Privacy Policy

Effective 20 October 2026

In short: we keep your account details and the money records you choose to sync, only so you can use Piggy Pocket on your devices. We don't show ads, we don't use tracking or analytics tools, and we never sell or share your data for marketing. You can delete your account and all of its data from inside the app at any time.

Who we are

Piggy Pocket is a money-tracking app for iPhone, iPad and the web, together with this website (piggypocket.id) and the sync service at api.piggypocket.id. "We" means the people who run Piggy Pocket. Contact: support@piggypocket.id.

What we collect

Account details. Your email address, and your password if you create one. We store the password only as a one-way hash, so nobody can read it.
Sign in with Apple. If you choose it, Apple gives us your email address (which can be a private relay address that Apple makes for you) and an identifier for your Apple account. We also keep a token from Apple, encrypted, so that when you delete your account we can tell Apple to remove Piggy Pocket's access. We don't receive or keep your name from Apple.
Sign in with Google. If you choose it, Google shares your email address, name and profile picture. We keep only your email address and an identifier for your Google account; your name and picture are not stored.
Your name, if you add one. The app can greet you by name. This is optional: you can type a name during setup or in Settings › General › Your name. It stays on your device and, if you sign in, syncs with your other app settings. It can be up to 40 characters, and you can change or remove it at any time.
Your money data, when you sign in to sync. The accounts, categories, transactions and their notes, recurring payments, budgets, exchange rates and app settings that you enter. We store them so they can sync between your devices.
Technical logs. When the app talks to our server we record your IP address, the type of device or browser, the request and the time. We keep these logs for 5 days to keep the service secure and to fix problems.

We do not collect your location, contacts, photos, bank logins or messages, and we do not read your email. Your passcode and theme stay on your device and are never sent to us.

What stays on your iPhone

Voice. When you add records by voice, Apple's speech recognition turns what you say into text. On iOS 26 and later this always happens on your iPhone. On earlier versions it happens on your iPhone when the phone supports it; otherwise Apple's speech service processes the audio under Apple's own privacy policy, and the app tells you when that is the case. We never receive your voice or any recording.
Receipts. Receipts and payment screenshots are read on your iPhone with Apple's Vision. The app doesn't keep the photos and never sends them to us; only the records you choose to save are kept.
Imported files. CSV and Excel files you import from other apps are read on your iPhone. Only the records you import are kept.

How we use it

To sign you in and sync your data between your devices.
To send account emails: address verification and password reset. We don't send marketing emails.
To protect the service from abuse, for example by limiting repeated login attempts.
To answer you when you contact us.

Where your data is stored, and who helps us

We use a small number of service providers. Each one handles your data only to provide its service to us.

Provider	What it does	Location
Oracle Cloud	Hosts our server and stores the synced data	Singapore
Cloudflare	Carries and protects traffic to our website and server	Global network
Resend	Delivers account emails (verification, password reset)	Japan
Google Drive	Stores our nightly backups of the server. They are encrypted before upload, so Google can't read them, and kept for 29 days	Global
Apple	Only if you choose "Continue with Apple": confirms who you are when you sign in	Global
Google	Only if you choose "Continue with Google": confirms who you are when you sign in	Global
Frankfurter (frankfurter.dev)	Only if you tap "Get today's rate": receives the two currencies you asked about, not your records	Europe

This means your data may be stored and processed outside Indonesia. We protect it as described in this policy wherever it is processed.

How long we keep it

Account details and synced data: for as long as you have an account.
Technical logs: 5 days.
When you delete your account, your account and all of your synced data are removed from our server right away, and if you signed in with Apple we ask Apple to revoke Piggy Pocket's access. Encrypted backups are kept for 29 days, so deleted data disappears from them within 30 days.

Your choices and rights

Use it without an account. Choose "Continue without an account" and Piggy Pocket works on your device; nothing is sent to us until you sign in to sync.
See and correct your data in the app at any time.
Export your records to a CSV file from the app.
Delete your account and all of its data from the app's settings, or email us and we will do it for you.
You can also ask us what data we hold about you. We respect the rights you have under the law that applies to you, including Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022).

Security

All traffic is encrypted with HTTPS. Passwords are stored as one-way hashes. Each person's data can only be read with that person's sign-in. No system is perfectly secure, so if we ever learn of a breach that affects your data, we will tell you and the authorities as the law requires.

Children

Piggy Pocket is not meant for children under 13, and we don't knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update this page and the date at the top. If a change is significant, we will also tell you in the app or by email before it takes effect.

Contact

Questions or requests about your data: support@piggypocket.id. Help with the app: piggypocket.id/support.