Privacy Policy

HomePocket (homepocket.money and the HomePocket apps for iPhone and Android) is operated by Eastframe Technology LLC, Boston, Massachusetts. This policy explains what HomePocket collects, who can see it, and how you can remove it.

What we collect

• Your account: your name and email address, and a salted hash of your password (never the password itself). If you sign in with Apple or Google, we receive an identifier for that account, your name and email address (Apple may give a private relay address), and the sign-in tokens they issue; never your Apple or Google password. With two-step verification, we email you one-time codes; if you use an authenticator app instead, we keep its secret and your backup codes, encrypted.
• Your bank data, through Plaid: when you connect a bank, we receive the accounts you choose (name, type, the last four digits, the institution, balances and credit limits) and their transactions (date, amount, merchant, category and whether they are pending). We never see or store your bank username or password. See Plaid below.
• Apple Card, through Apple Wallet: if you add Apple Card in the iPhone app, and allow it when your iPhone asks, the app reads your Apple Card, Apple Cash and Apple Savings accounts (name, type, balances and credit limit) and their transactions (date, amount, merchant, merchant category and whether they are pending) from Wallet on your iPhone, using Apple's FinanceKit, and sends them to HomePocket. It reads, never pays or moves money. Removing Apple Card on the Accounts screen deletes those accounts and their history; you can also withdraw the permission in your iPhone's Settings, under Privacy & Security.
• What you add: manual and cash accounts and their activity, notes, categories, rules, plans, goals, and whether each expense is Personal or Household.
• Your household: who is in it, and the invite links you create. Invites are links you send yourself; we don't email anyone.
• Settings and sessions: your preferences (theme, colours, hidden categories, the transactions you marked reviewed, which only you see) and, for each signed-in session, a session cookie with the IP address and browser or device it came from, so we can keep you signed in and spot misuse.

Face ID or fingerprint unlock in the apps is handled by your phone; we never receive biometric data. We don't use advertising, analytics or tracking tools, and we don't read your contacts, photos or location.

How we use it

Only to run HomePocket for you: show your balances and spending, sort expenses into Personal and Household, track plans and goals, keep your data in sync with your bank, and keep your account secure. We do not sell, rent or share your personal or financial data, and we do not use it for advertising or to build profiles for anyone else.

Who can see it

Everything on your own accounts (balances, history, account names) is visible to you alone. The people in your household (up to four) see only what is shared:

• expenses you mark Household: what, how much, when and who paid, but not the account it came from unless you choose to show that account's name;
• joint accounts, which you or another member chose to share with the household, with their balances and history;
• the household plan, household goals, and household categories and rules.

Suggestions, rules and history never share anything by themselves: a private expense becomes visible only when its owner marks it Household. Other members see your name, never your email address or sign-in details.

The few people who run HomePocket (its administrators) can see your name, email address, sign-in methods, when you joined and last signed in, your household's size, your language and how many bank connections you have. The administration screens never show your accounts, balances, transactions or plans.

Plaid

HomePocket uses Plaid Inc. to connect to your bank. You sign in to your bank in Plaid's own screen, and Plaid gives us read-only access to the data listed above. HomePocket can't move money. Plaid's handling of your data is covered by the Plaid End User Privacy Policy. Removing a bank connection in HomePocket also tells Plaid to revoke our access.

Where it is stored and how it is protected

Your data is stored in a database hosted by DigitalOcean in the United States, with automatic backups, and is served over HTTPS through Cloudflare. The access tokens Plaid issues for your bank connections are encrypted (AES-256-GCM) and never leave our servers. Connecting a bank requires two-step verification, with a code sent by email or from an authenticator app. Who may see what is enforced on our servers, so another member's private data is never sent to your device. The only other services involved are the ones described here: Plaid; Twilio, which sends our verification-code emails (it receives your email address and the code, nothing else); and Apple or Google if you sign in with them.

Keeping and deleting your data

We keep your data while you have an account. You can remove a bank connection on the Accounts screen at any time: its accounts and transactions are deleted and Plaid's access is revoked. You can also choose which of a bank's accounts HomePocket reads; the ones you untick stop being shared and are deleted with their history. You can also delete your manual activity, hide expenses, delete a hidden transaction for good (for a bank transaction we keep only its bank reference, so it isn't imported again), and disconnect Apple or Google from Settings.

To delete your account, go to Settings, then Delete account. We immediately revoke every bank connection you made and delete your account, your bank data and everything you added. That includes the accounts you connected, joint ones too, and their Household expenses; the other members keep their own accounts and data. You can also email [email protected] from the address you sign in with, and we do the same within 30 days. Deleted data ages out of our backups within a few weeks. You can also ask us for a copy of your data or to correct it.

Children

HomePocket is for adults. It is not directed to children under 13, and we don't knowingly collect their data.

Changes and contact

If we change this policy, we'll update the date above, and tell you in the app before any change that affects how your data is shared. Questions or requests: [email protected], or Eastframe Technology LLC, Boston, Massachusetts, United States.