Privacy Policy

Last updated: 13 November 2026

PocketLog, an independent sole trader business in Scotland, United Kingdom (hello@pocketlog.co.uk) ("we") is the data controller for PocketLog. This policy explains what personal data we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018. Contact: hello@pocketlog.co.uk.

What we collect

• Account: email address, a password (stored only as a secure hash), and if you choose to give them, your name, mobile number, country, city and occupation.
• How you found us: the source you pick at sign-up.
• Your entries: the income and expense records, categories and budgets you create.
• Payments: your plan, amounts and Stripe customer/subscription IDs. Stripe processes your card details; we never see them.
• Technical: a login cookie (strictly necessary, so no consent banner is needed) and basic server logs.

Why we use it (lawful basis)

• To provide the Service (contract): sign-in codes, storing your entries, analytics, and the monthly review if you are on Pro and have it turned on.
• To take payments and keep records (contract and legal obligation).
• To understand which channels bring users (legitimate interests), using the "how did you hear about us" answer in aggregate.
• Tips, offers and product updates (consent): only if you ticked the box. You can withdraw consent anytime under Account → Email preferences or through the unsubscribe link in any email.

We do not sell your personal data and never share your entries.

Who processes it for us

Fly.io (hosting; servers in London, UK), Stripe and Google Play (payments), and Hostinger (sending email). Some of these providers may process data outside the UK. Where they do, they use safeguards approved under UK law, such as the International Data Transfer Addendum.

How long we keep it

We keep your data while your account is open. When you delete your account (see how), it is deleted straight away and removed from backups within 30 days. Payment records, with your name and email removed, are kept for 6 years for tax purposes.

Your rights

You can ask to access, correct, delete or export your data, or object to how we use it. Email hello@pocketlog.co.uk and we will reply within one month. If you are unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Passwords are hashed. Sessions use secure, HTTP-only cookies, and all traffic uses HTTPS.