Privacy Policy
Pockytap is an app for tracking expenses and wallets. It is built and operated by iOLABS ("we", "us"). This policy explains in plain words what data we collect, why, where we store it and what rights you have. We wrote it to be read, not to intimidate.
1. Who is responsible
The data controller is iOLABS (iolabs.gr), with registered office at Kleisthenous 53, 153 43 Agia Paraskevi (Stavros), Attica, Greece. For any privacy matter you can write to dervos@iolabs.gr.
2. What data we collect
We collect only what the app needs to work. Specifically:
| Data | What exactly | When |
|---|---|---|
| Account details | Email address and password. The password is stored only as a cryptographic hash. Not even we can see it. | When you create an account. |
| Financial data you enter | Wallets, categories, transactions (amount, date, category, note), recurring items, budgets, settings. Whatever you type into the app. | While you use the app. It is synced to our servers only if you have signed in with an account. |
| Device and session details | Device/browser type, operating system, a device name, date of last sync, IP address in server logs. | On every sign-in and sync, so you can manage your connected devices and for security. |
| Purchase details | If you buy Pro: a transaction identifier from the App Store, Google Play or the payment provider, date and product. We never see or store card numbers. | Only if you make a purchase. |
| Support email | Whatever you send us when asking for help. | Only if you contact us. |
We do not ask for and do not collect: bank details or bank access, full name, phone number, postal address, contacts, location, photos (unless you attach a receipt photo to a transaction yourself), or data from other apps.
3. Why we use it
- To run the app (performance of a contract, Art. 6(1)(b) GDPR): your account, sync between devices, restoring your data on a new device, unlocking Pro.
- For security (legitimate interest, Art. 6(1)(f)): detecting abuse, protecting accounts, server logs.
- To reply to you when you write to us.
- For legal obligations (e.g. tax records for purchases).
The app's "smart" features (category suggestions, recurring-expense detection, report insights) are computed locally on your device. We do not send your transactions anywhere for "analysis".
4. Where it is stored
- On your device: the app is offline-first. All your data is stored locally first (in the browser or in the app). If you never create an account, it stays only there.
- On our servers: once you sign in, a copy is synced to servers operated by iOLABS and located in the European Union. Transfer is always encrypted (HTTPS/TLS).
We do not transfer your data outside the EEA. Should that ever change (e.g. a new provider), we will update this policy and apply the required safeguards (standard contractual clauses).
5. What we do not do
- We do not sell or rent your data to anyone.
- We do not show ads and we do not use advertising SDKs or trackers.
- We do not share your data with third parties, other than the technical providers listed in section 10 or where the law requires it.
- We do not profile you for commercial purposes and we do not make automated decisions with legal effects on you.
6. How long we keep it
- Account data and your transactions: for as long as you have an account. After deletion they are permanently erased from active systems within 30 days and from backups within 90 days.
- Server logs (IP, time, endpoint): up to 90 days.
- Purchase records: as long as tax law requires (up to 10 years), not linked to the transactions you enter in the app.
- Support emails: up to 2 years after the last message.
7. Account deletion
You can delete your account and all of its data from inside the app (Settings → Account → Delete account) or by emailing us at dervos@iolabs.gr from your account's email address. Deletion is permanent and cannot be undone. Before deleting you can export your data as CSV from Settings.
Data stored locally on your device is under your control: it is removed when you uninstall the app or clear the browser's site data.
8. Your rights (GDPR)
Under the General Data Protection Regulation (EU) 2016/679 you have the right to:
- Access the data we hold about you.
- Rectify inaccurate data.
- Erasure ("right to be forgotten").
- Restrict processing.
- Portability: receive your data in a machine-readable format (the CSV export in the app does this).
- Object to processing based on legitimate interest.
- Lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or the supervisory authority of your country.
To exercise any right, email dervos@iolabs.gr. We reply within 30 days at the latest, free of charge.
9. Security
Passwords are stored only as hashes using a modern algorithm. All communication with our servers uses TLS. Access to systems is limited to the minimum necessary personnel. No system is 100% secure; if a breach affecting you ever occurs, we will notify you without undue delay, as the law requires.
10. Third-party providers
We use a small number of technical providers, only to run the service:
- Server hosting in a data centre in the EU.
- Apple App Store / Google Play: handle the Pro purchase when made inside their apps, under their own privacy policies. We receive only confirmation of the purchase.
- Web payment provider (if you buy from the browser): processes your card directly; we never see its details.
- Google Fonts on this website (not in the app): your browser requests the Inter font from Google's servers, which can see your IP address.
The app contains no third-party analytics, crash reporters or advertising SDKs.
11. Children
The app is intended for people aged 16 and over. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
12. Changes to this policy
If we change something material, we will update the date at the top and notify you in the app or by email before the changes take effect.
13. Contact
IOLABS Automation & Software Technologies (iOLABS) · iolabs.gr
Kleisthenous 53, 153 43 Agia Paraskevi (Stavros), Attica, Greece
Tel.: +30 211 4029 329
Privacy email: dervos@iolabs.gr