Privacy Policy

1. What we collect

• Account: your first name, email address, language and currency.
• Finances you enter: salary, bonuses, extra income, expense categories and budgets, logged spending, debts, savings and goals.
• Nova: your chat messages, the facts Nova remembers, your coaching preferences, and your Groq API key (stored encrypted).
• Technical: sign-in session and language cookies, and basic logs needed to keep the service secure.

2. Why we use it

• To run Pocketa: show your dashboard, calculations, journals and Nova’s answers.
• To improve our system and services: understand how features are used, fix problems and build better tools. Where possible we use aggregated or de-identified data for this.
• With your separate, optional consent: to let us and our partners offer you services suited to your situation (for example savings, banking, insurance or credit offers).
• To keep the service secure and meet legal obligations.

3. Who we share it with

• Service providers that run Pocketa for us: Supabase (database and accounts) and Groq (only when you use Nova: your message and a summary of your finances are sent to generate the reply).
• Partners: only if you tick the optional partner box. We share only what is needed for a relevant offer, never your password or Groq key, and partners must use it only for that purpose. You can withdraw in Settings at any time; it stops future sharing.
• Authorities: when the law requires it. We never sell your data.

4. How long we keep it

For as long as your account is open. When you ask us to delete your account, we delete your data within 30 days, except records we must keep by law (such as proof of your consents).

5. Security

Data is sent over encrypted connections. Every database table is locked so that only you can read your records. Your Groq key is encrypted with AES-256 on the server and never sent back to your browser.

6. Your rights

• You can access, correct or delete your data, object to its use, and withdraw consent at any time (partner sharing can be switched off in Settings). Write to privacy@codeplus.studio.
• In Morocco you can contact the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel); in the EU, your local data protection authority.

7. Children

Pocketa is for people aged 18 and over. We do not knowingly collect data from children.

8. Changes

If we change this policy in an important way, we will ask you to review and accept it in the app.