Privacy Policy for Pocket Office Pro

1. Local-First Architecture (Data Sovereignty)

PocketOffice is engineered on a "Local-First" architecture. This is our core commitment to your professional privacy:

• No Central Server: We do not operate a central database or server that stores, processes, or "sees" your financial records, client lists, or business documents.
• Neutral Conduit: PocketOffice acts strictly as a technical utility (a "Neutral Conduit"). All data generated within the app is encrypted End-to-End (E2EE) between your device and your chosen storage destination.
• Developer Access: We do not possess the keys to your data. We cannot view, decrypt, or access your business records under any circumstances.

2. App Permissions & Privacy by Design

To ensure maximum security, PocketOffice utilizes Native System Pickers rather than requesting broad, invasive permissions:

• Contacts: We do not request the broad READ_CONTACTS permission. When adding a client, the app opens your device's native contact picker. Only the specific contact data you explicitly select is imported into the app.
• Storage: We utilize the System Document Picker for exporting invoices and reports. The app only has access to the specific folders or files you choose to interact with.

3. Google Drive Integration & Limited Use

PocketOffice provides an optional cloud backup feature. This integration is subject to strict privacy controls:

• Restricted Scope: PocketOffice requests the https://www.googleapis.com/auth/drive.file scope. This grants the app access ONLY to the specific backup files created by PocketOffice.
• Limited Use Disclosure: PocketOffice's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Direct Transfer: Data is transmitted directly from your device to Google's secure servers. It never passes through any server or intermediary owned by the Developer.

4. AI Sovereignty & Training Prohibition

PocketOffice is designed for professional and financial confidentiality. We take a hard stance against the unauthorized use of business data:

• No AI Training: We do not use, sell, or license any user-generated content, ledger data, or metadata to train Large Language Models (LLMs), Generative AI, or any machine learning algorithms.
• Scraping Prohibition: We expressly prohibit the crawling or scraping of data within the PocketOffice environment for the purposes of artificial intelligence development or data mining.

5. Security, Encryption & Statutory Liability

• Encryption Standard: Local data and backups are protected using industry-standard authenticated AES-256 GCM encryption.
• Hardware Security: Your master encryption keys are generated and stored within your device's hardware-backed Secure Enclave (StrongBox / Keystore).
• Digital Conformity (Ireland): In compliance with the Irish Consumer Rights Act 2022, we commit to providing necessary security updates to maintain the digital conformity of PocketOffice for a period of at least six (6) years from the date of download.

6. Diagnostic Logs & Telemetry

Diagnostic logs (crash reports) are never sent automatically. You may choose to manually share technical logs for support purposes. These logs contain technical performance data only and never include your financial records, client data, or personal identifiers.

7. Children's Privacy

PocketOffice is a professional utility intended for business use by adults and is not intended for individuals under the age of 13.

8. Contact Us

For privacy inquiries or technical support regarding your data sovereignty, please contact: