The paperwork,
kept short on purpose.
Two documents: what we collect (very little), and the terms we hold each other to. Written to be read, not to survive a courtroom siege.
Privacy
Last reviewed · June 2026
What we collect
The minimum to run the service: your email address, to sign you in and reach you; billing details if you pay us, handled by our payment processor; and basic service logs (that a request happened — never what was inside it).
What we cannot see
Your records, notes, and files are encrypted in your browser before they reach us. We do not hold your keys and cannot decrypt what we store. This is architecture, not policy — there is no admin view of your pouch's contents, because none can exist.
No trackers, no sales
No third-party advertising trackers, on this site or in the product. We do not sell personal data in any form — aggregated, anonymised, or otherwise.
Where it lives
Sealed records are stored on UK-only cloud regions. If that ever needs to change, we will tell you before it does.
Your rights
Export your records at any time, in a readable format. Delete your pouch and it is deleted — we have no unsealed copy to keep. For anything else under UK GDPR, write to hello@picopouch.app and a person will handle it.
Terms
Last reviewed · June 2026
What the service is
PicoPouch stores encrypted records you create and releases them according to arrangements you set. Use it for lawful storage and sharing of your own household's and business's information.
Your side of the bargain
You hold the keys — literally. Keep your passphrase safe and your recovery key on paper, somewhere physical. Because of the zero-knowledge design, we cannot recover either for you. Losing both means losing access to what's sealed.
Handover is practical, not legal
A handover envelope passes on practical information. It is not a will, does not override one, and is not legal advice. Keep the will; put its location in the envelope.
If we ever wind down
You get notice and a clear path to export everything, readable, before anything is turned off. Sealed records remain sealed throughout — a closing company still cannot read them.
Changes to these terms
When these documents change, we say so plainly, in advance, with what changed and why. No silent updates.