1. 100% On-Device Data Storage (Air-Gapped Architecture)
Unlike traditional cloud budgeting tools (such as Monarch Money, YNAB, or Copilot), ProjectionPlan does not maintain any remote cloud databases containing customer financial ledgers.
- OS Sandboxing: The application executes strictly inside the isolated OS application sandbox on your Android or iOS device.
- Hardware-Backed Encryption: Your local SQLite database is encrypted at rest using native Android File-Based Encryption (FBE) and iOS Data Protection APIs.
- No Mandatory Accounts: You do not need to register with an email address, verify a phone number, or authenticate via third-party OAuth providers to use our simulation engines.
2. In-Memory Bank Statement Parsing (Zero Plaid/MX)
Mainstream personal finance applications require you to input bank credentials into third-party financial aggregators (such as Plaid, MX, or Yodlee). These third parties continuously scrape your financial institutions, creating persistent vulnerability vectors and data privacy risks.
ProjectionPlan completely eliminates third-party aggregators. When you import a standard CSV statement from your bank or credit union:
- Parsing occurs entirely in volatile device memory using our native RFC 4180 streaming engine.
- Date format auto-detection (15+ international formats) and delimiter sniffing execute on-device in TypeScript/C++ without network requests.
- Zero statement bytes or extracted records are ever uploaded to any server.
3. Website & Waitlist Privacy Practices
When you visit our public website at https://projectionplan.in:
- Waitlist Emails: If you voluntarily join our early access waitlist, we collect your email address. This is utilized exclusively to notify you of launch milestones and provide early-bird pricing. We use Loops for email delivery; every email contains an immediate one-click unsubscribe mechanism.
- Cookieless Web Analytics: We use privacy-friendly Vercel Web Analytics to track general website performance, Core Web Vitals, and aggregate traffic patterns. No tracking cookies are stored, and no cross-site profiling or remarketing pixels (e.g. Meta Pixel) are employed.
- Server Edge Logs: Standard HTTP request data (IP address, user agent) is briefly processed by edge CDN routing for security and rate limiting, then discarded in accordance with industry security standards.
4. Global Privacy Rights (GDPR, CCPA & DPDPA)
We recognize and support your data sovereignty rights under the European Union General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and India's Digital Personal Data Protection Act (DPDPA):
Right to Access & Portability
You own your data. You can export your full database at any time from the app settings as structured CSV or JSON files.
Right to Absolute Erasure
Uninstalling the application immediately wipes all local encrypted files. To remove your email from our waitlist, use the unsubscribe link or email us.
5. Data Controller & Privacy Officer Contact
For inquiries regarding our privacy architecture, data handling practices, or waitlist data removal, contact our designated privacy officer:
ProjectionPlan Privacy Office
Email: privacy@projectionplan.in
Physical Address: Outer Ring Road, Bellandur, Bengaluru, Karnataka 560103, India
Phone: +91-80-6193-0000