Privacy Policy

Last updated: November 5, 2026

1. Information We Collect

We collect the following types of information:

• Account Information (only if you sign in): the email address, display name and profile picture provided by Google Sign-In, plus the unique user ID assigned by Firebase Authentication.
• Content You Create: expense records (amount, category, note, date), item / asset records (name, purchase price, purchase date, depreciation settings), subscription records (name, price, billing cycle, renewal date), your custom categories, and app preferences such as currency and language.
• Device Information: device model, operating system version and app version, used only to diagnose crashes and compatibility issues.
• Subscription & Purchase Information (only when you use in-app subscriptions/purchases): when you subscribe or make an in-app purchase, purchase and subscription data — such as subscription status, plan, renewal date, transaction identifiers and the app-level user ID used to link purchases to your account — is processed by our subscription provider RevenueCat. Your actual payment instrument (e.g. credit card) is handled entirely by the Apple App Store or Google Play and is never sent to us or to RevenueCat.

We do not collect your contacts, photos, precise location, phone number, SMS messages, or bank / payment credentials. PocketBill: Sub Tracker does not connect to your bank accounts. Payment for subscriptions and in-app purchases is handled entirely by the Apple App Store, Google Play and our subscription provider RevenueCat; we never receive your card or payment credentials.

2. How We Use Your Information

We use your information to:

• Provide the core features: expense tracking, asset depreciation and subscription management
• Back up and sync your records across your own devices when you are signed in
• Diagnose crashes and improve app stability and features
• Respond to your support requests

We never use your data for advertising, profiling or credit scoring, and we do not run any advertising or tracking SDKs in the app.

Legal basis for processing (GDPR Art. 6): performance of a contract — providing the tracking, backup and sync features you use; your consent — optional Google sign-in and cloud sync, which you can withdraw at any time as described in Section 7; our legitimate interests — diagnosing crashes and keeping the app secure and stable; and legal obligations where applicable. We rely on legitimate interests only where they are not overridden by your rights.

3. Where Your Data Is Stored

• On your device: all records are written to the app's local storage first, so PocketBill: Sub Tracker works fully offline.
• In the cloud (only when signed in): a copy is synced to Google Cloud Firestore under the private path users/{your user ID}. Security rules ensure that only your own signed-in account can read or write that path.

4. Data Sharing

We do not sell, rent or trade your personal data. Data is shared only with the following service providers, strictly to operate the app:

• Google Sign-In: to verify your identity when you choose to sign in
• Firebase Authentication (Google): to manage your account session
• Cloud Firestore (Google): to store and sync your records
• RevenueCat: to manage in-app subscriptions and purchases, validate receipts and restore purchases. Subscription and purchase data is transmitted to RevenueCat (see RevenueCat Privacy Policy).

We may also disclose information if required to do so by law or a valid legal request.

5. Data Security

We apply industry-standard safeguards, including encrypted transmission over HTTPS/TLS, authentication through Google Sign-In, encryption at rest on Google's infrastructure, and per-user Firestore security rules that block access from any other account.

6. Data Retention

Cloud data is retained for as long as your account exists. Local data remains on your device until you delete the records or uninstall the app. When you request account deletion, your data is removed as described on our Account & Data Deletion page.

7. Your Rights and Choices

• Use without an account: you can use every core feature without ever signing in
• Access and correction: all of your records are visible and editable inside the app at any time
• Stop syncing: sign out from Settings → Account; new changes then stay on your device only
• Deletion: request full deletion of your account and cloud data at any time — see Account & Data Deletion
• Withdraw consent: where processing is based on your consent (for example optional sign-in and cloud sync), you can withdraw it at any time by signing out and requesting deletion; withdrawal does not affect processing carried out before it.
• Lodge a complaint: you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have mishandled your personal data.

To exercise any of these rights, email us at bb833dong@gmail.com. We respond to rights requests without undue delay and at the latest within one month of receipt; for complex requests this may be extended by two further months, in which case we will let you know.

8. Children's Privacy

PocketBill: Sub Tracker is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Transfers

If you sign in, your data is processed on Google Cloud infrastructure and may be stored in data centers outside your country of residence. Google maintains appropriate safeguards for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with a new "Last updated" date. Material changes will also be announced in the app.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact: bb833dong@gmail.com