Monthly Pocket processes your records in the browser and syncs them to a private Google Sheet you own. A local browser copy supports the app and offline changes.
1. Data principles
- Ownership: your budget spreadsheet belongs to your Google account.
- Minimum access: Monthly Pocket uses Google’s
drive.filescope, which is limited to files the app creates or that you open with it. - Visibility: you can open the Sheet, download exports, and inspect the records at any time.
- Portability: your workspace can be downloaded as JSON; monthly expenses can be exported as CSV.
- No advertising use: budget records are not sold or used to target ads.
2. Data map
Browser local storage + the private Monthly Pocket Google Sheet.
Used to identify and isolate your workspace and lifetime access.
Encrypted in a Secure, HTTP-only cookie so the connection can be restored.
Razorpay processes payment details. Monthly Pocket verifies transaction identifiers and stores a signed lifetime-access record in your private Sheet.
Your question and limited recent context may be processed by Google Gemini. Chat is not written to your budget Sheet; do not include sensitive data.
The currency tool requests public rate data; budget amounts and identity are not sent with that request.
Created in your browser and downloaded to the location you choose.
May be processed in ordinary infrastructure logs by the hosting provider.
3. Google account and Sheets access
Monthly Pocket requests Google sign-in identity plus drive.file access. It searches for an owned spreadsheet marked for your account or creates a new private spreadsheet named “Pocket Budget — My private data.” Workspace data is written to a tab named “PocketData.”
The app does not request broad access to every file in your Drive. Do not manually change the Sheet’s Monthly Pocket account marker. Sharing the Sheet through Google Drive is your choice and may expose it to people you select.
4. Retention
The browser copy remains until you clear site data, use browser controls that remove storage, or the browser removes it. The Google Sheet remains in your Drive until you delete it under Google’s retention behavior.
The encrypted session cookie can remain for up to one year unless you log out, revoke access, clear cookies, or it otherwise expires or becomes invalid. The encrypted lifetime-access cookie expires after 6 hours and is removed when you log out. The signed-in hint cookie (no token or account data) lasts up to one year and is removed when you log out or your session ends. The hosting provider may retain limited security and request logs according to its own operational policy.
5. How to remove your data
- Download a JSON backup first if you want a portable copy.
- Delete “Pocket Budget — My private data” in Google Drive and empty Drive trash according to Google’s controls.
- Log out of Monthly Pocket.
- Clear Monthly Pocket’s cookies and site data in your browser to remove the local copy.
- Optionally revoke Monthly Pocket under your Google Account’s third-party access settings.
These are separate storage locations. Removing one does not automatically remove the others.
6. Important limits
“No Monthly Pocket database” means Monthly Pocket does not keep your budget records in a separate centralized application database. It does not mean that no service processes any data: the browser holds a local copy, Google holds the Sheet and handles authentication, and the hosting provider handles requests.
Browser local storage is not encrypted by Monthly Pocket. A person with access to your browser profile may be able to read it. Monthly Pocket cannot control copies you export, Sheets you share, browser backups, Google retention, or third-party device security.
This data policy supplements the Privacy Policy. If they conflict, the Privacy Policy governs.