Privacy Policy

1. In short

• The financial data you enter (entries, Pockets, investments and so on) is stored in your account on the app’s server, so it works across devices and survives a phone change.
• Photos attached to entries stay on your device only and are not uploaded.
• Slip and receipt scanning reads text on the device. Photos are not uploaded.
• No ads, no selling of data.
• Support chat: an AI assistant replies first, and you can ask for a person at any time.
• Usage statistics and using chats to train AI happen only if you allow them (off by default). Turning them off deletes what was collected.
• You can export your data as CSV, and delete your account with all its data, from inside the app.

2. Data stored in your account

What you enter is saved in your account on the app’s server, including:

• income and expenses, amounts, categories, dates, notes and tags (attached photos stay on your device);
• Pockets, goals, budgets, subscriptions, investments, debts and wishlist items;
• member names you enter for shared Pockets or kids’ Pockets;
• lottery numbers, utility meter readings, gift envelopes and app settings.

This data is used only to show and calculate things for you in the app. We do not use it for ads or sell it, and access is limited to what is needed to run the service.

3. Camera and photos

The app asks for camera and photo library access only when you choose to take or pick a photo, in order to (a) scan slips, receipts or text, and (b) attach photos to entries.

Text reading runs on the device (Apple Vision on iOS, Google ML Kit on Android). Photos do not leave your device. Attached photos are copied into the app’s storage and deleted when you delete the entry.

If you decline, the app still works; only scanning and photo attachments are unavailable.

4. Data sent over the internet

• Exchange rates: once a day the app requests rates from open.er-api.com (ExchangeRate-API). No personal data is sent, but the provider may see your device’s IP address as part of any internet connection.
• Service logos: on the Subscriptions screen the app loads service icons (such as Netflix or Spotify) from Google’s icon service (google.com/s2/favicons), sending only the service’s domain name — no amounts or personal data.
• Sharing/export: when you export CSV or a backup, the data goes to the app you choose (email, chat, files) under that app’s policy.

5. Your account

Using the app requires an account. We store:

• account data: display name, and the email or user ID provided by Apple/Google, or the phone number used for the OTP code;
• the in-app data in section 2, so you can use several devices;
• minimal device data: device model and last sync time, to show your signed-in devices.

This data is used only to verify your identity, provide the app, and let you invite members to shared Pockets.

5a. Support chat and the AI assistant

When you message us in "Chat with our team", we keep the messages, times and who replied in your account so we can answer and fix problems.

The AI assistant replies first, using only our app help articles. We send our AI provider (DeepSeek) just your latest question (with names, phone numbers, emails, card and account numbers removed) and the relevant help articles. Your chat history, account data, balances, entries and usage behaviour are not sent. AI answers may not be fully accurate, so ask our team to check anything about money or your account.

You can tap "Talk to a person" at any time, and our staff can see the conversation in your chat. Never send passwords, OTP codes or card numbers in the chat.

5b. Data to improve the app and train AI (with your consent)

Nothing is collected by default. You can turn each on separately in Profile → Your data:

• Usage statistics: screens opened, features used, whether saving succeeded, and a weekly spending summary by category in ranges (e.g. "Food 500–2,000"). No notes, names or exact amounts.
• Using support chats to train AI: your questions and our staff answers, with personal details removed, to improve the AI assistant and to build our own AI model in the future.

This data stays on our own servers and is used only to improve the app and train our own AI. It is not shared with outside providers (including AI providers), is not linked directly to your name or account (it uses a pseudonymous code that cannot be reversed without the server key), is never used for ads and is never sold.

You can withdraw consent at any time; turning an option off deletes that data immediately. Saying no does not affect your use of the app.

6. Legal bases

• Contract: to provide the services you request, such as accounts and backups.
• Consent: camera and photo access (withdraw in device settings), and usage statistics / using chats to train AI under section 5b (withdraw in the app).
• Contract: answering your support chat with the AI assistant and our staff under section 5a.
• Legitimate interests: keeping our systems secure and fixing problems.
• Legal obligation: where required by law or a government order.

7. Disclosure

We do not sell or rent personal data. We may disclose data only to:

• service providers that help us run the service, such as a cloud provider for backups and an SMS provider for OTP codes (to be named in this policy when accounts launch), under data protection agreements;
• our AI provider (DeepSeek), to generate replies in the support chat, receiving only your latest question with personal details removed and our help articles;
• shared Pocket members you invite, who will see entries in that Pocket;
• public authorities when required by law.

8. International transfers

Some providers may have servers outside Thailand, such as our AI provider (DeepSeek), which may process data abroad. We send only what is needed, remove personal details first, and choose providers with adequate data protection standards as required by the PDPA.

9. Retention

• Attached photos and on-device settings: until you delete them or the app.
• Account data, in-app data and support chats: while your account is active, and deleted within 30 days after you request account deletion, unless the law requires longer retention.
• Usage statistics: at most 2 years or until you withdraw consent. Q&A examples for AI training: until you withdraw consent or delete your account.

10. Security

We use appropriate measures such as encryption in transit and access controls. We recommend setting a screen lock and keeping backup files (which are not encrypted) somewhere safe.

11. Minors

The "kids’ Pocket" feature is designed to be used and managed by parents. Minors using the app themselves should have parental consent as required by law.

12. Your rights

Under the PDPA you have the right to:

• access your data and get a copy;
• data portability (you can use backup or CSV export right away);
• correct your data;
• have your data deleted or destroyed;
• restrict or object to processing;
• withdraw consent at any time;
• complain to the Office of the Personal Data Protection Committee (PDPC).

To exercise your rights, contact contact_support@trackpodme.com. We will reply within 30 days.

13. Changes

We will announce significant changes in the app before they take effect, and show the effective date at the top of this policy.

14. Contact

TrackPodMe developer (independent developer)

Email: contact_support@trackpodme.com

Use this address for questions, problem reports and personal data requests.