Children
PocketFi is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we'll delete the account.
Changes to this policy
If this policy changes in a meaningful way, we'll update the "last updated" date at the top, post a notice in the app, and (for material changes that expand data use) ask you to re-consent on next launch.
Contact
Questions, requests, or "hey, this section is unclear" notes:
- Email: hello@pocketfi.app
- GitHub issues: github.com/boonyongyang/pocketfi/issues