Privacy policy for Pocket PnL
Last updated: October 17, 2026
Pocket PnL ("the app") is a personal income and expense tracker. This policy explains, plainly, what happens to your information when you use it.
The short version: the app has no account system, and we have no server holding your financial data. Everything you enter stays on your iPhone and, if you're signed into iCloud, syncs through your own private iCloud storage that only you can read.
Information we collect
We collect nothing. There is no sign-up, no email address, no password, and no profile. We do not operate a database of users, because there are no user accounts.
The entries you create (amounts, notes, categories, cards, payment methods, dates, and any receipt photos you attach) are stored in two places, neither of which we can access:
- On your device, so the app works instantly and offline.
- In your own iCloud private database, if you are signed into iCloud. This is your personal Apple storage. Apple's CloudKit keeps it private to your Apple Account; the developer cannot read, query, or export it.
If you are not signed into iCloud, the app still works and your data simply stays on your device.
Data we do not collect
We do not collect or use location data, contacts, health data, calendar data, or advertising identifiers. Receipt photos you choose to attach are stored like the rest of your entries (on your device and in your own iCloud) and never reach us. The app does not read the rest of your photo library.
The app contains no analytics SDK, no advertising SDK, and no crash-reporting service. We do not track you across apps or websites, and we do not use your data to train AI models.
We do not sell, rent, or share your personal or financial information with anyone, for any purpose.
Permissions the app may ask for
All of these are optional. The app is fully usable if you decline them.
Microphone and Speech Recognition: used only for the optional "Quick Add" feature, where you can say a transaction out loud instead of typing it. Where your device supports on-device speech recognition, the audio is transcribed entirely on your iPhone and never leaves it. On devices or languages where on-device recognition is unavailable, iOS falls back to Apple's speech recognition service, which means the audio is processed by Apple under Apple's privacy policy. We never receive the audio or the transcript. Recording only happens while you are actively using Quick Add.
Camera: used only to scan a receipt. The text on it is read on your iPhone by Apple's built-in text recognition, to fill in a draft entry you check before saving. The photo is kept with that entry. Before it is saved, the app shrinks it and strips everything but the picture itself, including the location and camera details your iPhone records with a photo.
Photos: when you choose an existing photo of a receipt, iOS's own picker hands the app that one photo and nothing else; the app has no access to your library. If you share an entry as an image and tap "Save Image", iOS asks separately for permission to add that image to your library. The app never reads from it.
Notifications: used only for the daily reminders you choose to set. These are scheduled locally by your iPhone. There is no push server, and we are not notified whether you open them.
Network connections the app makes
The app talks to exactly three things:
- Apple's iCloud (CloudKit), to sync your entries to your own private storage. This is between your device and Apple.
- frankfurter.app, a public exchange-rate service, used only when you record an entry in a currency other than your home currency. The request contains only the currency codes and a date (for example, "EUR to CAD on 2026-08-03"). It never includes your amounts, notes, categories, or any identifier belonging to you.
- Apple's App Store, only if you look at or buy Pocket PnL Pro. The purchase is made and verified by Apple, and your purchase history stays with your Apple Account. We receive no payment details and no information about who you are.
This website
This website sets no cookies, runs no analytics, and loads nothing from other companies: its fonts, images and scripts are all served from this site. The interactive demo on the home page runs entirely in your browser and sends nothing anywhere. The site is hosted on Netlify, which keeps standard server logs (such as IP addresses and the pages requested) to run and protect its service, under Netlify's privacy policy. We don't use those logs to identify or follow visitors.
Legacy data from earlier versions
Earlier versions of Pocket PnL stored data in a hosted database and required an account. That approach has been retired, and as of version 1.4 the app contains no code for it at all: there is no account system, and the only service outside Apple that the app contacts is the exchange-rate lookup described above.
How long your data is kept
For as long as you keep it. Because we hold nothing, there is no retention period on our side.
Deleting your data
Open Settings → Backup & Sync → Delete All Data in the app. This removes your entries, receipt photos, categories and cards from the device and from your iCloud storage. It is immediate and cannot be undone.
Deleting the app itself removes the on-device copy. Note that if you have not been signed into iCloud, that on-device copy is the only copy, and deleting the app will permanently remove it.
Children
The app is rated 4+ and is safe for all ages. It collects no data from anyone, including children.
Changes to this policy
If this policy changes, the "Last updated" date above will change with it. Material changes will be noted in the app's release notes.
Contact
Questions, concerns, or requests about privacy:
We aim to respond within a few days.