Pocketpilot: Privacy Policy

Privacy Policy for PocketPilot

Effective Date: October 26, 2026 | Last Updated: October 26, 2026

1. Introduction & Core Philosophy

Welcome to PocketPilot ("we", "our", or "the app"). PocketPilot is an offline-first personal expense tracking and budgeting application designed with a zero-knowledge architecture.

Our core belief is that your financial data belongs exclusively to you. PocketPilot does not require you to create an account, does not connect to external servers, and does not sell or transmit your financial information.

2. Zero Internet Architecture (100% Offline)

PocketPilot is engineered without the android.permission.INTERNET permission in its Android Manifest. Because the app has no internet capability:

  • No personal or financial data is ever sent to any remote server or third party.
  • We do not operate backend servers, databases, or user telemetry trackers.
  • All your accounts, budgets, goals, and transaction records remain strictly on your local device storage (SQLite/Room).

3. Permissions & Device Access

PocketPilot adheres strictly to the principle of least privilege. The specific permissions and system capabilities utilized are described below:

A. Notifications (POST_NOTIFICATIONS - Android 13+)

Purpose: Used solely to deliver local scheduled daily expense reminders, budget threshold alerts, and review notifications when a new transaction is detected.

Control: This permission is optional. You can grant or revoke notification permissions at any time through your device system settings.

B. Notification Access (NotificationListenerService - Optional)

Purpose: If and only if explicitly enabled by the user, PocketPilot monitors incoming payment notifications from user-selected payment and banking applications to detect expenses and generate draft entries for review.

Privacy Guarantees:

  • Opt-in only: Disabled by default; requires explicit enablement in Android System Settings.
  • Strict filtering: Only notifications from applications you explicitly choose to monitor are analyzed.
  • No sensitive message access: The app actively ignores and discards OTPs, authentication codes, bank balance alerts, PINs, and personal messages.
  • No raw message storage: The raw text of your notifications is never logged or stored. Only parsed transaction details (merchant name, amount, date/time) are saved locally as pending drafts.
  • Mandatory user confirmation: No transaction is ever added to your permanent ledger automatically without your manual approval.

C. Biometric Authentication (App Lock)

Purpose: Allows you to lock the application using your device fingerprint, face unlock, or device PIN/pattern.

Privacy: We use the standard Android BiometricPrompt API. The app never accesses, receives, or stores your biometric templates or passwords. Authentication is processed entirely by the Android operating system hardware.

D. Storage & Backup (Storage Access Framework)

Purpose: Allows you to export your data to CSV or JSON backup files, and restore previously created backups.

Privacy: PocketPilot does not request broad storage permissions (such as READ_EXTERNAL_STORAGE or MANAGE_EXTERNAL_STORAGE). It uses Android's native system file picker, meaning the app only accesses the specific file you choose to create or open.

4. Permissions We Never Request

To eliminate ambiguity, PocketPilot explicitly does NOT request or use:

  • SMS Permissions: We do not read, receive, or send SMS messages.
  • Contacts: We have no access to your address book.
  • Location: We do not track or access GPS or network location.
  • Camera or Microphone: We do not record photos, audio, or video.
  • Device ID / Phone State: We do not collect IMEI, phone numbers, or call logs.

5. Data Retention & Deletion

Because all data resides exclusively on your local device:

  • In-app deletion: You can completely wipe all transaction records, accounts, and settings at any time by navigating to Settings > Data & backup > Delete all data.
  • App uninstallation: Uninstalling the PocketPilot app from your device automatically and permanently deletes the local SQLite database and all associated records.
  • Exported files: Any CSV or JSON backup files exported by you remain in the location you saved them until you delete them manually.

6. Third-Party Services & SDKs

PocketPilot does not integrate any third-party analytics SDKs (such as Firebase Analytics, Mixpanel, or Facebook SDK) and does not display third-party advertisements. There are no third-party trackers integrated into the app.

7. Children's Privacy

PocketPilot does not knowingly collect or solicit any personal information from children under the age of 13 (or under the applicable age of consent in your jurisdiction). Since the app operates entirely offline without data collection, no personal data from minors is ever transmitted or processed.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

9. Contact Us

If you have any questions, feedback, or concerns regarding this Privacy Policy or your data privacy in PocketPilot, please reach out to us at:

Email: socialmail132@gmail.com