Plunk — Privacy Policy

1. Plunk has no internet access

Plunk does not request Android's internet permission. It cannot send your notes, expenses, messages or anything else over the internet, to us or to anyone else. You can check this yourself: open Settings → Apps → Plunk → Permissions (or "App info") on your phone.

Plunk contains no advertising, no analytics, no tracking and no third-party services that collect data. There is no account and no sign-in.

2. What Plunk stores, and where

Everything you create is stored in Plunk's private storage on your phone, which other apps cannot read:

• notes you write;
• expenses you record (amount, currency, date, merchant, category, payment method, description, and the text you typed or the alert it came from);
• money you have lent to or borrowed from people, including the names you enter;
• transactions detected by automatic capture that are waiting for you to review (see section 3);
• your category choices for merchants, so Plunk can suggest them next time;
• your app settings (theme, default currency, which features you turned on).

Plunk does not encrypt this data separately; it relies on Android's own app sandbox and device encryption.

The one exception to "other apps cannot read" is a backup folder, and only if you set one up yourself (see section 5).

3. Automatic capture (optional, off by default)

Plunk can find expenses for you in bank and UPI transaction alerts. This is off until you turn it on in Plunk's Settings, and Plunk explains what it does before Android asks for permission.

SMS

If you turn on Transaction SMS, Plunk asks for Android's permission to read and receive SMS. With it, Plunk:

• looks through SMS on your phone from the last 90 days when you first turn it on, and new SMS as they arrive;
• examines each message on your phone to decide whether it is a bank or UPI alert for money you spent;
• keeps only messages recognised as such a transaction, as a suggestion in Plunk's Inbox: the amount, currency, date, merchant, the last digits of the account exactly as the bank printed them, and the alert's text (which may include the bank's transaction reference, used to avoid showing the same payment twice);
• does not keep anything else. One-time passwords, offers, personal messages, money received and all other SMS are examined and discarded; they are never stored.

Plunk never sends SMS.

Payment app notifications

If you turn on Payment app notifications, Android asks you to give Plunk notification access. Plunk then looks only at notifications from a fixed list of banking and payment apps (for example Google Pay, PhonePe, Paytm and major bank apps). Notifications from every other app are ignored without their contents being read. Payment notifications are handled exactly like SMS above: only recognised spending is kept, as a suggestion.

Notifications from Plunk

When Plunk finds a payment it can show you a notification with an Add button, so you can record it without opening the app. Plunk asks before turning this on, and Android asks for permission to show notifications. That permission is used only for this. The notification is created on your phone and stays there; on a locked screen it says only that a payment was found, not the amount or who was paid. You can switch it off in Plunk's Settings (Tell me when a payment is found) or in Android's settings.

Nothing is added without you

A detected transaction becomes an expense only when you tap Add — in Plunk's Inbox or on its notification. A notification you ignore adds nothing. You can dismiss suggestions, and turn any of these features off at any time in Plunk's Settings. You can also remove the permissions in Android's settings.

4. When information leaves your phone

Only when you choose to send it:

• Export: Settings → Backup creates a file of your notes, expenses, categories, payment methods and lent/borrowed records, and opens Android's share menu so you can decide where it goes. The file is not encrypted. Keep it somewhere you trust.
• Export expenses as spreadsheet: creates a spreadsheet (CSV) file of your expenses — date, amount, currency, who was paid, description, category, payment method and how it was added — and opens the same share menu. It is not encrypted either.
• Email us: opens your own email app with a draft addressed to us. The draft includes the app version, your Android version and your phone model, to help with problems; you can edit or delete that line. Nothing is sent unless you send it.
• After a crash: the next time you open Plunk, it may offer to open an email draft containing technical details: the error, the app version, your phone model and Android version. You can read it before sending, or simply close it.

5. Backups and new phones

Plunk's data is excluded from Android's cloud backup, so it is not uploaded to your Google account. On Android 12 and later, if you move to a new phone using a cable or a direct phone-to-phone transfer, your Plunk data can be copied across. That transfer goes straight between your phones. To keep a copy yourself, use Export.

Automatic backup (optional, off by default)

In Settings → Backup you can choose a folder on your phone, using Android's own folder picker. Plunk then saves a backup file there about once a day when you open the app, and keeps the seven most recent. Plunk can write only to the folder you picked; it asks for no general access to your files.

These files hold the same information as an Export and are not encrypted. Unlike the rest of Plunk's data, they sit in ordinary phone storage: other apps that you have allowed to read your files can read them, and if the folder you choose is one that another app copies elsewhere, that app will copy them too. Plunk itself still sends nothing anywhere. Choose a folder only you use. You can turn this off in Settings at any time; the files already saved stay where they are until you delete them.

6. Keeping and deleting data

Your data stays on your phone until you delete it. When you delete a note, expense or entry, Plunk hides it immediately and keeps a deleted copy on the device so that Undo works. Uninstalling Plunk, or clearing its storage in Android's settings, permanently removes everything, including deleted items and detected suggestions — except backup and export files, which are ordinary files outside Plunk and stay until you delete them yourself.

7. Children

Plunk is not directed at children under 13 and does not knowingly collect information from anyone, children included.

8. Changes to this policy

If Plunk's handling of information changes, this page will be updated and the date above will change. A change that would send data off your phone would be explained in the app before it happened.

9. Contact

Questions about this policy or your data: valiant.techlabs@gmail.com