Privacy Policy
This policy explains what Pluttoz collects, why, and the rights you have over it, wherever you use the app. If you are in Mexico, our Aviso de Privacidad is the document issued under Mexican law (LFPDPPP) and governs for you.
1. Who we are
Pluttoz is operated by Kevin Meda Rodriguez, based in Mexico, who is the data controller for the personal data described here. Contact: [email protected].
2. What we collect
- Account info: your email address and a password (stored only as a secure hash), plus your country, language, timezone, and home city.
- Your wallet: which card products, bank accounts, and memberships you hold, with an optional nickname and the last 4 digits if you choose to type them — never a full card number, CVV, or bank credential.
- Spend habits: the general income and spending bands you choose at onboarding — bands, never exact amounts.
- Household: a coarse flag and age band only (for example, "has kids, 6–12") — never names, birthdates, or per-child records.
- Location: your device location (precise or approximate, as you allow), used only while the app is open to find nearby merchants, and only for that request — we never store a location history. If you deny permission, you can pick an area manually.
- Offers you submit: coupon screenshots and forwarded emails are used to extract the offer and then deleted; we keep only the extracted offer details and a short text snippet they came from.
- Savings history: the estimated savings you confirm or record in the app.
- Usage data: first-party app events (screens viewed, taps). We use no third-party analytics SDK.
- Referrals: a random identifier created for your install — not a device identifier — used to prevent referral abuse.
- Consent records: when you accept our terms we log the version, date, and a hashed (never raw) IP address as evidence of consent.
3. Why we use it
To personalize where-to-buy and which-card recommendations; to operate your account and subscription; to prevent fraud and abuse; to improve the product; and, on the free tier, to show advertising (see section 4). Where GDPR applies, our lawful bases are: performance of our contract with you (recommendations, account, subscription), our legitimate interests (product improvement, fraud prevention), and your consent (optional profile details, location, personalized advertising) — which you can withdraw at any time.
4. Advertising, tracking, and your choices
The free tier shows ads served by Google AdMob; Gold removes them. On iOS we ask for App Tracking Transparency (ATT) permission first, and we show a consent message where required; only if you allow it are ads personalized using your device's advertising identifier. Otherwise ads are non-personalized. Sharing data with an ad network for personalized ads can qualify as "sharing" for cross-context behavioral advertising under California law — you can opt out at any time by declining or revoking ATT permission (iOS Settings → Privacy → Tracking), turning off ad personalization in your device settings, or emailing us. We do not sell your personal information for money, and we do not use it for advertising outside the app.
5. Who we share data with
Only service providers that help us run the app, under contracts limiting them to that purpose: Google Cloud Platform (hosting and storage), Google Vertex AI (reads submitted offer text to extract offer details), Google Places (nearby merchant lookups), Mapbox (maps), Upstash (caching), MailerSend (transactional email), Sentry (server error monitoring), Google AdMob (ads, free tier), and Cloudflare (this website). Apple or Google process Gold payments entirely — we never see or store your payment details. We disclose data if the law requires it, and we never sell it.
6. International transfers
Our servers run on Google Cloud in the United States (us-central1). Wherever you use Pluttoz, your data is processed and stored there, protected by the safeguards of our providers and this policy.
7. Data retention
Uploaded screenshots and forwarded email bodies: deleted within minutes, once extraction completes. Usage events: kept 24 months, then deleted. Everything else: kept while your account exists. When you delete your account, your personal data is scrubbed immediately; what remains is de-identified or anonymized only — usage events with your identity removed, an anonymized record that consent was given (kept as legal evidence), and referral records with your identity stripped.
8. Your data, exported or deleted
From the app's Settings you can export everything we hold about you, or permanently delete your account (confirmed by a code emailed to you). If you no longer have the app, use our account deletion page.
9. Your rights by region
- Mexico: the Aviso de Privacidad covers your ARCO rights (access, rectification, cancellation, opposition) under the LFPDPPP.
- United States (California and similar state laws): the rights to know, delete, and correct your personal information, to opt out of "sale" or "sharing" (see section 4 — we don't sell; opting out of sharing is always available), and to not be discriminated against for exercising them.
- Canada (PIPEDA): the rights to access and correct your personal information and to withdraw consent; you may complain to the Office of the Privacy Commissioner of Canada.
- European Union / EEA / United Kingdom (GDPR): the rights of access, rectification, erasure ("right to be forgotten"), data portability, restriction of processing, objection, and withdrawal of consent at any time without affecting prior processing; you may also lodge a complaint with your local supervisory authority.
To exercise any right, use the in-app tools (section 8) or email [email protected]. We answer within the time the applicable law sets.
10. Children
Pluttoz is for adults (18+) and is not directed at children; we don't knowingly collect their data. Household age bands are attributes of the adult account holder's profile, never records about a child.
11. Security
Data is encrypted in transit, passwords are stored only as secure hashes, and access to production systems is restricted. No system is perfectly secure, but we design for the minimum data needed: we never hold full card numbers or bank credentials at all.
12. App store disclosures
The privacy details we declare on the App Store and Google Play (privacy "nutrition labels" / Data Safety) describe the same practices as this policy.
13. Changes to this policy
If we materially change this policy we will post the new version here, update the date above, and notify you in the app where required.
14. Contact
Questions or requests: [email protected].