Privacy Policy

Last updated: 1 June 2026

1. Who we are

Pocket Lawyer ("we", "us", "our") is a web app at pocketlawyer.life that helps you rehearse difficult everyday conversations with AI. This Privacy Policy explains what information we process when you use the app and your choices.

2. Information we collect

A short summary is in the footer link Your data.

On our server

Chat while you use the app: we process your scenario and messages in real time so the AI can reply. They may exist briefly in a technical session store on the server (for example sessions.db) only to keep that visit working, then are deleted automatically (see section 5). Uploaded files and photos are not stored: on paid plans we read each attachment once to draft the next reply (text extraction or image/PDF analysis), then discard the file; only your typed message and a note that you attached a filename may appear in the chat history. We do not use chat content for advertising or build a customer profile from it. Paid license keys are tracked by a secure fingerprint (not the key itself) so reply allowances cannot be reset by reinstalling the app.
Checkout email: if you buy a credit top-up, we use the email address you provide only to send your licence key and invoice. We do not link credit balances to your email — only to your licence key. We do not store card details — payments are handled by our payment provider.
Access login (optional): if the site is password-protected, we store a signed session cookie after you sign in. Usernames are not written to the practice database.
Server logs: we may record date, time, IP address, and similar technical lines (for example visits, app installs, or when email fails to send). These are not linked to your chat content and are not used for advertising.

In your browser (local storage & cookies)

License key and device instance id (if you activate a top-up)
Session id, cookie-banner acceptance, and similar settings
Optional "Premium on this device" flag when dev mode is enabled on a server
Strictly necessary cookies for sign-in when access protection is enabled

We do not sell your personal data and we do not use third-party advertising trackers on the app. If the site operator enables Plausible Analytics, that service measures traffic without cross-site tracking cookies.

3. Why we use it & legal basis (UK GDPR)

Provide the service (performance of a contract / legitimate interests): run your practice chat, generate AI replies and suggestions, and optional portraits.
Premium & licensing (contract): issue, validate, and email license keys; prevent abuse of paid features.
Essential cookies & storage (legitimate interests / consent where required): keep you signed in, remember preferences, and record cookie banner acceptance.
Security & reliability (legitimate interests): short server logs and session retention limits.

4. AI & third-party processors

To generate replies and images we send relevant parts of your scenario and conversation to AI providers configured on our server (for example Google Gemini and/or OpenAI). Those providers process data under their own terms and privacy policies.

Premium checkout is processed by Stripe. We email your license key after payment; keys are validated on our servers.

Transactional email (license keys) is sent through the SMTP service configured in our environment (for example Gmail or your domain host).

5. How long we keep data

Technical chat sessions: removed automatically after about 90 days of inactivity (configurable on our server). We do not keep them as a permanent customer archive. You can also clear browser storage at any time.
Generated portraits & cached audio: temporary files on the server are removed on a rolling schedule (typically 30–90 days without use).
License keys: validity is embedded in the key itself; we do not maintain a separate customer database of purchasers unless our payment provider does so under their policy.

6. Your rights

If you are in the UK or EEA you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability, subject to exceptions. Because most practice data is tied to an anonymous session id in your browser, the easiest way to erase it is to clear site data for pocketlawyer.life. For other requests, see the ICO link below or clear site data as described above.

You may complain to the Information Commissioner's Office (ICO) if you believe we have handled your data unlawfully.

7. Children

Pocket Lawyer is intended for users aged 13 and over. It is not designed for children under 13 and we do not knowingly collect their data. If we become aware that a child under 13 has used the app, we will delete associated server sessions where possible.

8. International transfers

Our server may be in the UK or EU. AI and payment providers may process data in other countries under their standard contractual safeguards.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the app after an update means you accept the revised policy.