Privacy Policy

What we store

• Your account: first and last name, email address, language, email preferences, whether your address is verified, and which version of the Terms of Service and this policy you accepted and when. Your password is stored only as a bcrypt hash, never as the password itself.
• Your records: the transactions you enter or import (amount, currency, date, type, category, description and how it was added) and your savings goals (name, amounts, currency, target date and description).
• Screenshot imports: a count of how many rows each import saved and how many you edited. The screenshot itself is not stored (see below).
• Pocky conversations: your messages and Pocky’s replies, the entries it drafts for you to review, goal changes it proposes, the facts it offers to remember, and each conversation’s currency, timezone and language settings. We also keep technical records of each request (status, token counts, error codes, time) and short receipts that let you undo a save; receipts hold record IDs and version stamps, not amounts or descriptions.
• Pocky memory: the facts you ask Pocky to remember, such as your rent, your pay or a cash reserve you want to keep, up to 30. Each holds a short text in your words, an optional amount, currency and how often it repeats, the conversation it came from, and when it was saved or last changed. Pocky can only offer to remember something; a fact is saved only when you press Remember.
• AI connections: for each personal access token you create, its name, when it was created, last used, revoked and when it expires (90 days after it was created; a token created before expiry was introduced expires 90 days after that change took effect), and a SHA-256 hash of the token. The token itself is shown to you once and is not stored.
• Request logs: like most web services, our server logs each request, including your IP address, the time, the address requested and your browser’s user agent. These logs are kept by our hosting provider, Render.

Screenshots and voice recordings stay on your device

When you import a screenshot, text recognition runs in your browser. The image never leaves your device. The recognised text lines are sent to our server, which turns them into draft rows and sends them back without storing them. Only the rows you confirm are saved.

When you dictate a message to Pocky with the microphone button, speech recognition also runs in your browser. The recording never leaves your device and is not stored. Only the transcribed text, which you can edit before sending, is sent, just like a typed message.

Pocky and AI processing

TermPocket uses third-party artificial intelligence (AI) and large language model (LLM) API providers to power Pocky. Pocky is optional. When you send it a message, our server sends the following information to the provider to generate a response:

• your message and the recent part of the conversation (up to 30 earlier messages);
• the entries currently waiting for your review;
• every fact in your Pocky memory, with every message, whether or not the message is about it;
• the conversation’s currency, timezone and reply language, today’s date and term dates, and whether the message was dictated;
• when Pocky looks up your records to answer a question or plan: the dates, amounts, currencies, descriptions and categories of the matching transactions, totals by category, and your savings goals (names, amounts, target dates and descriptions);
• any amounts or plans you describe, such as pay, rent or a savings target.

Inputs are not automatically anonymized. Processing takes place outside Canada and may be subject to local laws. See Current AI providers for details.

Deleting a conversation in TermPocket removes it from our database; it does not necessarily delete information retained by the AI provider.

Do not include passwords, card numbers or other credentials in a message. If you do not want this information shared with an AI provider, do not use Pocky; the rest of TermPocket works without it.

Current AI providers

Anthropic provides the API used by Pocky (its Claude models), with processing in the United States and possibly other countries, outside Canada. Its commercial terms apply to this integration.

We do not promise a fixed provider retention period or that API inputs are excluded from model training. We will update this section when the provider changes and notify you of changes to how your existing information is used, as described below.

API terms

Provider privacy policy

Other services we use

• Neon hosts the database, in Amazon Web Services’ us-east-1 region in the United States. Everything listed under “What we store” lives there.
• Render runs the server (the API) in Virginia, United States, and keeps its request logs.
• Vercel hosts the website, and Vercel Web Analytics records page visits so we can see which pages are used.
• Resend, a service based in the United States, sends our email from noreply@termpocket.com: the verification link when you sign up, and the weekly report, which contains a summary of your week’s income and spending. You can turn the weekly report off in Settings.
• MailboxLayer (apilayer) may check that your email address can receive mail when you register. It receives the address only.
• Frankfurter provides exchange rates. It receives only the currencies being converted, nothing about you.
• If you connect an AI service of your own with a personal access token, that service receives the totals and savings goals it asks for (goal names, amounts and dates) and handles them under its own terms.

These services also store and process information outside Canada, including in the United States. The AI processing location is listed under Current AI providers.

How we use it

• to run your account and show your records, summaries and goals back to you;
• to send the verification email and, unless you turn it off, the weekly report;
• to answer you through Pocky, when you use it;
• to enforce usage limits, prevent abuse and fix problems.

We do not sell your information, use it for advertising, or share it with anyone other than the services above.

How long we keep it

• Unverified sign-ups: deleted once the verification link has expired (after 30 minutes), and in any case after 24 hours. A job runs about once an hour, so removal can take a little longer.
• Your account and records: kept until you delete them or ask us to delete your account, except as automatic deletion below removes old transactions.
• Automatic deletion: off unless you turn it on in Settings → Automatic deletion. You can choose to keep the last 3, 6, 9 or 12 terms, the current term included; transactions dated before the first kept term are then deleted by a job that runs about once an hour, and this cannot be undone. Only transactions are deleted, not savings goals, Pocky conversations or AI connections. It is not available on the demo account.
• Pocky conversations: kept until you delete them, one at a time or all at once. Deleting a conversation does not delete the transactions you saved from it.
• Pocky memory: each fact is kept until you delete it in Settings → Pocky memory, ask Pocky to forget it and press Forget, or delete your account. Offers to remember a fact expire 24 hours after Pocky makes them. An offer you cancel, or that expires, is replaced or could not be saved, keeps no copy of the fact; offers are deleted 30 days after you decide on them. Forgetting a fact also removes it from every offer to change or forget it; an unanswered offer to remember the same thing in another conversation keeps it until that offer expires (after 24 hours) or you cancel it. Forgetting a fact does not change your conversations: a conversation in which the fact was mentioned keeps those messages, and Pocky still reads them in that conversation, until you delete it. The demo account has no memory.
• Pocky drafts and goal proposals: they expire 24 hours after Pocky proposes them. Expired drafts are removed; goal proposals that were confirmed, cancelled or expired are deleted 30 days later.
• Pocky request records and undo receipts: deleted after 30 days, or sooner. Records used for usage limits are kept for up to 30 days even after you delete your conversations.
• The demo account: it is shared by everyone and reset periodically, which deletes anything added to it.
• Request logs: kept by Render under its own retention period.

Deleting your data

Settings → Danger zone → Clear All Data deletes all of your transactions, all of your savings goals and all of your Pocky conversations (with their messages, drafts and goal proposals) and your Pocky memory. It does not delete your account itself (name, email address, password hash and preferences), your AI connection tokens (revoke those in Settings → AI connections), the import counts, or the short-lived records described above, which expire on their own.

Settings → Danger zone → Delete account deletes your account itself and everything linked to it, at once: your name, email address, password hash and preferences, your transactions, savings goals, Pocky conversations (with their messages, drafts, goal proposals, undo receipts and usage records), your Pocky memory, AI connection tokens and import counts. It asks for your password first. The shared demo account cannot be deleted.

Your choices and requests

You can see and change your records in the app at any time, and you can delete your account yourself in Settings (see “Deleting your data”). You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account, by emailing privacy@termpocket.com from the address on your account. We may need to confirm that the request comes from you.

You can withdraw your consent at any time by no longer using Pocky or by deleting your account.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, if you live in Quebec, the Commission d’accès à l’information du Québec.

Security

Passwords are stored as bcrypt hashes and access tokens as SHA-256 hashes. Stored data is not end-to-end encrypted: people who administer TermPocket can access it, including conversations and Pocky memory. When you sign in, a login token valid for seven days is kept in your browser’s local storage, so anyone using your browser can use your account. Sign out on shared computers. No system is perfectly secure, and we cannot guarantee that your information will never be accessed without permission.

Your browser

TermPocket keeps your login token, a copy of your profile, your theme and your language and display preferences in your browser’s local storage. Signing out removes the login token and profile.

Who TermPocket is for

TermPocket is intended for students and anyone tracking their own money, including teenagers 13 and older with a parent’s or guardian’s permission where required. It is not meant for children under 13. If we learn that we hold an under-13 user’s information without a parent’s permission, we delete it; parents can contact privacy@termpocket.com.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change affects how your existing information is used, we will tell you in the app or by email before it takes effect.

Contact

Mingyu Liu, the developer, is responsible for protecting personal information at TermPocket (the person in charge of the protection of personal information under Quebec law). Contact: privacy@termpocket.com.

Other questions or requests: privacy@termpocket.com.