PocketPocket Tip Tracker Privacy Policy
Last updated: October 14, 2026
Summary
Pocket Tip Tracker (“Pocket”) is an iPhone and iPad app operated by Harsh Patel. It has no accounts and does not ask for your name, email or employer details. Your shifts and earnings are stored on your device. They leave it only if you turn on private iCloud sync or export or share a file yourself. We do not operate a server that stores your earnings, and we do not sell data, show ads or track you across other companies’ apps or websites.
What stays on your device
Your records: shifts with their date, cash tips, card tips, tip-outs, wages, hours and notes; workplaces and hourly rates; your weekly goal, pay settings, usual shifts, days off and shift templates; and drafts.
Starter allowance: the identifiers of shifts you have saved, used to count your free shifts.
Settings: reminder choices, the calendar you chose for reminders, your last known subscription status, and a record of limited-time offer windows. The offer record is kept in the iOS Keychain on this device so it survives reinstalling the app.
Widget: a summary for the Home Screen widget (this week’s total, shift count, hourly rate and goal progress) is kept in a container shared only between Pocket and its widget.
Records are kept in protected files in the app’s storage on your device.
Optional iCloud sync
iCloud sync is off until you turn it on in Settings. When it is on, Pocket uses Apple CloudKit to store a copy of your history in your private iCloud database under your Apple Account. We cannot access your private iCloud data. Turning sync off leaves that copy in iCloud; remove it in Settings > [your name] > iCloud > Manage Storage.
Calendar and reminders
End-of-shift reminders are optional. If you connect a work calendar, Pocket asks for calendar access and reads the start and end times of events on the one calendar you pick, on your device, to time reminders. Calendar data is not stored by us, uploaded or sent as analytics.
Reminders are scheduled locally through Apple’s notification system; there is no push server. A reminder can show a workplace name, such as “Juniper Cafe shift done?”, but never an amount. Change calendar and notification access anytime in iOS Settings.
What Pocket does not access
Pocket does not use your location, camera, photos, contacts, health data or bank accounts, and does not connect to employers or payroll services.
Data we collect
Pocket has no accounts, and nothing it collects includes your name, email, phone number or Apple Account. The data below is pseudonymous, but it is linked in Apple’s sense: it is tied to random identifiers for your install, and those identifiers are joined to each other. It is not used for tracking: Pocket has no ads, does not use the advertising identifier (IDFA), does not ask to track you, and does not share data with data brokers or advertisers.
| Data type | What it is | Purpose |
|---|---|---|
| Product interaction | Which steps you complete in the app, from a fixed list of events, with counts and yes-or-no flags. Sent to PostHog. | Analytics |
| Purchase history | Your subscription status, trials, renewals and cancellations, from Apple’s signed purchase records via RevenueCat. | App functionality, analytics |
| User ID | A random app user ID created by RevenueCat and a random analytics ID created by PostHog, joined so subscription events appear in the product funnel. Neither is your name, email or Apple Account. | App functionality, analytics |
| Device ID | The identifier for vendor (IDFV) that the RevenueCat SDK sends with its requests. It is not the advertising identifier. | App functionality, analytics |
| Advertising data | Apple’s AdServices attribution token, sent to RevenueCat, which asks Apple whether the install came from an Apple Search Ads campaign and, if so, which campaign, ad group and keyword. | Analytics |
| Crash data | Crash reports from Apple’s MetricKit: crash kind, exception type and code, signal and app build, sent as PostHog events. | App functionality, analytics |
| Performance data | Hang reports from MetricKit: how long the app was unresponsive and the app build, sent as PostHog events. | App functionality, analytics |
| Coarse location | PostHog estimates your country and city from the IP address of each analytics request. Pocket never asks for your location. | Analytics |
Analytics come from a fixed list of events and properties; anything else is dropped before sending. They include the app version, whether Pro is active, the number of shifts and workplaces, yes-or-no flags such as whether a shift had cash tips or a note, and a rounded share of your weekly goal reached. Screen recording, session replay and automatic tap capture are off. Analytics never include your amounts, workplace names, notes or exported files.
You can turn off Share anonymous usage in Pocket’s Settings. When it is off, Pocket sends no analytics events, including crash and hang reports, and does not join a new analytics ID to RevenueCat. RevenueCat still receives the purchase data it needs to check your subscription, the IDFV and the AdServices token, and subscription events already joined to an earlier analytics ID can still reach our analytics.
Payments go through Apple In-App Purchase; we never receive your payment card details. RevenueCat checks your subscription for us; its privacy policy is at revenuecat.com/privacy. PostHog’s is at posthog.com/privacy.
Exports and sharing
CSV exports, PDF reports, backup files and weekly share cards are created on your device. When you share one, iOS sends it to the destination you choose, such as Files, Mail or Messages. Pocket does not record who you share with. A share card can hide amounts.
Retention and deletion
Records stay on your device until you delete them. Delete individual shifts and templates in the app, or delete the app to remove its local records. Deleting a shift does not refill the free allowance, so its identifier is kept for that count.
iCloud copies, exported files, purchase history and the Keychain offer record are separate. Manage iCloud data and subscriptions in Apple Settings, and delete exported copies where you saved them.
We keep analytics only as long as it is useful for improving the app. Email us to ask for deletion of analytics data; because it is not tied to your name, tell us roughly when you installed Pocket and your device model so we can find it.
Children
Pocket is not directed to children under 13, and we do not knowingly collect personal information from children.
Changes
If our data practices change, we will update this page and the date above, and update the app’s App Store privacy details.
Contact
Questions, complaints or data requests: harshp.build@gmail.com