Privacy Policy — PocketLens

Last updated: October 2026

Introduction

PocketLens is a personal finance app for iPhone, iPad and the web. It shows your spending, budgets and net worth across the bank accounts you choose to connect. This policy explains what data PocketLens handles, why, and who processes it.

Data We Collect

  • Account information: your email address, first and last name, and a password (stored only as a secure hash by our authentication provider).
  • Financial data from your banks: when you link an institution, we receive account names, types, masked account numbers (last four digits), balances and transactions (date, amount, merchant and description). Access is read-only: PocketLens cannot move money, make payments or change anything at your bank.
  • Data you enter: categories, budgets, rules, tags, splits, notes, manual accounts and their values, and CSV files you choose to import.
  • Your Plaid keys: PocketLens connects to banks through your own Plaid developer account. The Plaid secret you enter is encrypted on our server and is never stored on your device or shown again.
  • Push notification token: if you allow notifications, your device's Apple push token is stored so we can send the alerts you turn on (for example budget thresholds, large charges, low balances and spending recaps).
  • Crash and performance diagnostics (iOS): crash reports, error messages and app performance timings, used only to fix bugs. Screenshots and view hierarchies are deliberately excluded, so your balances never appear in diagnostics.

How We Use Your Data

Only to provide the app to you: syncing your accounts, categorizing transactions, calculating budgets and net worth, sending the notifications you enable, and diagnosing problems. We do not sell your data, share it with advertisers, use it for advertising or build profiles of you. PocketLens contains no ads and no third-party analytics.

Where Your Data Is Stored

Your data is stored in a database hosted by Supabase, protected by row-level security so that each account can only ever read its own rows. All traffic between the app and our servers is encrypted in transit (HTTPS).

Third-Party Services

  • Plaid connects to your financial institutions. When you link a bank you sign in on Plaid's own screens; PocketLens never sees your bank username or password.
  • Supabase provides the database and sign-in.
  • Render hosts the sync service and the web app.
  • Sentry receives the iOS crash and performance diagnostics described above.
  • Apple Push Notification service delivers notifications to your device.

Permissions

  • Notifications (optional): alerts you choose in Settings. You can turn them off at any time in the iOS Settings app.
  • Face ID (optional): used on your device to lock the app. Biometric data is handled entirely by iOS and is never available to PocketLens.

Your Choices

  • Unlink a bank at any time from its account screen. We stop syncing it and you can remove its data.
  • Export your data as CSV from Settings.
  • Delete your account from Settings → Delete Account. This permanently deletes your account and all associated data, including linked banks, transactions, budgets and stored Plaid keys.

Data Retention

We keep your data for as long as your account exists. When you delete your account, its data is deleted from our database. Diagnostic reports are kept by Sentry for a limited period and then removed.

Children's Privacy

PocketLens is not directed to children under 13 and does not knowingly collect personal information from them.

Changes to This Policy

If this privacy policy changes, the updated version will be posted at this URL with a new "Last updated" date.

Contact

For questions about this privacy policy or for support with PocketLens, email [email protected] or visit the PocketLens support page.