Privacy Policy

Pockets is a private-by-default app for collecting photos of real things you own and the stories behind them. This policy explains what we collect, why, and the choices you have. If anything here is unclear, write to support@thepockets.app.

What we collect

• Account information. When you sign in with Sign in with Apple, we receive a stable identifier and, if you choose to share it, your name and email address.
• Profile information. Username, display name, optional bio, and an optional avatar you upload — only if you choose to create a public or link-only profile.
• Pocket content. The photos you take of Things, the cutout images we generate from them, Memory text and photos you write or attach, and the names and arrangement of everything in your Pockets.
• Sharing metadata. Which Pockets you've made public or link-shared, and the settings you chose for that share (whether names, Memories, Replay, and creator identity are visible).
• Purchase records. App Store transaction identifiers for customization items you buy, used to verify and restore entitlements. We never see or store your payment details — Apple handles billing entirely.
• Device and diagnostic data. Basic device information and crash/performance diagnostics to keep the app working well.
• Product analytics. Anonymous, aggregate usage events (for example, that a Pocket was created or a share link was opened). We do not send Pocket names, Thing names, Memory text, image contents, or private profile data as analytics properties.

What we don't do

• We don't sell your data.
• We don't show ads inside Pockets.
• We don't build a public feed, follower graph, or engagement ranking from your activity.
• We don't read or moderate private Pockets, Things, or Memories as a matter of course.

Privacy is the default

Every Pocket starts private. Nothing about it — its name, its Things, its Memories — is visible to anyone else until you explicitly turn on sharing. When you do share, you choose exactly what's included: whether Thing names show, whether any Memories are shared (and which ones), whether your identity appears in full, as a username only, or not at all, and whether Pocket Replay and Make Yours are available to viewers. You can revoke a share link, rotate it, or make a Pocket private again at any time, instantly.

Where your data lives

Pockets stores account and Pocket data with Supabase, protected by row-level security so that only you (and, for Pockets you collaborate on, people you've explicitly invited) can access private content on the server side. Images are stored in access-controlled buckets; only derivatives you've chosen to share are ever placed in a publicly reachable location.

Collaboration and sharing with others

If you invite someone to collaborate on a Pocket, they can see that Pocket's content and add their own Things and Memories, per the permissions you set. If you share a Pocket publicly or via link, viewers see only what your sharing settings permit — never your private Memories or hidden identity, regardless of what the link itself might suggest.

Your choices

• Change or remove sharing settings on any Pocket at any time.
• Remove a collaborator or leave a shared Pocket.
• Report a Pocket or profile you believe violates our policies.
• Block another user, which severs shared access between you.
• Delete your account entirely, which removes your Pockets, Things, Memories, images, and profile. See Delete your account.

Children

Pockets is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll remove it.

Changes to this policy

If we make a material change to how we handle your data, we'll update this page and adjust the "last updated" date above.

Contact

Questions, requests, or concerns: support@thepockets.app.