Privacy Policy — PocketHSA

What this is

PocketHSA is an HSA receipt management app. We help you capture, organize, and store documentation for medical expenses so you can reimburse yourself from your HSA — this year or years from now.

What we collect

Account information: your email address and password (hashed — we never see it).
Receipt metadata: merchant name, amount, date, category, notes, patient or family-member name, and any other fields you enter. Receipts can include health information, such as a provider, a medication, or who the visit was for.
Receipt files: the images or PDFs you upload. These files can contain the same health information. By default they are stored in PocketHSA cloud, which is private Supabase storage. If you connect Google Drive, new files are stored in your own Google account instead. Either way the files are yours. We never gate your data, and you can export it anytime.
Waitlist: if you join from the public page, your email and any optional answers (HSA provider, about how many receipts a year, and whether you would pay or pre-order).
Usage data: standard server logs (timestamps, request paths). No advertising profiles. If Cloudflare Web Analytics is enabled, it counts page views only.
Payment information: handled entirely by Stripe. We never see or store your card details.

How we use it

To provide the service — storing, organizing, and displaying your receipts.
To read a receipt you choose to scan — the file, which may contain health information, is sent to Anthropic so the merchant, date, and amount can be filled in for you to review. See How we handle your receipts.
To process payments via Stripe.
To send transactional emails (account confirmation, password reset). No marketing emails without your explicit opt-in.

How we handle your receipts

When you scan a receipt, an AI service reads it to pull out the merchant, date and amount. Our AI provider's contract says it can't train on your data, and it deletes it within 30 days. You review everything before it's saved.

Only receipts you choose to scan are sent. Manual entry and spreadsheet import never use AI, except the optional “Get help matching” columns step, which sends only the header row and up to 5 sample rows.

Your data is always yours and always exportable.

AI output can be wrong, so check each field. The provider is Anthropic.

Third-party services

Supabase — authentication, the database, and private file storage for PocketHSA cloud. Receipt files you keep in PocketHSA cloud live in a private Supabase storage bucket, not a public URL. Your data is stored in Supabase’s US infrastructure.
Anthropic (Claude) — reads a receipt scan you choose to send, and the optional column-matching sample. Anthropic’s contract says it can’t train on that data, and it deletes it within 30 days. Anthropic’s privacy policy applies to that processing.
Stripe — payment processing for Pro subscriptions.
Google Drive (optional) — PocketHSA cloud does not use Google. If you connect Drive, receipt files are stored directly in your Google account instead. We request only the drive.file scope, meaning we can only access files PocketHSA itself created. If you turn on sheet sync, PocketHSA creates a spreadsheet in that folder and writes one row per receipt, including the health-related fields above. That spreadsheet is covered by the same per-file access. No additional Google permission is requested. We store an encrypted refresh token so uploads and sheet updates can continue after you leave the page. Disconnecting Drive in Settings stops that access. Google user data from that drive.file permission is used only to provide the Drive and ledger-sheet features you see in the app. We do not use it for ads, and we do not sell it. We do not transfer it except as needed to provide those features, to comply with the law, or with your consent. No person reads it except with your consent, for security, or when the law requires it. This follows Google’s API Services User Data Policy, including the Limited Use requirements.
Cloudflare — hosting and infrastructure. Web Analytics, when enabled, records page views (including a waitlist confirmation) without ads.

Not medical, tax, or legal advice

PocketHSA stores documentation you upload. It does not diagnose conditions, decide whether an expense is eligible, or give medical, tax, or legal advice. Check eligibility with IRS Publication 502 and your own tax or medical professionals.

Your data, your control

Your receipts are always yours, whether the files are in PocketHSA cloud or in your Google Drive. We never gate that data. You can export it anytime from Settings. A formatted PDF is a Pro feature.
You can delete individual receipts. You can also delete your whole account from Settings. That asks you to download your data first, then requires you to type DELETE or your email.
If you’ve connected Google Drive, those files are already in your account. Disconnecting PocketHSA or deleting your account does not delete them. Files in PocketHSA cloud stay in private Supabase storage until you delete them or your account.
We do not sell your data. Ever.

Data retention

We keep your data while your account is open. When you delete your account from Settings, PocketHSA removes your receipts, PocketHSA cloud files, and the account itself, and cancels an active Pro subscription. Receipt files stored in your Google Drive are not removed.

Security

All data is encrypted in transit (TLS) and at rest. Receipt files are stored in private buckets with signed URLs — not publicly accessible. We follow security best practices and access controls are enforced at the database level.

Contact

Questions about this policy? Email us at [email protected].