Who can actually see your data?
You type your savings balance, your debts, who owes you money into this app. Here's what actually happens to that data — not a marketing promise.
1. Encryption — the infrastructure guarantees it, not our word alone
PockIQ runs on Firebase / Google Cloud. Your data is encrypted with AES-256 at rest, and TLS in transit between the app and our servers — the same way a bank protects an online transaction.
2. The AI reads your expenses — but doesn't know who you are
When you type “coffee 45k this morning”, that sentence is sent to the AI to auto-categorize it. The AI never receives your name, email, or any identifying information — only the exact text you typed and your list of expense categories.
3. Who on the team can see your numbers?
As a rule: no one, not even the developer who built this app. Every data access goes through Firebase Authentication — every request needs a token proving it's really you. There is no shortcut that reads Firestore directly outside that flow.
4. You're in control
Permanent deletion — Delete your entire account and data any time in Settings. Fully deleted, no copy kept.
Data export — Download all your data to your device.Coming soon
5. Why we haven't bought an outside security certification
An independent SOC 2 audit costs tens of thousands of dollars a year — reasonable for a company with hundreds of employees. At the scale of a small team, that money is better spent making the product better. Instead, we chose full transparency: state exactly what runs today, so you can verify it yourself any time.