The CoatPocket team ("we," "us," or "our") built CoatPocket (the "App") to help medical students, residents, fellows, and physicians plan their student loans, budget, and long-term finances. This Privacy Policy explains what information the App collects, how it's used, and the choices available to you.
If a future version of the App changes what's collected or how (e.g., adding an account system, analytics, or advertising), this Privacy Policy will be updated first, and you will be able to review the changes before they take effect.
To generate personalized projections and budgets, the App asks you to enter information such as:
This information is stored locally in the App's private storage area on your device (via React Native's on-device AsyncStorage mechanism). It stays on your device unless you back up or transfer your device through your own device manufacturer's backup service (e.g., iCloud or Google backup of app data), which is controlled by your device settings, not by us.
Document import. The App also offers an optional "Import from a document" feature that lets you pick a PDF (a payslip, a student or personal loan statement, or a brokerage/bank/retirement statement) using your device's own file picker. That PDF is read entirely on your device: the App looks for plain, labeled numbers already present in the PDF's text (such as "Gross Pay" or "Outstanding Principal Balance"), and for where that text sits on the page so that the columns of a table can be told apart, using simple text pattern-matching and layout rules that run locally. The App does not perform OCR or any AI-based reading of the document, does not use any cloud service or third-party API to process it, and does not upload the file, its extracted text, or any part of it anywhere. Every number the feature finds is shown to you to review, edit, or discard before anything is saved to your profile — nothing is applied automatically. If a document can't be read (for example, because it's a scanned image), the App simply reports that and lets you enter the numbers by hand instead. If a PDF is protected by a password, the App can ask you to type it so the file can be opened on your device; that password is used only for that purpose, is never stored, and is never sent anywhere. Your device's file picker gives the App a temporary copy of the file inside the App's own private storage, and the App deletes that copy as soon as it has been read; the file's text is held in temporary memory only while you review it.
Loan statements and tracking each loan. When you import a student loan or personal loan statement, the App reads it loan by loan rather than as one total, because most borrowers have several loans with different balances and rates. For each loan on the statement it looks only for the loan's type, the amount originally borrowed, the date it was first paid out, its interest rate, its principal and unpaid-interest balances and the date they are as of, the monthly payment, the repayment plan, the payments remaining, the totals paid so far, the loan's maturity or payoff date and original term, its repayment status (such as in repayment, deferment, forbearance or grace period), whether its rate is fixed or variable, the day of the month the payment is due, the name of the servicer or lender, and the servicer's own label for the loan (such as "Group 1A"). Your name, address, phone number, email address, and full account or loan number, which appear on the same pages, are not read, kept, or shown; for a loan from a private or personal lender, the App keeps only the last four digits of that loan's account number, so that two loans from the same lender can be told apart, including when one statement lists several loans. You choose which loans on the statement to keep (a loan that looks like a parent's loan starts unchecked). When you save, each loan is stored on your device along with its balance as of that statement. If you later add a newer statement for the same loan, the App adds the new balance to that loan's history on your device so you can see how it has changed, and the loan totals shown in the App are added up from the loans you track. This history stays on your device, like the rest of your financial profile, and is never sent to us or to anyone else.
Federal loan data file. The same feature can also read the federal student loan data file that you download yourself from studentaid.gov (My Aid, then Download My Aid Data), a plain-text file that you pick using your device's own file picker. That file opens with personal details such as your name, address, email address, and phone numbers, and it also contains identifiers and school names. The App ignores all of that: it does not keep it, show it, or use it. It looks only for each federal loan's type, the amount borrowed, the outstanding principal and unpaid-interest balances and the date they are as of, the interest rate, the date the loan was made, the repayment plan and the payment it schedules, the name of the servicer that holds it, and the number of months counted toward Public Service Loan Forgiveness (PSLF). From those it builds a list of your loans, each of which you can keep or leave out, along with suggestions for the period in which your loans were first made, your main servicer, and your PSLF months so far. Parent PLUS loans (which belong to a parent) and loans with nothing owed are left out, and the App tells you when it has done so. The loans you keep are stored and tracked on your device in the same way as loans from a statement (see above), and if the same loan appears in both the file and a statement, the App combines them into one. As with a PDF, the file is read entirely on your device using simple text matching that runs locally, and neither the file nor any part of it is uploaded or sent anywhere. Your device's file picker gives the App a temporary copy inside the App's own private storage, and the App deletes that copy as soon as it has been read; the file's text is held in temporary memory only while the loans and suggestions are made. Everything is shown to you to review, edit, or discard, nothing is applied automatically, and only the loans and figures you choose to confirm are saved, on your device.
Planning tools, the weekly recap, and reminders. The Dashboard can show a short recap of your last seven days, and the App has tools for check-ins, goals, a money calendar and imported-spending review. Everything they show is worked out on your device from the information you have entered, using fixed rules; the App does not use any AI service or cloud service to write it, and none of it is sent to us or anyone else. If you turn on the weekly recap reminder (or any other reminder), the App asks your device to show a notification at the time you chose. These are local notifications scheduled on your device; the App does not use a push notification service for them, and a reminder never contains your figures.
Support Center, your Support ID, and feedback. The Profile tab opens a Support Center that holds Send feedback, a place to copy your Support ID, App lock, backup and restore, and the controls to redo the onboarding questions or delete your data. Your Support ID is the random, anonymous identifier that RevenueCat, our subscription-management provider, keeps your purchases under (it looks like "$RCAnonymousID:" followed by letters and numbers); it contains no name or email and is created on your device. You can copy it and paste it into a message so we can find your purchase if you need help.
Send feedback is a short form. You choose what kind of message it is (an idea, something that broke, a question, praise, or something else), write a message of up to 2,000 characters, and may type an email address if you would like a reply. Nothing is sent until you tap Send. When you do, the message and its kind are sent to our backend (Supabase) and stored there under the same kind of anonymous session the Community tab uses. Unless you switch off "Include app details" first, the message also carries the App's version, your iOS version, and your Support ID, so we can look into a problem; the form shows what will be attached. We never receive your name, and an email address reaches us only if you type one into the form. Nothing from your financial profile (your income, loans, budget, spending, goals, notes, or anything else you have entered) is ever included. The form limits how many messages one device can send in an hour. We read feedback in our own database dashboard; the App can add a message but can never read one back, and no other user can see it. Please do not put account numbers, passwords, patient information, or health information in a message. If the form cannot send (for example, you are offline), your message stays on your screen and you can choose to email us instead through your own email app; an email you send that way is handled by your email provider and is not sent by the App.
Backup file. The Profile tab can create a backup of your financial profile as a single file, and can restore one. When you create a backup, the file is made on your device and handed to your device's share sheet, so you choose where it goes (for example, your own files, a cloud drive you use, or an email to yourself). We never receive it. The file is not encrypted: it is readable text that includes everything in your financial profile, so anyone who has the file can read it, and you should store it as you would a bank statement. Restoring a backup replaces the information in the App with the file's contents; it does not restore a subscription, and it does not restart or extend a free trial.
The Community tab is a shared, anonymous discussion feed, not a local-only feature. Here's how it actually works:
Do not include personally identifying, sensitive, or confidential information in anything you type into the App, including Community posts and personal notes — while your handle is anonymous, the content of what you write is still visible to every other user.
The App does not collect or transmit, and does not include:
The only information that leaves your device is: (a) the content and random handle for anything you choose to post in the Community tab (Section 3), (b) subscription/purchase information handled by Apple and RevenueCat (Section 5), and (c) the message, and the optional details, that you choose to send through the feedback form (Section 2).
If analytics, crash reporting, or any other new data collection is added in a future release, this Privacy Policy will be updated to disclose it before that release ships.
CoatPocket offers three optional premium subscription tiers (Student, Resident/Fellow, and Attending, each billed monthly or annually), processed by Apple's App Store and our subscription-management provider, RevenueCat — not by us directly. Apple, and RevenueCat as our payment/subscription processor, receive the transaction and device information necessary to process your purchase, verify your subscription status, and provide customer support for billing issues. See Apple's privacy policy and RevenueCat's privacy policy for details on what they collect. We receive only confirmation of your subscription status and tier (e.g., "active Resident/Fellow subscriber"), not your payment card details. The Support ID shown in the Support Center is the anonymous identifier RevenueCat keeps your purchases under; if you choose to send it to us (by pasting it into a message, or by leaving "Include app details" on in the feedback form), we can use it to look up your subscription status when you ask for help.
Every new install also automatically starts with a two-week (14-day) free trial of Premium. The trial is tracked locally on your device, requires no payment method or account, and is separate from Apple's billing; the date it started is not sent to us, Apple, or RevenueCat. When it ends, you can subscribe or keep using the free version of the App. Subscribing at any point, including during the trial, charges your payment method immediately at the price shown. See the in-app pricing screen for current prices.
CoatPocket is intended for medical students, residents, fellows, and physicians, and is not directed to children. The App carries a 16+ App Store age rating, and you must be at least 16 years old to use it (see the Terms of Service, Section 2). We do not knowingly collect personal information from anyone under the age of 16.
Financial profile data, including the loans you track and their balance history, is stored only on your device: it persists for as long as the App remains installed (or until you clear it), and is removed when you uninstall the App or clear the App's storage, subject to your device's backup settings. A backup file you create is stored where you save it, outside the App, and is kept until you delete it. Community posts/comments you write are retained on our backend until you delete them yourself, or until removed per Section 3 or our Terms of Service. Feedback you send is kept on our backend for as long as it is useful for answering you and improving the App, or until you ask us to delete it (Section 7).
For your financial profile data, we rely on your device's operating system and standard on-device storage protections. For Community data, our backend (Supabase) uses database-level access rules (Row Level Security) so that only you can create or delete content under your own anonymous identity — no one, including us through the app's normal operation, can post or delete as you. The same kind of rules apply to feedback: the App is allowed to add a message and is never allowed to read any back, so only we can read what has been sent, in our database dashboard. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy as the App changes — for example, if we add cloud sync, accounts, or analytics in the future. We'll update the "Last updated" date above, and for material changes (such as beginning to collect or transmit personal data we don't collect today), we will provide notice within the App before the change takes effect.
Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), other U.S. state privacy laws, or the EU/UK GDPR — for example, rights to access, delete, or correct personal information we hold about you. Your financial/profile data is never on our servers, so there is nothing for us to provide, correct, or delete on your behalf there. Your Community posts/comments and their associated anonymous handle do live on our backend (Supabase); you can delete these yourself at any time from within the App (Section 7), or contact us (Section 12) for help removing them. Feedback messages, and any reply email address or Support ID you sent with them, also live on our backend (Supabase); contact us (Section 12) to ask us to find and delete them, and give us the Support ID or email address you sent so we can tell which messages are yours. Subscription/billing records are held by Apple/RevenueCat (see Section 5).
If you have questions about this Privacy Policy, contact us at: