Privacy policy

1. Scope

This policy applies to website visitors, waitlist sign-ups, and PockIQ app users. If you do not agree, please do not provide personal data or stop using the service.

2. Data we may collect

• Contact information: email and/or phone number you submit on the waitlist; name or account details if you create an account later.
• Usage and transaction data: content you enter in the app (e.g. expense logs), app settings, and technical logs needed to operate and secure the service.
• Technical data: IP address, device type, browser, session identifiers, cookies or similar storage (if any), and access timestamps — to prevent abuse and improve the service.

3. Purposes and legal bases

We process personal data for the purposes below, based on your consent, contract performance, legal obligations, or legitimate interests as permitted by law:

• Managing waitlist sign-ups and sending product updates;
• Providing, maintaining, and improving app features;
• Verification, fraud prevention, abuse prevention, and system security;
• Complying with requests from competent authorities when required by law.
• Product analytics (paywall and activation funnels) to improve the app — event names and technical properties only, never amounts or expense content.

4. Storage, retention, and location

Data is stored on cloud infrastructure that may be located in Vietnam or abroad (e.g. hosting providers). When data is transferred outside Vietnam, we apply measures required by Vietnamese law (including notice, risk assessment, contracts, or equivalent mechanisms when required). We retain data only as long as needed for the stated purposes or as required by law; afterward it is deleted, anonymized, or processing is restricted.

5. Sharing with third parties

We may share data with service providers (hosting, email, analytics, security) under contract and for the purposes above; we require them to keep data confidential and not use it for other purposes. Disclosures to competent authorities are made only when legally permitted.

Specifically, the data processors we use include:

• Firebase (Google) — account authentication, data and file storage (e.g. profile photo);
• Groq, Cerebras, and Google Gemini (third-party AI providers) — receive and process: (a) AI Chat: the text you type, to recognize expenses, assets, debts, and loans, and receipt photos you take or pick (sent to Groq only and not stored on our servers), to read the amount; if you use the mic button on iPhone, Apple's speech recognition service turns your voice into text and we only receive that text (Apple may use this voice data to improve its recognition service under Apple's Privacy Policy — iOS states this when asking for permission); (b) AI Insights on Home/Reports: total spending, spending by category, prior-period comparison, and your largest expense with its note, to write spending commentary; (c) Wealth Advisor: names and values of your assets, debts, and loans (including counterparty names you entered), to give financial suggestions. Your account name, email, password, and profile photo are never sent. Data is sent through our servers over HTTPS, only to produce the result returned to you, and never for advertising. Under all three providers' terms, your submitted content is not used to train their AI models: Groq and Cerebras commit to this on every service tier, and for Google Gemini we use a paid tier — Google's free tier is governed by different terms;
• RevenueCat — manages your subscription status; does not process or store payment card details (handled directly by Apple/Google);
• Apple / Google — only if you choose to sign in with Apple or Google, for identity verification;
• Sentry — receives app crash reports and performance metrics; these do not include your name, email, or account ID.
• PostHog — receives product analytics events (for example paywall views, sign-up, first expense) linked to your account ID; does not receive email, amounts, expense notes, or custom category names.

Sending data to the AI providers listed above happens only after you tap to agree inside the app, on a screen that lists what data is sent and names each provider. These providers process the data under their own data-protection terms, which provide protection equal to this policy. You can withdraw that consent at any time in Settings → AI data permission — AI Chat, AI Insights, and Wealth Advisor then stop working, and every other way of entering data is unaffected.

6. Your rights

Under Vietnamese law, you may have the following rights (subject to legal conditions and procedures):

• To be informed about processing of your personal data;
• To consent or withdraw consent (where processing is consent-based);
• To access, view, correct, or request correction of your data;
• To request deletion, restriction of processing, provision of data, or to object to certain automated processing;
• To complain, report violations, or seek remedies as provided by law.

To exercise your rights, use the "Contact" form at the bottom of the website home page, or open the Help Center inside the app. We respond within a reasonable time and as required by applicable law.

7. Children

The service is not directed at individuals who lack civil capacity under Vietnamese law. If we discover unlawful collection, we will delete or stop processing as required.

8. Policy changes

We may update this policy; new versions will be posted with an effective date. Continued use after changes may constitute notice, unless law requires a different form.