Privacy Policy

Poko Plan (“we”, “us”) provides a personal finance app at app.pokoplan.com and this website at pokoplan.com. This policy explains what we collect, why we collect it, and the choices you have.

Information we collect

• Account details — email address, password hash (if you use password sign-in), and verification status.
• Ledger data you create — accounts, categories, transactions, budgets, settings, and optional attachments (such as receipt images or PDFs).
• WhatsApp capture (optional) — if you link a phone number, message content you send to our WhatsApp business number (text, short voice notes, and receipt photos) may be processed to create or update transactions.
• Technical data — session cookies, basic request logs, and device signals needed to keep you signed in and operate the service securely.

How we use information

• Provide, secure, and improve the Poko Plan app and website.
• Authenticate you (including magic links and password reset emails).
• Power optional AI features (in-app chat companion and WhatsApp parsing) so we can help you log and understand your money.
• Store backups and attachments you choose to upload when cloud storage is configured.
• Respond to support requests sent to us.

AI and third-party processors

Some features send relevant content to subprocessors so the product can work:

• OpenAI — used for optional AI parsing and chat assistance. Content you submit to those features may be processed under OpenAI’s terms and policies.
• Meta WhatsApp Cloud API — used when you enable WhatsApp capture; message delivery follows Meta’s platform rules.
• Email delivery (MailGuardian) — used to send auth and account emails from [email protected].
• Object storage (S3-compatible) — used for optional attachments and cloud backups.
• Database hosting — your account and ledger data are stored in our managed database.

We do not sell your personal information. We use service providers only as needed to run Poko Plan.

Cookies and sessions

The app uses HTTP-only cookies for access and refresh sessions so you can stay signed in. We do not use advertising trackers on the marketing site.

Data retention

We keep your account and ledger data while your account is active. WhatsApp message history may be retained for a limited period for support and product operation, then deleted or expired. You may request account deletion by contacting us.

Your choices

• Update or delete transactions and attachments in the app.
• Unlink WhatsApp from Settings if you no longer want capture.
• Contact us to request access, correction, or deletion of your account data.

Security

We use industry-standard practices such as encrypted transport (HTTPS), hashed passwords, and scoped session cookies. No method of transmission or storage is perfectly secure; please use a strong unique password and protect access to your email and devices.

Children

Poko Plan is not directed to children under 13, and we do not knowingly collect personal information from children.

International users

We may process data in countries where we or our providers operate. If you use Poko Plan from another region, you consent to that processing as needed to provide the service.

Changes

We may update this policy from time to time. We will change the “Last updated” date above and, when changes are material, provide additional notice in the app or by email when appropriate.

Contact

Questions about privacy: [email protected]