Privacy by design, not by promise.
A privacy promise you cannot check is worth what the company saying it is worth. This page lists every path by which anything can leave your device, tells you how each one is enforced, and shows you how to confirm all of it yourself.
Encryption at rest
Your native app database is encrypted through sqlite3mc in SQLCipher-compatible mode. PocketVault Finance stores high-entropy database key material in the device's native secure storage.
Technical specifications
Platform Key Storage
Four things can leave this device, and you start all four
The app asks for no name, no email, no phone number and no location, and there is no account to create. What follows is the complete list of paths by which anything reaches us at all. It is the same list the app shows you under Settings, Privacy & trust. If something is not on it, the app does not do it.
- Feedback you type into this website. The app opens our public form in your browser. We receive the message and a reply email if you choose to give one. Deleted within 90 days.
- A diagnostic log, if you send one. Emails, phone numbers and file paths are replaced with [REDACTED] before it leaves, and it is capped at 50 KB. The app shows you the contents first, and you can send the message without it. Deleted within 90 days.
- The AI model download, once. A static file fetch from Hugging Face, or our Cloudflare R2 mirror as a fallback. After it lands, inference never touches the network again.
- A purchase receipt, if you buy a plan. The App Store or Google Play handles the receipt and store account identifier. Entitlements are checked on your device, and no financial data goes to the store.
On-device AI
A cloud app has to ship your transactions to a server before its AI can read them. PocketVault Finance runs Gemma models on your phone, so the reading happens where the data already is.
Biometric authentication
Protect access with fingerprint or face recognition via your device's native biometric system. PIN fallback uses PBKDF2-HMAC-SHA256 with 600,000 iterations.
Your data, your control
Back up your entire vault with password-based encryption and restore it on any device. Export your data or delete everything with one tap. Since there's no cloud copy, deletion is permanent and complete.
Backup
Encrypted, password-protected
Restore
On any of your devices
Delete
One tap, permanent
Keep your finances to yourself.
Every feature you need is free, and there's no account to create. Download it and your data stays on your device.