Privacy Policy

Pocket EA is operated by Alpha Code LLC (“Pocket EA,” “we,” or “us”). This policy explains what we collect through the Pocket EA mobile app and website, why we use it, and the choices available to you. Pocket EA is currently offered only to adults in the United States.

Information we collect

• Account information: your email address and authentication information. Supabase stores and verifies your password; Pocket EA does not receive it in plain text.
• Assistant content: conversations, onboarding answers, tasks, commitments, memories, planning history, and files or images you choose to provide.
• Voice: microphone audio used during live voice conversations and voice-to-text, plus the resulting transcripts. Live audio is processed to provide the conversation and is not used as a hidden recording feature.
• Connected services: if you connect Google or Microsoft, the account email, permissions granted, encrypted authorization credentials, and the limited calendar or email information needed to perform your request.
• Notifications and calls: device push tokens, chosen accountability-call schedule, quiet hours, delivery preferences, and delivery status.
• Billing: subscription provider, customer and entitlement identifiers, plan, renewal status, and transaction status. Pocket EA does not receive or store your full payment-card number.
• Usage and diagnostics: feature usage, approximate provider cost, app version, device and operating-system details, request identifiers, and technical logs needed for security and reliability.
• Support reports: the description you submit and the diagnostics shown before submission. Private conversations, files, audio, and transcripts are not attached automatically.

Website information

The public website does not currently offer account sign-in or behavioral advertising. Cloudflare may process basic request information such as IP address, browser information, and security signals to deliver and protect the site.

How we use information

• Provide continuous conversation, memory, task and commitment management, live voice, and scheduled in-app accountability calls.
• Prepare calendar or email actions for your review and execute them only after the required confirmation.
• Deliver notifications, administer subscriptions, enforce plan limits, prevent abuse, troubleshoot failures, and improve service reliability.
• Respond to support, privacy, export, and deletion requests.

AI processing

Pocket EA uses OpenAI to generate responses, interpret requests, extract memories, process supported attachments, moderate content, transcribe speech, and power live voice. We send only the content and context needed for the requested feature. Connected-service passwords and authorization tokens are not sent to OpenAI.

Service providers

We do not sell personal information. We use providers that help operate Pocket EA, including:

• Supabase: authentication, database, and private file storage.
• OpenAI: AI responses, memory extraction, attachment processing, transcription, moderation, and live voice.
• Render: API hosting and operational service logs.
• Expo: app delivery and push-notification infrastructure.
• Cloudflare: website hosting, delivery, and protection.
• Stripe, RevenueCat, Apple, and Google: subscription checkout, entitlement management, and platform billing.
• Google and Microsoft: optional calendar and email access that you explicitly connect.

We may also disclose information when required by law or necessary to protect users, Pocket EA, or the public.

Retention and deletion

We retain assistant content and account records while your account is active unless a shorter period is required for a specific feature. You can delete assistant data without deleting your login, disconnect linked services, or permanently delete your account. Limited billing-event and security records may be retained where required for fraud prevention, legal compliance, dispute handling, and financial recordkeeping.

Use the account-deletion page if you no longer have the app. Deleting an account does not automatically cancel a subscription managed by Stripe, Apple, or Google; cancel it through the provider that billed you.

Your choices

• Ask Pocket EA what it remembers, correct it, or request deletion in conversation.
• Manage notification permissions through your device and accountability-call schedules in the app.
• Disconnect Google or Microsoft capabilities independently in Settings.
• Reject a proposed external action before anything is created, changed, or sent.
• Export assistant data, delete assistant data, or delete the entire account from Settings.

Security

We use authenticated APIs, per-user database access controls, private file storage, encrypted connected-service credentials, limited employee and service access, and logging designed to exclude secrets and private content. No online service can promise absolute security.

Children

Pocket EA is not directed to anyone under 18, and we do not knowingly collect personal information from children.

Changes and contact

We may update this policy as Pocket EA changes. The date above identifies the current version. Questions or privacy requests can be sent to hello@pocket-ea.app.