Privacy Policy & Architecture

Unlike traditional cloud budgeting tools (such as Monarch Money, YNAB, or Copilot), ProjectionPlan does not maintain any remote cloud databases containing customer financial ledgers.

• OS Sandboxing: The application executes strictly inside the isolated OS application sandbox on your Android device.
• Hardware-Backed Encryption: Your local SQLite database is encrypted at rest using native Android File-Based Encryption (FBE).
• No Mandatory Accounts: You do not need to register with an email address, verify a phone number, or authenticate via third-party OAuth providers to use our simulation engines.

Mainstream personal finance applications require you to input bank credentials into third-party financial aggregators (such as Plaid, MX, or Yodlee). These third parties continuously scrape your financial institutions, creating persistent vulnerability vectors and data privacy risks.

ProjectionPlan completely eliminates third-party aggregators. When you import a standard CSV statement from your bank or credit union:

• Parsing occurs entirely in volatile device memory using our native RFC 4180 streaming engine.
• Date format auto-detection (15+ international formats) and delimiter sniffing execute on-device in TypeScript/C++ without network requests.
• Zero statement bytes or extracted records are ever uploaded to any server.

When you visit our public website at https://projectionplan.in:

• Waitlist Emails & Marketing Consent: If you voluntarily join our early access waitlist, we collect your email address. This is processed strictly based on your affirmative consent (GDPR Art. 6(1)(a)) to notify you of launch milestones, product availability, and early-bird discounts. We use Loops (Loops.so, USA) as our email delivery processor under data protection safeguards. Every email contains an immediate one-click unsubscribe mechanism.
• Cookieless Web Analytics: We use privacy-friendly Vercel Web Analytics to measure aggregate website traffic, Core Web Vitals, and errors. Vercel Web Analytics is 100% cookieless. It does not write to cookies, LocalStorage, or device memory, and does not perform cross-site tracking or profiling.
• Server Edge Security Logs: Standard HTTP request metadata (transient IP address, User-Agent) is processed briefly by Vercel edge CDN nodes for rate-limiting, DDoS prevention, and security under our legitimate interest (GDPR Art. 6(1)(f)). IP logs are discarded in accordance with strict retention schedules.

4. Data Retention & Sub-Processors

We practice strict data minimization. We only retain personal data for as long as necessary to fulfill the purpose for which it was collected:

• Waitlist Emails: Retained until you unsubscribe or request deletion. Upon unsubscribe, your record is purged from active sending lists.
• Edge CDN Logs: Ephemeral server connection logs are retained for a maximum of 30 days solely for security diagnostics and rate limiting, then permanently deleted.

5. Global Privacy Rights (GDPR, CCPA & Indian DPDPA)

Regardless of where you reside, we honor core data sovereignty rights:

6. Data Controller & Grievance Redressal Officer

For inquiries regarding our privacy architecture, data handling practices, waitlist data removal, or grievance redressal under applicable laws, contact our designated privacy officer: