Poku is a personal finance assistant. It only works if you tell it about your money, so being straight with you about what happens to that information is the least we owe you. This page is written to be read, not to be survived.
The short version
We collect the money information you enter, the messages you send Poku, and enough account information to keep your data yours. We do not sell it, we do not use it for advertising, and there is no third-party analytics or tracking in the app or on this website. You can delete everything from inside the app, permanently.
Poku does not connect to your bank. There is no account linking, no credentials to hand over, and no read access to your financial institutions. Everything Poku knows is something you told it.
What we collect
Your account. You sign in with Apple or with Google. We receive a user identifier and, depending on what you choose to share, an email address. We never see or store your Apple or Google password.
The money information you enter. Amounts, categories, notes, merchant names, dates, budgets, recurring rules, and pockets. This is the substance of the product.
Your conversations with Poku. The messages you send and the replies you receive are stored so the conversation persists between sessions and Poku can refer back to it.
Your voice, only while you hold the button. Voice input listens only while the voice button is held. Where your iPhone can transcribe your language itself, it does, and the audio goes nowhere. Where it cannot, Apple’s dictation service converts the audio to text, under Apple’s own privacy policy, and the system asks your permission before the first use. Either way Poku receives only the text. We never receive, store, or share the audio, and no one but Apple is ever involved.
Subscription status. If you subscribe, our payments provider tells us whether your subscription is active and when it expires. Payment is handled entirely by Apple. We never receive your card details.
Device tokens for notifications. Only if you turn notifications on.
Server logs. Our API records request metadata, including IP address, for security and abuse prevention. These are kept briefly and are not used to build a profile of you.
How your information is used
To run the product: to store what you log, answer what you ask, calculate budgets and summaries, record recurring transactions, and enforce the limits of your plan. To keep the service working and secure, including rate limiting and abuse prevention. To respond to you when you contact support.
We do not use your financial data for advertising, and we do not sell or rent it.
Artificial intelligence, specifically
Poku’s conversational features are powered by a large language model that we do not host ourselves. When you send a message, that message, a limited window of recent conversation, and the specific figures needed to answer it are transmitted to our model routing provider, OpenRouter, and to the model provider fulfilling the request.
We send the minimum required to answer, never your entire history. We configure our provider routing to only use model providers that do not train on your data. A provider may still hold a request briefly under its own policy for abuse monitoring, and beyond the no-training setting we do not control a provider’s internal handling. If you would rather a particular detail never left your device, do not put it in a message.
Poku’s answers are generated from your real data through structured queries. It is designed never to invent figures. It can still be wrong, and it is not financial advice.
Who else processes your information
We keep this list short on purpose.
| Who | What for |
|---|---|
| Supabase | Database and authentication |
| OpenRouter and its model providers | Generating replies in chat |
| DigitalOcean | Hosting our API server |
| Cloudflare | Network protection for our API and this website, and encrypted off-site backups |
| RevenueCat | Subscription status |
| Apple | Sign in with Apple, App Store purchases, push notifications, and voice transcription on iPhones that cannot transcribe your language locally |
| Sign in with Google |
Each is bound to protect your information to a standard at least equal to this policy.
Where your information lives
Your data is stored in a managed Postgres database hosted in the European Union (Frankfurt), with row-level security enabled, which means the database itself enforces that one account cannot read another account’s rows. It is not a rule in our application code that could be forgotten. It is a constraint in the database. Encrypted backups are held off-site in a separate region for disaster recovery.
Keeping and deleting
We keep your information for as long as your account exists. Delete your account from inside the app, under Settings, and your profile, transactions, budgets, categories, recurring rules, pockets, messages, and device tokens are deleted along with it. This cascade is enforced by the database, not by a cleanup job that might not run.
Deletion is permanent. We cannot restore a deleted account.
Encrypted backups may retain a copy for up to about 30 days before they rotate out. Audit records of security-relevant events may be retained where we are required to keep them.
Your rights
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, receive a copy of it, or object to how it is processed. Most of these you can exercise directly in the app. For anything else, email us and we will action it.
If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you and on the basis of our legitimate interest in keeping the service secure.
Children
Poku is not directed at children and is not intended for anyone under 13, or under the minimum age of digital consent where you live if that age is higher.
Changes
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell you in the app. Continuing to use Poku after a change means the updated policy applies.
Contact
Email support@poku.chat with any question about this policy or about your data. A person reads it.