Who we are
Pocketwire is run by [Company name], [registered address], Poland, [company registration number] (“Pocketwire”, “we”). We are the controller of the personal data described in this policy.
For anything about your data, write to privacy@pocketwire.app.
The short version
- We keep only what the service needs: your account, your devices, your settings and a log of requests.
- We don’t keep the text of your messages once they’re sent, unless you turn on message history.
- Our server sees each message while it passes it on to your phone. Pocketwire is not end-to-end encrypted.
- We don’t read your contacts, your inbox or the replies you get.
- We don’t sell data, show ads, or use analytics or tracking cookies.
- Our servers are in the EU.
What we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Account: email address, password (stored only as a scrypt hash), plan and settings | To run your account and apply your settings | Contract | Until you delete your account |
| Devices: name, type, platform, public key, online status and when each was last seen | To connect your phone or computer and route your messages to it | Contract | Until you remove the device or delete your account |
| Connected apps: the app’s name, the access you granted, token hashes and dates | To let the AI apps you approved use Pocketwire, and let you disconnect them | Contract | Until you disconnect the app or its access expires (at most 30 days without use) |
| Activity log: recipient number (encrypted), which app asked, length, number of SMS parts, a SHA-256 fingerprint of the text, status, error and times | To show you what happened, enforce limits and investigate abuse | Contract; our legitimate interest in preventing abuse | 7 days on Free, 1 year on Pro and Team |
| Message text | To deliver your message to your device | Contract | Encrypted until the message is sent, rejected, failed or expired, then deleted. Kept with the log entry only if you turn on message history. |
| Dashboard session: a random session ID in a cookie (stored on our side only as a hash) | To keep you signed in | Contract | Up to 30 days, or until you sign out |
| IP address, held in memory while we rate-limit sign-in, pairing and connection requests, and error reports that may include request details | To keep the service secure and working | Legitimate interest | Rate-limit data for minutes; error reports [up to 14 days, to be confirmed] |
| Emails you send us | To answer you | Legitimate interest | As long as needed to help you, then [12 months] |
Backups of our database hold the same data and are kept for about 7 days.
We don’t collect your contacts, your incoming texts, your location or your conversations with your AI app.
Your messages and encryption
When your AI app asks Pocketwire to send a text, it sends us the recipient and the text over an encrypted connection (TLS). We store the text encrypted with AES-256-GCM while it waits for your approval and for your device, pass it to your device over another encrypted connection, and delete it as soon as the message is sent, rejected, failed or expired. If you turn on message history, the text is kept, encrypted, with the log entry instead.
Because our server handles the text in readable form while it passes it on, Pocketwire is not end-to-end encrypted. If you need that no third party can see your messages, you can host Pocketwire yourself.
The people you text are affected too: we process their phone number and your message only to deliver the message and keep your activity log, as described above.
Your AI app’s provider handles your conversation under its own privacy policy. We only receive what the app sends to Pocketwire’s tools.
Transfers outside the EU
We keep your data in the European Union. If we ever use a provider outside the European Economic Area, we’ll protect the transfer with safeguards such as the EU Standard Contractual Clauses, and list it here first.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your data, or send it to you in a portable format;
- correct data that’s wrong;
- delete your data, or restrict how we use it;
- stop using your data where we rely on our legitimate interests.
Write to privacy@pocketwire.app from the address you signed up with. We answer within one month. In the dashboard you can remove devices, disconnect apps and turn message history off yourself, with effect at once. To delete your whole account, email us.
You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), or to the authority where you live.
How we protect data
Connections use TLS, recipients and waiting messages are encrypted at rest, and tokens, pairing codes and passwords are stored only as hashes. Devices prove who they are with keys that never leave them. Read more in Security and privacy in the docs.
Children
Pocketwire is for adults. You must be 18 or older to use it, and we don’t knowingly collect data about children.
Changes to this policy
When we change this policy, we’ll update the date at the top. If a change matters for how we use your data, we’ll email you before it applies.
Contact
Email privacy@pocketwire.app, or write to [Company name], [registered address], Poland.