Privacy Policy

Last updated: 27 September 2026

This Privacy Policy explains how Pocket Locker ("the app", "we", "us") handles your information. It describes exactly what the app does — no more, no less.

The short version

Everything you add is stored on your device. We don't run any server that receives your documents, and we can't see, access or recover them.
Sensitive text (titles, numbers, notes, passwords) is encrypted with AES-256 on your device.
Scanning and auto-fill happen on your phone — your document images are not sent to us.
Backup is optional and off by default. If you turn it on, it goes to a private app folder in your own Google Drive.
No ads, no accounts, and we never sell or share your data.

What's stored, and where

Everything you add — titles, notes, reference and account numbers, passwords, folder names, and any photos or PDFs you attach — is stored inside the app's private storage on your device.

Sensitive text fields (titles, provider names, notes, account/reference numbers, extra fields like IFSC or UPI ID, folder names and passwords) are individually encrypted with AES-256 before they're written to the app's local database. Dates and amounts are stored without this extra encryption so the app can sort by them and schedule reminders.
Photos and PDFs you attach are saved in the app's private folder on your device, which other apps cannot open. They are protected by your phone's own security and the app lock; they are not individually encrypted by the app.
The encryption key is generated on your device and kept in your phone's secure storage (the iOS Keychain or Android Keystore).
App settings (such as reminders, Light/Dark mode and auto-lock time) are stored on your device only.

Document scanner and auto-fill

When you scan a document or use auto-fill, the image is processed on your phone using the operating system's built-in tools — Apple's VisionKit and Vision on iPhone, and Google's ML Kit (through Google Play services) on Android. The recognised text is shown to you to review; nothing is filled in until you confirm it.

Your document images and the text read from them are not sent to us.
On Android, Google Play services may download the scanner or text-recognition component the first time you use it, and Google's ML Kit may send Google anonymous diagnostic and usage information (for example device model, OS version and performance data) — not the content of your documents. See Google's ML Kit data disclosure.

Optional Google Drive backup

Backup is off by default. If you choose to turn it on:

You sign in with your own Google account through Google's standard sign-in page. We never see your Google password. The sign-in token that lets the app back up is kept in your phone's secure storage.
Your app database (with its encrypted fields), your attached photos and PDFs, and the encryption key needed to restore them are uploaded to the hidden application data folder in your Google Drive. This folder doesn't appear in your normal Drive and can only be accessed by Pocket Locker signed in to your account — not by other apps or by us.
We request only the drive.appdata permission — the most limited Drive permission, which cannot see, read or change any of your other Drive files.
Because the key is stored in the same private folder so that you can restore on a new phone, your backup is protected by the security of your Google account. We recommend turning on 2-Step Verification for your Google account.
You can disconnect backup at any time in the app, or remove Pocket Locker's access from your Google Account's security settings.

Reminders

Expiry and note reminders are scheduled as local notifications on your device. They are not sent through any server of ours. Notification text includes the document's title so you know what's due.

Sharing, copying and exporting

Your data only leaves the app when you choose to move it — for example when you copy a value, share or download an attachment, or export your vault as a ZIP file (Premium). When you do, it goes to the app or place you pick (such as your Photos, Files, or a messaging app), and that destination's own privacy practices apply.

Premium subscription

If you upgrade to Premium, payment is handled entirely by Apple (App Store) or Google (Google Play). We never see or store your payment details. The app asks the store whether your subscription is active so it can unlock Premium features. You can manage or cancel your subscription in your App Store or Google Play subscription settings.

Device permissions we ask for, and why

Permission	Why
Camera	To take photos of documents and use the document scanner.
Photos	To attach photos you choose from your gallery, and to save a document to your Photos when you tap Download.
Face ID / Fingerprint	To lock the app. This is handled entirely by your phone's operating system — the app never receives your biometric data.
Notifications	To show reminders you've set for expiring documents and notes.

None of these permissions are used to collect or send data to us.

What we don't do

We don't include any advertising or third-party analytics or tracking tools in the app.
We don't show ads, and we don't share, sell or rent any information to advertisers or data brokers.
We don't have user accounts, so there's no central record of who uses the app or what they've stored.

Deleting your data

A document: deleting it moves it to the in-app Trash, where it's permanently removed after 30 days, or sooner if you empty Trash yourself. Its attachments and reminders are removed with it.
Everything: Settings → Delete Vault permanently erases every document, attachment, reminder and setting on your device.
Uninstalling the app removes its data from your device. On iPhone, the encryption key may remain in the iOS Keychain, but it cannot be used without the deleted data.
Google Drive backup stays in your Drive until you delete it — for example by removing Pocket Locker's app data from your Google Drive settings (Manage apps).

We can't recover deleted data for you, because we never have a copy of it. If you want a safety net, turn on Google Drive backup.

Children's privacy

Pocket Locker is not directed at children, and we do not knowingly collect information from children — or from anyone else.

Changes to this policy

If this policy changes — for example, if a new feature affects how data is handled — we'll update this page and the "Last updated" date above.

Contact us

Questions about this policy or how Pocket Locker works can be sent to support@pocketlocker.app.