Pockado Privacy Policy

Last updated: November 2, 2026

Pockado ("Pockado," "we," "us," or "our"), operated by Castro Technologies, LLC, provides a family allowance, chores, and accountability app. This Privacy Policy explains what information we process, why, how we protect it, and the choices and rights you have. It applies to the Pockado mobile app and website at https://pockado.app. Pockado currently launches and markets only to residents of the United States. The service is not currently offered to people outside the United States. We will update this Policy before expanding elsewhere.

Pockado is a ledger and tracking tool. It records allowance amounts and balances as numbers; no real money moves through Pockado and we do not process payments between family members.

This Policy tells you how we handle your information. It is not a contract. Accepting our Terms acknowledges that you received this Policy and includes the specific guardian declaration described below; it is not blanket consent to every form of processing. Where we rely on consent, including optional analytics, we ask separately or identify the specific consent (see Section 4).

---

1. Who is responsible for your data

The data controller is:

Castro Technologies, LLC
Georgia, United States
Contact: privacy@pockado.app

Pockado currently offers the service only to United States residents. No EU or UK representative is appointed because Pockado does not currently target or offer the service there.

If you have questions about this Policy or your data, contact privacy@pockado.app.

---

2. Information we process

2.1 Information you provide

• Account information and guardian declaration. To create or access an adult family account, you must be at least 18 and represent that you are a parent or legal guardian of every child profile you create or access. We process your email address and record your acceptance of the Terms containing that declaration. We rely on your declaration; we do not independently verify your family relationship unless the law or a safety concern requires it. Pockado uses passwordless sign-in: we email a one-time verification code; we do not store a password.
• Family and child information you enter. As a parent or legal guardian, you create a family and add children. For each child you provide a first name or nickname and may choose an avatar. You record allowance amounts, deposits, gifts, spending, balances, and optional notes/descriptions, and may create house-rules checklists with amounts. You decide all content, rules, amounts, rewards, deductions, schedules, sharing choices and real-world family payments; Pockado only records your choices.
• A child's photo (optional). As the child's parent or legal guardian, you may add one photo per child, taken with your camera or chosen from your photo library, to show next to the child's name in your app and on the child's own screen. Before anything is uploaded, your device crops the picture to a square, makes a copy of at most 512 × 512 pixels and removes the information that cameras embed in pictures, such as the location. Only that copy is uploaded. The app asks your phone for permission to use the camera or your photo library only when you tap the matching button, and it receives only the picture you take or choose. We do not routinely review the photos you add; you are responsible for them (see our Terms).
• Kid access (optional). As the child's parent or legal guardian, you may give that child a read-only view. We then create a sign-in for that child: a name tag (built from your child's first name plus four digits) and a PIN. The PIN is stored only as a protected (salted, hashed) value. The invite link works once and expires after 24 hours if unused. We record when the child's device was last used so it can stay signed in while it is in use (a device unused for 30 days is signed out). Turning the access off disables the sign-in and signs the child out; a screen that is already open can keep working for up to 15 minutes.
• Invitations to another guardian. You may invite only another parent or legal guardian of the child. We process the email address you provide to send the invitation. Each invited adult must accept the Terms and make the same guardian declaration. You choose each recipient and remain responsible for the invitation and access you authorize.
• Terms and guardian declaration record. When you accept our Terms, we store the terms version, a content hash, the time, your platform and app version, and that you declared you are an adult parent or legal guardian with authority to provide the children's information and authorize its processing. We do not store your IP address or user agent for this record.

Please provide only the information needed to run the app, and avoid entering sensitive personal information in free-text fields.

2.2 Information collected automatically

• Product analytics (opt-in). Only if you turn analytics on, we record a small set of coarse product events (for example: account created, first child added, first transaction). Records can include your account and family identifiers, account role, app version, coarse platform label (iOS / web), and limited event-specific metadata such as counts or feature identifiers. The server strips known personal-identifier keys and values and drops oversized metadata. We do not intentionally collect transaction content, child names or child identifiers through analytics. The child cannot turn analytics on. If an adult previously opted in on that device, opening Kid access may emit one coarse child_view_opened event. It contains no child name, child identifier, balance, task or other child content.
• No third-party analytics. We do not use Google Analytics, Google Tag Manager or any other third-party analytics or advertising tracker, in the app or on the website. The opt-in product analytics described above is processed only by us, on our own cloud infrastructure.
• Operational and security logs. We keep technical logs (request identifiers, coarse request metadata) and CDN access logs to run, secure and troubleshoot the service.
• Web font delivery. The website may request fallback font files from Google Fonts. Like any web request, this can disclose your IP address and browser request information to Google. We do not use Google Fonts for analytics or advertising. We plan to self-host these fonts.

2.3 Information we do NOT process

• No precise location, no advertising identifiers, no third-party ads.
• No facial recognition or other biometric identification. We do not use photos for advertising or profiling, and we do not use them to train artificial-intelligence models.
• We do not sell personal information or share it for cross-context behavioral advertising.
• No payment card or bank data passes through Pockado. Payments for paid plans are handled by Apple (in the app) or Stripe (on the web), which collect your card details themselves (Section 7).

---

3. How we use information

• Provide the core service (accounts, families, children, allowances, transactions, house rules).
• Record and display the content, rules, amounts, rewards, deductions, schedules and private family-sharing choices made by adult account users. Pockado does not make those decisions or move money between family members.
• Show the photo you chose to your family and, on the child's own screen, to that child.
• Send the one-time sign-in code and essential account emails (e.g. deletion receipt).
• Maintain, secure, troubleshoot and improve the app.
• Understand coarse, aggregate usage if you opt in to analytics.

---

4. Why we process information

You can withdraw consent at any time — turn analytics/non-essential cookies off in Settings > Privacy and data (app) or in the cookie banner (website). Withdrawing consent does not affect processing already carried out. We honour Global Privacy Control (GPC) browser signals as an opt-out of non-essential cookies/analytics on the website.

---

5. Children's privacy

Pockado is designed and marketed for parents and legal guardians to manage their children's allowances. Every adult account user must be at least 18 and represent that they are a parent or legal guardian of each child profile they create or access. We rely on that declaration and may suspend access if authority is disputed. We do not routinely verify family relationships. We may request additional proof when authority is disputed or when applicable law or a safety concern requires it.

• Children do not create adult accounts. A parent or legal guardian enters and controls the child's name or nickname, avatar, optional photo, allowance amounts and balances. If the guardian enables Kid access, the child receives a limited sign-in created by the guardian. It shows only that child's own balance and tasks. The child cannot change records, make purchases, message other users, or enable analytics. The app does not ask the child for an email address or other personal details, and the guardian can turn access off at any time.
• A child's photo is optional. Only a parent or legal guardian may add it. It stays private, is shown only to signed-in family members and that child, and is never public. The guardian can remove it at any time (Remove photo); the emoji picture stays if no photo is added.
• We do not ask a child to create a profile or provide an email address, name, birth date, free text or other profile details. A child only enters the name tag and PIN supplied by their guardian to open Kid access.
• A parent or legal guardian can view and edit child information, remove a child's photo, revoke Kid access, and delete the family account when no other guardian remains. If another guardian remains, deleting one adult's account removes that adult's membership and sign-in while preserving shared family data for the remaining guardian (Section 9).

We encourage guardians to enter only a first name or nickname for each child. If you believe a child provided us personal information directly, or that someone created a child profile without legal authority, contact privacy@pockado.app. We will investigate and delete or restrict information where appropriate.

---

6. Sharing, providers and recipients

We do not sell personal information or disclose it for cross-context behavioral advertising. Adult account users may direct private sharing with another parent or legal guardian they invite. That family-directed access is different from Pockado selling data. We use the infrastructure providers and technical services described below. Their legal roles differ:

• Amazon Web Services (AWS) — hosting, authentication (Cognito), database (DynamoDB), transactional email (SES), CDN (CloudFront), logging, and file storage (including children's photos, in a private bucket).
• Google Fonts — fallback font delivery on the public website. Google receives ordinary network request information when the browser requests a font. Google Fonts is not used for analytics or advertising.

Apple (App Store purchases) and Stripe (web purchases) process payments for paid plans as independent controllers (Section 7). A full sub-processor list with locations and transfer mechanisms is in our internal sub-processor record (available on request).

We also disclose information where required by law or to protect the rights, safety and security of our users or Pockado.

---

7. Payments

You can buy a paid plan in two ways. The plan is the same either way.

• In the iOS app: sold and billed by Apple through your App Store account, under Apple's terms. Apple is an independent controller for the payment.
• On the web (pockado.app): billed by Stripe, Inc. (United States), under Stripe's terms and privacy policy (stripe.com/privacy). Stripe collects your card details on its own payment page and is an independent controller for the payment, including fraud prevention and its own legal record-keeping. To set up the subscription we give Stripe the adult account's email address and an internal family identifier.

Pockado never sees or stores your card details. We store only what we need to know whether your family has a paid plan: a purchase or customer reference from Apple or Stripe, the subscription's status and its end or renewal date.

---

8. Where information is processed

Pockado is operated within the United States. Our AWS infrastructure runs in US regions. Apple, Stripe and Google may process information through their own infrastructure as described in their policies. Pockado does not currently target or offer accounts outside the United States. We will review applicable transfer and local-representation requirements before expanding elsewhere.

---

9. Data retention

We keep each category only as long as needed. Key periods (full schedule in our internal retention record):

• Account and adult identity: while that adult account remains active; the adult's sign-in identity and user-specific records are deleted when that adult deletes their account.
• Shared family, children and transactions: while the family remains active. If another guardian remains, shared family data remains for that guardian. Full-family deletion occurs when the last guardian leaves. A child linked to another family, and that child's records and photo, can remain available to that other family. Database backups (PITR) roll off after 35 days.
• Children's photos: until a guardian removes the photo or the child's last family link is deleted. Replacing a photo overwrites the old one; we keep no earlier copies. Deleting one adult account, or deleting one family link for a child who remains linked elsewhere, does not delete the photo still used by the other authorized family. Photos are not part of the database backups. An upload that is never completed is deleted within a day. Storage access logs, which can include the technical address of the device that opened a file, are kept 90 days.
• Free-tier transaction history: about 90 days kept available; longer on a paid tier.
• Opt-in analytics: about 90 days in the active store; archived analytics expire within 400 days.
• CDN access logs: 90 days. Application logs: 30–90 days.
• Sign-in emails (OTP): not retained beyond sending.
• Subscription records (Apple or Stripe reference, status, dates): while the family subscription relationship remains active; full-family deletion removes Pockado's records. Apple or Stripe may retain their own legally required records.
• Deletion receipt: email, deletion date, deletion scope and record count for 90 days, to document the request without child or transaction content.

When you delete your account, the result depends on shared family membership. If no other guardian remains, we delete the family and unique-child data from our primary systems. A child linked to another family, including that child's photo, can remain available to that other family. We attempt to delete user-partitioned active analytics during account deletion. If that attempt fails, those events expire under the active-store retention period; date-partitioned archive records cannot be removed by individual user and expire within 400 days. If another guardian remains, we remove your membership, sign-in identity and user-specific records, while preserving shared family data for that guardian. We keep a minimized deletion receipt for 90 days. If your family paid on the web and the family is deleted, we delete the Stripe customer first, which cancels any running web subscription. If Stripe cannot complete that deletion, Pockado stops before deleting family data so you can retry. Stripe may keep payment records it must keep by law. A subscription bought through Apple is managed and cancelled in your Apple ID settings.

---

10. Security

• Encryption in transit (HTTPS/TLS) and at rest.
• Passwordless, one-time-code sign-in (no stored passwords).
• Scoped, least-privilege access controls; infrastructure security checks.
• Point-in-time recovery and deletion protection on production data.
• Children's photos are kept in a private, encrypted storage bucket with no public access, and are shown only through links that expire after 15 minutes to signed-in members of the family.
• Secrets stored in a managed secrets store, never in the app binary.

No method is 100% secure, but we work to protect your information and review our practices regularly.

---

11. Your rights and choices

Depending on where you live, you have some or all of these rights. We honour them for all users.

• Access & portability — view your data in the app and use "Download my data" to export it. The download does not include the picture files of children's photos; you can see and remove them in the app, or ask us for a copy at privacy@pockado.app.
• Correction — edit your family, children and transaction data in the app.
• Deletion — use Settings → Delete account to erase your sign-in account and user-specific records. If no other guardian remains, this also erases the family and children not linked to another family, including their photos, Kid access sign-ins and transactions. If another guardian remains, shared family data stays available to that guardian.
• Objection / restriction — turn off analytics in Settings > Privacy and data, or contact us for other processing.
• Withdraw consent — any time, as above.

To exercise a right, use the in-app controls or email privacy@pockado.app. We respond within the period required by applicable US law, including 45 days for qualifying California requests, subject to permitted extensions. We may need to verify your identity. You will not be discriminated against for exercising your privacy rights.

---

12. California privacy (CCPA/CPRA)

In the last 12 months we have collected these categories: identifiers (email, account id); customer records (family/child first names, balances, notes you enter); internet/usage activity (website requests, security/CDN logs and opt-in coarse analytics); and commercial information (subscription status via Apple or Stripe). We use them for the purposes in Sections 3–4.

• No sale, no sharing. We do not sell or share personal information, so no "Do Not Sell or Share My Personal Information" link is required.
• No sensitive PI beyond a child's first name; we do not use it to infer characteristics.
• GPC. We honour Global Privacy Control signals on the website.
• Your rights: to know, delete, correct, and (where applicable) opt out and limit — exercised via the in-app controls or privacy@pockado.app. Two methods: in-app controls and email.
• Authorized agents may submit requests with your signed permission and your verification.
• No discrimination for exercising rights.

---

13. Cookies and local storage

The app and website store a small amount of data on your device. Non-essential cookies/analytics load only after you opt in (and are suppressed if your browser sends a GPC signal).

---

14. Changes to this Policy

We may update this Policy. When we make material changes, we will update the "Last updated" date and notify you in the app (and by email where appropriate).

---

15. Contact us

Castro Technologies, LLC
Georgia, United States
Email: privacy@pockado.app

Pockado currently offers the service only to United States residents.