Privacy Policy for PocketOffice

Last Updated: April 15, 2026

This Privacy Policy describes how PocketOffice ("we," "us," or "our") handles your information. Our operations are governed by the fundamental principle of Data Sovereignty: your business data belongs to you, and it remains on your device unless you explicitly choose to move or back it up.

1. Local-First Architecture (Data Sovereignty)

PocketOffice is engineered on a "Local-First" architecture. This is our core commitment to your professional privacy:

• No Central Server: We do not operate a central database or server that stores, processes, or "sees" your financial records, client lists, or business documents.

• Neutral Conduit: PocketOffice acts strictly as a technical utility (a "Neutral Conduit"). All data generated within the app is encrypted End-to-End (E2EE) between your device and your chosen storage destination.

• Developer Access: We do not possess the keys to your data. We cannot view, decrypt, or access your business records under any circumstances.

2. App Permissions & Privacy by Design

To ensure maximum security, PocketOffice utilizes Native System Pickers rather than requesting broad, invasive permissions:

• Contacts: We do not request the broad READ_CONTACTS permission. When adding a client, the app opens your device's native contact picker. Only the specific contact data you explicitly select is imported into the app.

• Storage: We utilize the System Document Picker for exporting invoices and reports. The app only has access to the specific folders or files you choose to interact with.

3. Google Drive Integration & Limited Use

PocketOffice provides an optional cloud backup feature. This integration is subject to strict privacy controls:

• Restricted Scope: PocketOffice requests the https://www.googleapis.com/auth/drive.file scope. This grants the app access ONLY to the specific backup files created by PocketOffice.

• Limited Use Disclosure: PocketOffice’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Direct Transfer: Data is transmitted directly from your device to Google’s secure servers. It never passes through any server or intermediary owned by the Developer.

4. AI Sovereignty & Training Prohibition

PocketOffice is designed for professional and financial confidentiality. We take a hard stance against the unauthorized use of business data:

• No AI Training: We do not use, sell, or license any user-generated content, ledger data, or metadata to train Large Language Models (LLMs), Generative AI, or any machine learning algorithms.

• Scraping Prohibition: We expressly prohibit the crawling or scraping of data within the PocketOffice environment for the purposes of artificial intelligence development or data mining.

5. Security, Encryption & Statutory Liability

• Encryption Standard: Local data and backups are protected using industry-standard authenticated AES-256 GCM encryption.

• Hardware Security: Your master encryption keys are generated and stored within your device’s hardware-backed Secure Enclave (StrongBox/Keystore).

• Digital Conformity (Ireland): In compliance with the Irish Consumer Rights Act 2022, we commit to providing necessary security updates to maintain the digital conformity of PocketOffice for a period of at least six (6) years from the date of download.

CRITICAL WARNING: Because we do not store your data or your keys, RECOVERY IS TECHNICALLY IMPOSSIBLE if you lose your device or forget your credentials. You are solely responsible for securing your own hardware keys and managing your backups.

6. Diagnostic Logs

Diagnostic logs (crash reports) are never sent automatically. You may choose to manually share technical logs for support purposes. These logs contain technical performance data only and never include your financial records, client data, or personal identifiers.

7. Children's Privacy

PocketOffice is a professional utility intended for business use by adults and is not intended for individuals under the age of 13.

8. Contact Us

For privacy inquiries or technical support regarding your data sovereignty, please contact:

Email: riomhoideas@gmail.com