SkrillaPlan Privacy Policy

Effective date: July 22, 2026 (draft — not yet reviewed by counsel)

Plain talk, up front: SkrillaPlan exists to help you budget, not to monetize your data. We collect what the tool needs to work, and nothing else. Privacy here is the product, not a checkbox. The details follow.

What we don't do

The industry made this list necessary, so here it is, plainly. SkrillaPlan has:

• No advertising networks. None. Your data never meets an ad company.
• No third-party analytics trackers (no Google Analytics, no pixels).
• No session recording of what you do in the app.
• No location tracking. We never ask for or collect GPS data.
• No selling or renting personal information — ever, to anyone. We don't need a "this may constitute a sale under state law" hedge, because nothing we do resembles one.
• No data brokers, in either direction.

If any of this ever changes, this policy changes first, loudly, with notice — but the plan is that it never does.

Who we are

SkrillaPlan ("we," "us") is operated by Skrilla Plan, LLC, an Oklahoma limited liability company. Contact: support@skrillaplan.com.

What we collect

Account information. You sign in with Google. We receive your name, email address, and Google account identifier. We don't see your Google password.

Financial data via Plaid. When you connect a bank, you authenticate directly with Plaid, Inc. We receive transaction data (dates, amounts, merchants, categories), account metadata (institution and account names), and balances. We never see or store your bank credentials — the sign-in happens entirely with Plaid, and the access token Plaid issues is stored server-side where no browser can read it. Plaid's handling of your data is governed by its own policy: https://plaid.com/legal/#end-user-privacy-policy.

Email receipt data via Gmail (optional, off by default). If you turn on receipt matching and connect a Gmail account, we search that mailbox only for order-confirmation emails (currently from Amazon) and extract the order number, date, total, and item names to label your transactions. We do not read, store, or process any other mail.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: Gmail data is used only to provide the receipt-matching feature you turned on, is never used for advertising, never sold, and never transferred to third parties except as needed to provide the feature, comply with law, or as part of a merger/acquisition with equal protections.

Data you create. Budgets, categories, goals, tags, notes, renames, splits, household membership, and an activity log of changes members make.

Anonymous usage (optional). To learn which screens people use and what to improve, we may record coarse in-app events — which section you opened (for example "reports" or "budget") and when. This is first-party (stored by us, never sent to any third-party analytics service) and contains no financial data — no amounts, merchants, categories, balances, or transactions. You can turn it off any time under Account → Privacy. It is on by default for alpha testers (who joined to help shape the product) and off by default otherwise.

Operational data. Standard server logs and error reports needed to keep the service running.

How we use it

To provide the service: syncing transactions, computing your budget, matching receipts, sharing a household's budget among its members, and showing you reports. To communicate service matters (invites you initiate, security or billing notices). To keep the service secure and debug problems. That's the list.

We do not sell your personal information. We do not share it with advertisers. We do not use it to train advertising or unrelated models.

Email. We send service messages (security notices, invites you initiate, billing when that exists). If we ever send marketing email, it will be opt-out with one click, and service messages will never hide marketing inside them.

De-identified data. We may compute aggregate statistics that cannot be tied to any person or household (e.g., "what share of budgets include a grocery category") solely to improve the product. We do not sell aggregate data, and we never publish or share statistics small enough to identify anyone.

Who touches it (processors)

• Google Firebase / Google Cloud — hosting, database, authentication.
• Plaid, Inc. — bank connections and transaction data.
• Stripe, Inc. — payment processing, when paid subscriptions launch (Stripe receives billing details; we never store full card numbers).

Each processor handles data under its own security and privacy obligations. We share only what each needs to do its job.

Household sharing

A budget belongs to a household. Members you invite see the household's financial data (transactions, budgets, reports) according to their role, and an append-only activity log records who changed what. Don't invite people you wouldn't show your bank statement to.

Cookies and local storage

We use your browser's local storage for exactly two jobs: keeping you signed in (Firebase Authentication) and remembering your theme. No advertising cookies, no cross-site tracking, nothing that follows you around the web.

Where your data lives

Our servers run on Google Cloud in the United States. If you use SkrillaPlan from outside the US, your data is processed and stored in the US.

Security

Data is encrypted in transit (TLS) and at rest (Google Cloud defaults). Bank and Gmail access tokens live in server-side storage that client devices cannot read, enforced by database security rules. Access to financial data is scoped to your household by those same rules.

If something goes wrong

If a breach affects your personal data, we will notify you without undue delay at your account email, tell you plainly what happened and what we're doing about it, and notify regulators where the law requires.

Retention and deletion

Your data stays as long as your account does. You can export transactions (CSV) anytime. Disconnecting a bank stops new data; deleting your account removes your personal data from the live database within 30 days, with backups aging out after that. To delete your account, contact support@skrillaplan.com (in-app deletion is coming).

Your rights

Depending on where you live (e.g., California, EU/UK), you may have rights to access, correct, delete, or port your data, and to object to certain processing. Email support@skrillaplan.com and we'll honor these requests for everyone, resident or not — it's your data.

Children and Kids mode

SkrillaPlan is a budgeting product for adults. We don't market to children and children can't sign up.

Kids mode lets a parent set up an allowance and a saving-up screen for their child, on the parent's own device. It is built so that we collect as little about a child as possible:

• No child account. A child never gets a login, an email address, or a password. There is no account for us to hold, and nothing for a child to sign in to.
• The only thing we store about a child is a first name, typed by the parent, plus the allowance amounts and saving goals the family sets up. We don't ask for a birthdate, an email address, a photo, or a last name, and there's nowhere to enter them.
• It all lives in the parent's household, under the parent's account. The parent can change or remove it at any time, and it's deleted when the household is deleted, along with everything else.
• No profiling, no advertising, ever — for anyone, and least of all here. We don't have advertising or third-party analytics anywhere in SkrillaPlan.

Kids mode runs on a device the parent is already signed in to. It hides the household's finances from view, but it is a convenience for families, not a security control: keeping that device secure is the parent's responsibility. We say the same thing in the app each time it's turned on.

If you believe a child has given us information beyond this, contact us and we'll remove it.

Changes

If this policy changes materially, we'll notify you in the app or by email before the change takes effect, with the date updated above.