PaktCove Privacy Policy

Effective date: September 26, 2026

Private-by-design: PaktCove does not sell or share your financial information. Vault records are encrypted on your device before cloud synchronization. Signed-in synchronization uses an account-managed wrapping secret so your other signed-in devices can unlock automatically; authorized backend operators can technically access that secret and recover the synchronized vault.

Information stored on your device

PaktCove stores profiles, transactions, budgets, debts, goals, receipts, grocery lists, preferences, and related planning information locally in the app's private storage. The vault is encrypted. You may add a passphrase for additional protection.

Account identity

The browser app requires an account. The installed Android and iOS apps allow local-only use without registration. If you register or sign in, Supabase processes your email address, an account identifier, authentication events, session information, encrypted vault snapshots, revision metadata, an account-managed vault wrapping secret, and ordinary network metadata. Cloudflare Turnstile may process device and request signals to prevent automated abuse. Normal vault encryption and decryption happen on your device.

Imports, receipts, and exports

Bank exports and receipt images are processed locally. Receipt images are temporary parsing inputs and are discarded rather than saved in the vault, backups, or cloud synchronization. Confirmed structured receipt fields may be saved. When you create an encrypted backup, CSV export, printout, or Android share, you choose the destination. The receiving application or storage provider then handles that file under its own terms and privacy policy.

Network activity and tracking

PaktCove contains no advertising or analytics SDK. Fonts and application resources are packaged with the app. Account requests contact Supabase and Cloudflare Turnstile for authentication and abuse prevention. An allowlisted US private beta may optionally load Plaid Link to connect a financial institution. Bank credentials are entered into Plaid and are not received or stored by PaktCove. PaktCove does not track you across apps or websites.

Website hosting

The PaktCove website is delivered through Cloudflare. Cloudflare may process basic network and request metadata, such as IP address, browser or device information, requested URLs, timestamps, and security events, to deliver and protect the website. PaktCove does not use this metadata to build advertising profiles or track users across websites.

Data retention and deletion

Local financial data remains on a device until you delete records, clear app storage, or uninstall PaktCove. Encrypted cloud snapshots and the account wrapping secret remain until replaced or the account is deleted. Private bank-beta connections retain a server-encrypted provider access token, institution/account metadata, synchronization cursors, and temporary transaction review batches until the connection or account is deleted. Disconnecting asks Plaid to invalidate the connection and removes PaktCove's token and pending reviews. For signed-in vaults, authorized backend operators can technically use the account wrapping secret to recover a synchronized vault. Local-only passphrase vaults cannot be reset by the developer. Keep an encrypted backup in a location you control. You may permanently delete your identity, cloud snapshot, account wrapping secret, connected-bank records, and the encrypted vault on the current device from the in-app account panel. Instructions and an email-request alternative are available at paktcove.com/delete-account/.

Security

PaktCove uses authenticated encryption for the local vault and portable backups. Android operating-system backup is disabled for the app's private data, cleartext network traffic is prohibited, and sensitive content is concealed in the recent-apps view. No security system can guarantee absolute protection; keep your device updated and protected by a device lock.

Children

PaktCove is a general financial-planning tool and is not directed to children under 13. Do not register or use the service if you are under 13.

Cloud synchronization

Cloud synchronization uses authenticated, owner-scoped storage with revision checks. A random account-managed secret wraps the vault encryption key and lets signed-in devices unlock automatically. The secret is not available through direct table access, but trusted backend operators with privileged database access can technically obtain it. Legacy passphrase vaults require one successful passphrase unlock before seamless migration. Connected-bank synchronization is available only to explicitly allowlisted US private-beta testers, is profile-scoped, and requires review and account mapping before initial ledger import. Analytics are not enabled.

Contact

Questions may be sent to [email protected].