What the Hey Pocket knows about you

People around you

Pocket's privacy policy places responsibility on the user to obtain consent from people they record; the device has no camera but its dual studio microphones and contact mic capture conversations, and there is no technical mechanism preventing recording of non-consenting bystanders beyond the user's obligation to notify them.

Your location

Pocket collects name, email address, mailing and shipping address, phone number, account credentials, audio recordings captured with the Pocket Device, related transcripts, summaries, mind maps, and AI-enabled outputs, IP address, device and browser type, operating system, device identifiers, mobile advertising identifiers, crash and diagnostic data, in-app events, and general location derived from IP address.

Sent to the cloud

Pocket captures audio only when the user explicitly initiates recording and can work offline with recordings stored on the 64GB device until synced; however, transcription and AI summarization rely on cloud-based models including GPT-5, Claude, and Gemini, meaning audio data is shared with third-party AI service providers for processing.

Training their AI

Pocket's privacy policy states the company will not use personal recordings to train AI models without consent; however, the policy also states data may be used for research and development, and third-party AI providers including OpenAI, Anthropic, and Google process user audio for transcription and summarization.

Shared with others

Pocket shares personal information with service providers including cloud hosting, transcription and AI processing vendors, analytics providers, and payment processors; interest-based advertising partners may receive cookie and device identifier data, which may be considered a sale under the CCPA though the company states it does not sell personal information to advertisers or data brokers.

Selling your data

Pocket may disclose aggregated or de-identified information without restriction; in some jurisdictions such as California, third-party cookies and SDKs for interest-based ads may be deemed a sale or sharing of personal information, but Pocket does not disclose information that directly identifies users like name or email to advertisers without consent.

Deleting your data

Users can review and update personal information via account settings, request correction or deletion of data subject to legal exceptions, and manage cookie and SDK preferences; the privacy policy states personal information is retained only as long as necessary and is deleted, de-identified, or anonymized when no longer needed.

Deleting your data

Pocket users can review and update personal information in account settings, request deletion of personal information, request correction of inaccurate data, opt out of marketing emails, manage non-essential cookies and SDKs via cookie banner and browser controls, adjust mobile ad-identifier settings, disable push notifications, revoke OS-level permissions, and disconnect third-party integrations; Pocket honors Global Privacy Control signals where required by law.

How long they keep it

Pocket retains personal information only as long as necessary to fulfill the purposes described in the privacy policy, then deletes, de-identifies, or anonymizes it, though residual copies may remain in routine backups and system logs for a limited time; the policy describes administrative, technical, and physical safeguards but does not explicitly mention encryption and notes no method of transmission or storage is 100 percent secure.