Privacy Policy

Last updated: May 3, 2026

InZePocket is a local-first application published by InZeMobile. Your data stays on your devices. This policy describes what the app collects, what it doesn't, and the rare cases where data leaves your phone (always end-to-end encrypted).

1. Who we are

InZeMobile, publisher of the InZePocket and InZePocket Connect apps.
Contact: support@inzemobile.com

2. Data stored on your device

The app stores locally, in an encrypted database (SQLCipher, AES-256):

• Contexts you create (family, class, club…) with name, emoji, color.
• Beneficiaries you add (first name, role, avatar) — kids, students, players.
• Units, categories, tasks, rewards you configure.
• Actions (amounts, validations, disputes) you record.
• Your app preferences (language, theme, etc.).

This data is never sent to InZeMobile. It lives on your phone and only leaves it in 2 cases described below.

3. Sync between your devices

If you pair multiple devices (e.g. a parent's phone + a child's phone via InZePocket Connect), context data syncs in real time. Sync uses a Cloudflare relay that only sees opaque encrypted bytes:

• Content (actions, balances, history) is end-to-end encrypted with a key shared only between your paired devices (XChaCha20-Poly1305).
• The server cannot decrypt this content — it merely routes opaque messages.
• The only technical metadata visible server-side is: a random context ID (UUID v7), a device ID, message timestamp.
• No name, email, or personal data passes through this relay.

You can entirely disable the cloud relay in Preferences → Sync → Local-only mode. Sync will then occur only via local Wi-Fi (mDNS) or Bluetooth.

4. In-app purchases

Purchasing the Family subscription (or additional contexts) goes through Google Play Billing. InZeMobile receives from Google:

• An anonymous purchase ID (not your identity).
• The SKU purchased and the date.

InZeMobile receives neither your credit card nor your Google email address. For billing details, see Google's privacy policy.

5. Crash reporting (optional, can be disabled)

If you explicitly opt in via Preferences → Diagnostics, the app sends to Sentry (self-hosted by InZeMobile in the European Union) anonymous crash reports:

• Technical stack trace of the crash (code lines, error type).
• Device model, Android version, app version.
• No user data (no name, balance, action, context).

This option is off by default. You can turn it on/off at any time.

6. Android permissions requested

• Internet: required for cross-Internet sync via the Cloudflare relay. Can be disabled via local-only mode.
• Camera: only used to scan a pairing QR code. No photo is taken or stored.
• Bluetooth + local Wi-Fi access: used for local sync between your devices without Internet.
• Notifications: to alert you about actions to validate.

InZePocket does not request access to your contacts, photos, location, microphone, or other apps.

7. Your rights (GDPR)

Since your data lives on your phone, you have access to it at any time through the app. You can:

• View all your data via Preferences → Diagnostics → JSON export.
• Edit or delete any entry directly in the app.
• Erase everything by uninstalling the app (encrypted local data is wiped with it).
• Object to crash reporting by disabling it in Preferences (off by default).

For any question: support@inzemobile.com. You may also lodge a complaint with your national data protection authority.

8. Subprocessors

• Cloudflare (US/EU): hosts the blind sync relay. See their privacy policy.
• Google Play Billing (US/EU): handles in-app purchases. See their privacy policy.
• Sentry (self-hosted EU by InZeMobile): crash reporting if enabled.

9. Data retention

Your data is kept on your phone as long as you keep the app installed. On the Cloudflare relay, encrypted messages are deleted within 30 days after acknowledgment by all paired devices.

10. Changes to this policy

For significant updates, we will notify you via an in-app notification. The "Last updated" date at the top indicates the current version.

11. Contact

InZeMobile
Brussels, Belgium
Email: support@inzemobile.com