pocketback Privacy policy

How we look after your information

We use your information only to find money you're owed, show you cheaper deals on your bills and, when you ask, claim delayed-flight compensation for you. We don't sell it, and we don't use it for advertising.

Last updated 9 October 2026

Who we are

Pocketback is run by Ankur Kumar Sriwastava, trading as Pocketback, in the United Kingdom. We decide how your personal information is used, which makes us the "controller" under UK data protection law.

Questions or requests about your information: hello@pocketback.co.uk.

What we collect

  • Documents you upload or paste, such as train tickets, flight bookings and bills. These can include your name, journey details, booking reference, prices and account number.
  • Emails you forward to claims@pocketback.co.uk, including any attachments and the email address you sent from, and any replies you send us, such as which train you actually took.
  • Your details when you ask us to claim for a delayed flight: your name, email address, postal address, mobile number (optional), booking reference or account number, a copy of your ticket or booking, and the wording you agreed to.
  • Gmail set-up emails. If you set up automatic forwarding, Gmail sends us a confirmation email with your Gmail address and a code, so we can show you the code.
  • Technical information such as your IP address, browser type and the pages you request. Our hosting provider records this to keep the service secure and working.

How we use it, and why we're allowed to

What we doLegal basis
Read your document or email, check the official records (for trains) and tell you what you may be owedTaking the steps you asked for (contract)
Make a flight delay claim on your behalf, when you ask us toOur agreement with you (contract)
Check journeys after you travel, for bookings you forward in advance, and check a different train if you tell us you took oneOur agreement with you (contract)
Show you cheaper broadband, TV and mobile deals after reading your billTaking the steps you asked for (contract)
Keep the service secure, prevent misuse and fix problemsOur legitimate interests
Keep records we're required to keep, such as for taxLegal obligation

We use automated tools, including AI, to read documents and estimate what you're owed under the published rules. These estimates guide you; they are not final decisions. We check a claim before we file it, and the company you're claiming from makes the final decision.

We won't send you marketing emails unless you agree to them.

Who we share it with

  • Cloudflare hosts our website, database and email. Your information is stored with them.
  • Anthropic provides Claude, the AI that reads your documents and emails. Anthropic deletes what we send within 30 days by default and doesn't use it to train its models (retention, training).
  • National Rail's historical performance service (Rail Data Marketplace). We send only station codes, dates and times, never your personal details.
  • The airline you're claiming from, and a solicitor we work with if a claim needs to go to court. We share only what the claim needs, and only when you've asked us to claim.
  • Google Fonts. Our pages load their typefaces from Google, which receives your IP address when you visit.
  • Authorities, if the law requires it.

The deals we show after reading your bill are adverts, and we label them "Ad". If you switch through one, the provider may pay us a commission, usually through the affiliate network Awin. When you click a deal, we count the click and pass Awin a random reference so we can match a commission to the deal. We don't record who clicked, and we don't send your details to Awin or the provider. Once you're on their websites, they may use cookies under their own privacy policies.

Cloudflare and Anthropic may process information outside the UK, including in the United States. When they do, it's protected by safeguards approved under UK law, such as the UK's International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

InformationHow long
Documents you upload or paste to checkNot stored by us. Read once to give you your result.
Forwarded emails: what we read from them12 months, unless you ask us to claim
Forwarded emails: the attached ticket or booking90 days, unless you ask us to claim
Claims you ask us to make, with your ticket copy6 years after the claim ends, the period in which legal claims can be brought
Gmail set-up codes24 hours
Deal clicks (a count and a random reference, nothing about you)2 years
Technical logsA few days

On your device

We don't use advertising or tracking cookies. Your browser remembers your invite code and the last tab you used, so you don't have to enter them again. This stays on your device.

Your rights

You can ask us to give you a copy of your information, correct it, delete it, limit or object to how we use it, or send it to you in a portable format. Email hello@pocketback.co.uk. We'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first.

Security

All connections to Pocketback are encrypted. Only Pocketback's administrator can see claims and forwarded emails, behind a password.

Age

Pocketback is for adults aged 18 and over.

Changes

If we change how we use your information, we'll update this page and the date at the top.