Pocket keeps the blockchain layer quiet, but not hidden from this Policy. Some information stays on your device, profile information is stored with Pocket's service providers, blockchain activity is public, and Coins.ph separately handles KYC for regulated on/off-ramp services.
1. Scope and who is responsible
This Privacy Policy (“Policy”) applies to the Pocket website, mobile application, wallet interface, and related services (collectively, the “Pocket Services”). In this Policy, “Pocket,” “we,” “us,” and “our” refer to the operator of the Pocket Services.
Pocket acts as the personal information controller for personal data we determine how and why to process. Separate providers, including Coins.ph, may act as independent controllers for services they provide under their own privacy policies.
2. Data you provide to Pocket
We may collect account and profile information such as your first and last name, username, email address, country, preferred language, profile photo, wallet public address, and settings. We also collect information you provide when contacting support, reporting a problem, completing a survey, or otherwise communicating with us.
Your username, display name, profile photo, and wallet public address may be visible to other Pocket users so they can identify you and send or receive funds. Do not include sensitive information in fields intended to be public.
3. Wallet and transaction information
We process wallet public addresses, supported asset balances, transaction amounts, transaction hashes, timestamps, counterparties, transaction status, Earn activity, applicable rates, and related records needed to display and support your activity.
Stellar and other blockchain networks are public ledgers. Information recorded on-chain may be visible worldwide, copied by others, and retained permanently. Pocket cannot alter, delete, or make private information that has already been confirmed on a public blockchain.
4. Data stored on your device
Pocket stores certain information locally to make the application work, including preferences, language, profile references, favorite contacts, and counterparties derived from your payment history. Pocket does not need to upload your phone's address book to create this in-app contact list.
Your wallet secret key is generated locally and stored using your device's secure storage. Your local PIN is protected through a salted hash rather than being stored as readable text. A separately hashed recovery PIN may be stored with our service provider to support account recovery. Never share your PIN, recovery information, or wallet credentials.
5. Coins.ph KYC and partner data
Coins.ph facilitates fiat cash-in, fiat cash-out, and related regulated services. Coins.ph conducts the Know Your Customer (“KYC”) identity-verification process for those services.
Coins.ph may collect your legal name, date of birth, nationality, address, contact details, government-issued identification documents, selfie or facial-verification data, financial information, source-of-funds information, and other records required for identity, fraud, sanctions, and anti-money-laundering checks.
Your KYC submissions are governed by the Coins.ph Privacy Policy. Pocket will generally receive verification results or status, account or transaction identifiers, applicable limits, transaction status, and compliance information needed to enable or support partner services. If additional KYC information must be shared with Pocket, you will be informed where required by law.
6. Information collected automatically
When you use Pocket, we and our infrastructure providers may receive technical information such as IP address, device and operating-system type, app version, browser type, language, timestamps, network information, crash or error details, security events, and interactions with Pocket features.
Our website may use essential cookies or similar local technologies to remember choices, maintain security, and provide requested features. If Pocket introduces non-essential analytics or advertising technologies, we will provide any notice and consent controls required by applicable law.
7. How we use personal data
We use personal data to create and maintain accounts; verify email ownership; provide wallet, send, receive, recovery, and Earn features; show balances and activity; resolve usernames; process and support transactions; prevent fraud and misuse; secure the Pocket Services; troubleshoot errors; respond to support requests; meet legal obligations; enforce our Terms; and improve reliability and usability.
Where required, we process data based on your consent, performance of our agreement with you, compliance with law, protection of vital interests, or our legitimate interests in providing, securing, and improving Pocket without overriding your rights.
8. How we share personal data
We may share relevant data with Coins.ph for regulated partner services; Supabase and related hosting, database, authentication, storage, and email-delivery providers; Stellar network infrastructure; security, fraud-prevention, customer-support, and professional advisers; authorities where legally required; and a buyer or successor involved in a merger, financing, reorganization, or sale of the business.
We share only data reasonably needed for the relevant purpose and require service providers acting on our behalf to protect it. We do not sell or rent personal data to third parties for their independent advertising.
9. Public and third-party information
Profile details intended for discovery and public blockchain records can be viewed by other users or third parties. If you follow a link to, connect with, or use a third-party service, that provider's terms and privacy policy apply to its processing.
Pocket is not responsible for independent third-party privacy practices. Review a provider's policy before submitting information or authorizing a connection.
10. Data retention
We retain personal data for as long as needed to provide the Pocket Services, maintain account recovery, resolve disputes, prevent fraud, enforce agreements, and satisfy legal, tax, accounting, anti-money-laundering, or regulatory requirements. Retention periods vary by data type and purpose.
Closing or resetting Pocket may remove device-stored information, but it does not erase public blockchain records. Coins.ph retains KYC and partner-service information according to its own legal obligations and privacy policy. We may retain de-identified or aggregated information that no longer identifies you.
11. International data transfers
Pocket and its service providers may process data in the Philippines and other countries where they operate. Those countries may have different privacy laws. Where required, we use contractual, organizational, and technical safeguards for international transfers.
12. Security
We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, secure device storage, hashing for PIN-related data, encrypted network communications, and restricted service-provider access. No system or transmission method is completely secure, and we cannot guarantee absolute security.
You help protect your data by securing your device and email account, using a strong PIN, installing updates, reviewing transaction details, and promptly reporting suspected unauthorized access.
13. Your privacy rights
Subject to the Data Privacy Act of 2012, its implementing rules, and applicable exceptions, you may have the right to be informed, access personal data, object to processing, correct inaccurate data, request erasure or blocking, obtain data portability, withdraw consent, file a complaint, and seek damages where legally available.
Requests may be submitted through the support channel available in the Pocket application. We may need to verify your identity before completing a request. Some requests may be limited by legal-retention duties, fraud-prevention needs, the rights of others, or the permanent nature of public blockchain records. You may also file a complaint with the National Privacy Commission.
14. Children
Pocket is not intended for anyone under 18. We do not knowingly offer accounts to children. If you believe a child has provided personal data to Pocket, contact us through the in-app support channel.
15. Changes to this Policy
We may update this Policy to reflect changes in the Pocket Services, partners, technology, or legal requirements. We will post the revised Policy and update the effective date. We will provide additional notice or request consent when required.
16. Contact
Questions, concerns, and privacy-rights requests may be submitted through the support channel available in the Pocket application. Questions about Coins.ph KYC or its handling of partner-service data may also be directed to Coins.ph using the contact information in its privacy policy.