Security at Pocket BASE

Last updated: 16 July 2026

Your business. Your money. Your data. Protected. Pocket BASE stores sensitive financial information for Australians, so we built it with privacy, security and trust as core principles.

Encrypted in transit

Every connection between your device and Pocket BASE uses HTTPS so your data is protected as it travels.

Only you see your data

Row-level security in our database enforces that each account can only ever access its own records.

Securely stored

Your information is stored in a managed Australian-region-capable database with strict access controls.

Automatic backups

Our managed database provider performs regular automatic backups so we can recover from accidental data loss.

You control accountant access

You can invite an accountant to view or work with your books, and revoke that access at any time.

Export whenever you want

Create a full download of your Profiles, income, expenses, invoices, bills, payslips, tax summaries and uploaded documents from Settings → Data & deletion.

Deletion you ask for

Ask us to delete your account from Settings. You get 30 days to change your mind, then we remove your information and confirm it to you. Copies in encrypted backups are overwritten as those backups rotate.

Modern authentication

Sign in with email and password or Google. Passwords are hashed, sessions auto-refresh, and leaked-password checks are enabled.

What we will never do

  • Sell your personal or financial information.
  • Share your financial records with third parties without your explicit permission.
  • Give administrators unrestricted access to your books through the app.

Reporting a security issue

If you believe you've found a security issue in Pocket BASE, please email security@pocketmate.money. We take every report seriously.

This page describes the security controls Pocket BASE has in place today. It is not a certification. As we prepare for public launch we will engage independent reviewers and update this page.