Pocket privacy
How Pocket handles your collection, iCloud, sharing, and deletion.
Policy for core app version 1.0 · Updated October 18, 2026. Earlier TestFlight versions may not include the deletion and recovery controls described below.
Your collection
Pocket stores your entries and attached images/PDFs encrypted on your device. Device authentication protects access to its local key. Pocket does not create a separate account or send your collection to a Tallyfield server. This version has no AI processing, advertising, or third-party analytics SDK.
iCloud and sharing
When available, Pocket syncs encrypted items and attachments through Apple’s CloudKit and its encryption key through iCloud Keychain. Favorites, added dates, and copy activity sync privately within your Apple Account. Anyone you invite to a collection, and give its access key, can read, copy, add, edit, and delete its items, including archived items. Joining combines your existing items with that collection. Removing someone’s iCloud access cannot erase copies or keys they already have.
Archive and deletion
Archiving hides an item from your active collection; it does not delete it. In Archive, open an item, choose Item options, then Delete item. Deletion removes its content and attachments from the current collection and propagates when devices sync. A minimal deletion marker prevents stale devices from restoring it. Older Pocket versions must be updated to sync collections containing deletions.
Copies and recovery
Pocket keeps encrypted local backups before certain migrations and sharing. Deletion also scrubs readable app-created backups in the active vault directory and removes unreferenced attachment files. Unreadable original files preserved during recovery, exports, copies held by other people, and Apple-managed device/cloud backups may remain. Recovery restores only data that reached iCloud; unsynced changes on a lost device may be unavailable. Deleting the app alone does not delete iCloud data. You can manage Pocket’s iCloud storage in Apple’s settings; stop using the collection on all devices before removing it there.
Copying and attachments
Copy uses a device-only clipboard with a short expiration. Previewing or sharing an attachment creates a temporary decrypted copy, removed on dismissal, lock, or next launch. Copies saved or sent to another app are controlled by that app and its recipient. Pocket does not read your biometric data; Apple performs device authentication.
Support and Apple services
Apple operates iCloud, the App Store, and optional diagnostics under its own policies. If you email support, we receive your email address and what you choose to send. Do not send passwords, access keys, card numbers, identity documents, or private collection exports. Support messages are used to respond to you and are retained as needed for that request; you can request their deletion.
Publisher
Pocket is made by Omri Avital under the Tallyfield name. The core app is free. Brand marks identify the items you save; their respective owners retain their rights. Pocket is not affiliated with or endorsed by those brands. See Artwork credits for sources and license links.
Contact and changes
Contact support@tallyfield.app with privacy questions or a request to delete support correspondence. Material changes will be reflected in this policy and the app. This website is hosted by Render; ordinary web requests may generate hosting access logs. The Pocket app does not send its collection to this website.