UPocket Privacy Policy

Last updated: October 3, 2026

UPocket Lab (“we,” “us,” or “our”) develops and operates UPocket (the “App”). This Policy explains what data we collect when you use the App and its system share extension, why we collect it, how long we keep it, and how you can manage it.

This Policy and the UPocket User Agreement together form the complete agreement between you and us. By starting to use the App, you confirm that you have read and understood this Policy. If you do not agree, please stop using the App.

1. Data We Collect

1.1 Data at a Glance

1.2 Email Verification Sign-In

The App uses email verification codes for sign-in, and sign-in also creates an account. We do not use sign-in passwords. Therefore:

1. For email-code sign-in, we collect only the email address you use to sign in.

2. Verification codes are stored as irreversible hashes. We cannot recover the plain-text code sent to you.

1.3 Device Information

The App does not collect device identifiers and does not request permission to “track” you.

1.4 Content Processing

To extract, reprocess, and translate full articles, we need to send the article content being processed to service providers acting on our behalf. We submit only the content needed for that processing and do not include your email address or account ID. We do not separately store a copy of the original content sent to those providers. Translation results are stored in your account space so they can be shown when you open the article again; see Section 1.1.

Service providers may handle the content they receive under their own terms. See Section 4 for related disclosures.

1.5 Share Extension and Device Permissions

System share extension: You can use the system share menu in other apps to send a web link or selected text to UPocket for saving. If you are not signed in, the extension will not send any content. The extension does not collect data separately and follows the same rules as the main App.

Device permissions:

• Clipboard: Used only to import web links. We do not access other clipboard content or read the clipboard in the background.

• Photo Library (add-only): Used only when you choose to save an image. The App requests permission to add to the Photo Library and does not request permission to read it.

• Network: The App requires an internet connection. Article content is stored on our servers and is not kept on your device for long-term storage.

2. How We Use Data

We use data only to the extent necessary to provide the App’s features:

1. Create, identify, and maintain your account and sign you in;

2. Import, extract, and save the web content you submit, and sync it across your devices;

3. Save and restore your reading progress, archive status, and translations, and avoid repeated processing and credit deductions;

4. Verify purchases, grant and deduct credits, and handle refunds and related disputes;

5. Send you sign-in verification codes;

6. Respond to feedback, troubleshoot issues, and protect accounts and the service; and

7. Meet obligations required by laws and regulations.

We do not use your data for advertising or cross-app tracking, use imported content for purposes unrelated to providing the service, or make your imported content available to other users.

3. Content You Import

When you submit a link to import an article, our server visits that link to retrieve the page content. The source website may record this visit and may identify the request as coming from our server rather than your device.

If content you import contains another person’s personal information, please confirm that submitting it is necessary and try to avoid importing sensitive information unrelated to the service.

4. Data Sharing

We do not sell or rent your personal information.

To provide the purposes described in this Policy, we use the following service providers to process necessary data. We provide only the data needed for each service and require providers to process it within the agreed scope:

• Cloud infrastructure providers: Host the server-side programs, database, and file storage, and process data associated with your account;

• Content processing providers: Receive article content for text extraction, reprocessing, and translation;

• Email providers: Receive your email address to send sign-in verification codes;

• Human verification providers: Receive network information from sign-in requests to distinguish normal users from automated scripts; and

• App stores: Receive transaction identifiers and purchase status to verify purchases and handle refunds.

We will not provide your data to other third parties except in the following circumstances:

1. You have given your separate consent;

2. We are required to do so by laws or regulations, or by a binding request from a judicial or administrative authority;

3. It is necessary to protect your, our, another user’s, or the public’s lawful rights, interests, or safety; or

4. Necessary data is transferred as required by law in connection with a merger, restructuring, or transfer of assets, and the recipient is required to continue complying with this Policy.

Our servers and data storage are hosted on public cloud infrastructure. Your data may be stored or processed outside the country or region where you are located. We reduce related risks by agreeing on the scope of processing and safeguards with our service providers. Our own security measures are described in Section 6. If the laws where you are located impose mandatory requirements on cross-border transfers, we will comply with those requirements.

5. Data Retention

We retain data only for as long as necessary to fulfill the purposes described in this Policy:

1. Account information is retained until you cancel your account, except for email account registration records retained to determine eligibility for signup credits, as described below under “Account Cancellation”;

2. Content you import is retained until you delete the article, we delete it under the UPocket User Agreement, or you cancel your account;

3. Reading and processing records are retained or deleted together with the associated article;

4. Purchase and credit records are retained for as long as needed to process transactions, refunds, and related disputes;

5. Feedback you submit is retained until you cancel your account;

6. Sign-in verification codes and session records become invalid when they expire, after you sign out, or after you cancel your account; and

7. Information we obtain to handle a complaint or dispute, or to meet a legal requirement, is retained only for as long as needed to handle that matter.

Account Cancellation

Account cancellation cannot be reversed. After cancellation, we will delete all data associated with your account, including all articles you imported, translations, reading records, and remaining credits, and that data cannot be restored.

Before cancelling, please confirm:

• You no longer need any articles in your account. The App does not keep article content on your device for long-term storage, so you will not be able to retrieve it through the App after cancellation; and

• If you need to keep an article, save its original link or the content you need yourself.

You may register again with the same email address, but the new account will not contain the original account’s articles, translations, reading records, or remaining credits.

To determine eligibility for signup credits and prevent repeated claims through repeated cancellation and re-registration, we retain an account registration record for that email address (limited to the email address, account status, and account creation and cancellation times). This record does not include your content data and is retained only for as long as necessary to prevent duplicate claims for this purpose.

You can request account cancellation in the App. If you can no longer sign in, you may also request cancellation using the contact information in Section 11. Your account is disabled as soon as it is cancelled, and cancellation cannot be undone in the App.

6. Data Security

We take the following measures to protect your account and data:

• Encryption in transit: All communication between the App and our servers is encrypted using HTTPS.

• Credentials are not stored in plain text: Sign-in verification codes and credentials used to maintain sign-in status are stored as irreversible hashes. Our servers do not store their original values.

• Restricted access: Access to server data is limited to what is necessary to maintain the App.

• Abuse prevention: We apply rate limits to verification-code requests and use human verification during sign-in. We record necessary network logs for these purposes.

However, no internet transmission or data storage method is completely secure. If a data security incident may affect your rights or interests, we will take measures under applicable laws and, where reasonably practicable, notify you.

7. Your Rights

You can manage your data directly in the App:

• View your imported articles, translations, reading progress, and credit transaction history;

• Delete or archive individual articles; and

• Sign out or cancel your account (see Section 5 for the consequences of cancellation).

You can also adjust the App’s permissions at any time in iOS Settings.

If you want to access, correct, or delete data outside the scope described above, or have another privacy-related request, contact us using the information in Section 11. We will handle your request under applicable law. To protect your account and data, we may need to verify your identity before processing the request.

8. Third-Party Content and Services

Article text is provided by our servers, but images, videos, and other content in an article may still be loaded from the source website or another third-party platform. When this content is displayed in the App, your device sends a request directly to the relevant third party. That third party may receive information about your network request and may record your visit using cookies or similar technologies under its own rules.

When you select “View Original” or follow a link in an article to a third-party website, that website’s data handling is not covered by this Policy.

These third parties operate independently, and we cannot control how they handle data. Please review their privacy policies where appropriate.

9. Information About Minors

The App is not designed for children. If you are under 18, please use the App with your parent or guardian’s consent and guidance, as described in Section 2.3 of the UPocket User Agreement.

We cannot verify a user’s actual age during registration and do not knowingly collect children’s personal information. If a parent or guardian discovers that we hold a child’s personal information, please contact us using the information in Section 11. After verification, we will delete the relevant data and terminate the associated account.

10. Updates to This Policy

We may update this Policy to reflect changes to the service or legal requirements. After an update, we will display the latest version in the App and update the date at the top of this Policy. A change to the date indicates that the content has changed.

If a change affects your important rights, we will notify you in an appropriate way. If you continue to use the App after the updated Policy takes effect, you will be deemed to have accepted it.

11. Contact Us

If you have questions, comments, or requests about this Policy, our data practices, or data deletion, please contact us:

Email: support@mail.upocketlab.com