Effective Date: September 2026
1. Nature of the Application
PocketBook is a self-directed personal finance and daily allowance tracking utility. PocketBook is NOT a bank, an Electronic Money Issuer (EMI), or a registered investment advisor under the supervision of the Bangko Sentral ng Pilipinas (BSP) or the Securities and Exchange Commission (SEC).
2. Informational & Self-Directed Use Only
All balances, currencies, limits, and records reflected within the app represent personal entries logged by you. The strict zero-overdraft feature and maximum transaction limits are software controls intended to foster personal budgeting discipline; they do not restrict or interact with your physical bank cards or third-party e-wallet balances outside of PocketBook.
3. AI Financial Buddy ("PocketBot 🌱") Disclaimer
PocketBot is an artificial intelligence assistant powered by Google Gemini (3.6 Flash). Suggestions, categorization advice, and purchase feasibility replies are generated for general consumer planning purposes only. They do not constitute formal fiduciary, legal, tax, or professional investment advice.
4. User Account Security
You are responsible for maintaining the confidentiality of your credentials. PocketBook implements native Web Crypto PBKDF2 hashing, single-use password reset tokens, and Cloudflare Turnstile anti-bot checks. PocketBook will never ask for your password via email or unsolicited messages.
5. Limitation of Liability
Under no circumstances shall the developers of PocketBook be liable for any direct, indirect, incidental, or consequential losses resulting from financial decisions, typographical errors in entries, or exchange rate fluctuations derived from third-party market APIs.
6. Governing Law
These terms are governed by and construed in accordance with the laws of the Republic of the Philippines.
RA 10173 (Data Privacy Act of 2012)
1. Commitment to Personal Data Protection
PocketBook respects your privacy and is dedicated to complying with the provisions of Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC).
2. Information We Process
- Account Identifiers: Your chosen full name, unique lowercase username (`@username`), and email address.
- Security Hashes: Passwords are cryptographically salted and hashed using 100,000 iterations of PBKDF2-SHA256 prior to database storage. We never store plain-text passwords.
- Financial Activity Ledger: Custom account names, transaction amounts, categories, dates, and spending caps recorded in our Cloudflare D1 database.
3. How Your Data is Used
Your data is processed strictly to maintain your personal ledger, compute balances across accounts, and provide contextual budgeting advice through PocketBot. We do not sell, monetize, or broker personal financial data to advertising networks.
4. Third-Party Sub-Processors
- Cloudflare Inc.: Infrastructure hosting (Cloudflare Pages), serverless relational storage (D1), and anti-bot verification (Turnstile).
- Google LLC (Gemini API): Processes prompt queries and temporary dashboard snapshots (balance, accounts, recent buys) to generate financial advice under strict topical guardrails.
- Resend: Dispatches single-use password reset magic links and signup OTP codes.
5. Data Subject Rights (Your Rights under RA 10173)
As a data subject in the Philippines, you retain full ownership of your records:
- Right to Data Portability: Export your complete financial ledger and account breakdown at any time via the Export CSV button, complete with SHA-256 integrity verification.
- Right to Erasure / Session Revocation: Invalidate all external active browser sessions with a single tap in your Settings menu.
6. Cookies & Client-Side Storage
PocketBook utilizes browser `localStorage` solely to maintain your active authentication session token, preferred currency setting, and onboarding tour states. We do not use third-party tracking or behavioral cookies.