Privacy Policy

What we collect

• Account data: your name and email address (or the private relay address from Sign in with Apple), and an authentication identifier. Placi is passwordless — you sign in with Sign in with Apple or a one-time code sent to your email. We never collect or store passwords.
• Household content you create: household names and members, bills and spending records, tasks and grocery lists, occasions, documents and their files/images, assets and maintenance, journeys, allowance entries, and approvals.
• Documents & photos you choose to store (e.g., IDs, contracts, receipts), including any text extracted on-device by the scanner (OCR).
• Financial messages (optional): if you turn the feature on, the transaction details Placi reads from your bank’s SMS messages — amount, date, merchant or payee, reference, and the message itself. This is off by default and described in full below.
• Technical data: basic app diagnostics, and a device push token so we can deliver the notifications you enable. We may also collect crash information to keep the app reliable.

We do not collect your precise location, contacts, or advertising identifiers, and we do not use your data for advertising.

How we use it

• To provide the app: authenticate you, sync your household across your devices and members, and deliver reminders/notifications you enable.
• To keep the service secure and reliable (abuse prevention, diagnostics, crash fixing).
• To communicate essential account and security messages (e.g., one-time sign-in codes, email verification, and household invitations).

We do not sell your personal data.

Where your data lives

• Data is stored on your device and in our cloud backend (Supabase, hosted on secure infrastructure). Access is protected by row-level security, so only members of your household can access that household's data, according to their role and permissions.
• Document and photo files are encrypted with a key unique to your household before they’re uploaded — our cloud stores only the encrypted files. They’re also cached encrypted on your device, with an optional device biometric (Face ID/Touch ID) lock.
• Email delivery uses our mail provider to send one-time sign-in codes, verification, and invitation messages.

Financial messages (bank SMS)

Placi can build your spending, bills and budgets from the transaction messages your bank already sends you, so you don’t have to type every transaction in by hand. This feature is optional and off by default.

• What we read. On Android, with your explicit permission (RECEIVE_SMS and READ_SMS), Placi reads SMS messages on your device so it can recognise bank transaction messages. When you first grant permission it may import the last 90 days so your ledger isn’t empty. On iOS, Placi has no access to your messages at all — you forward them yourself using an Apple Shortcut, or paste them in.
• Messages are read on your device. Recognising a transaction, categorising it, matching it to a bill and detecting unusual charges all happen locally on your phone.
• Only financial messages leave your device. A message that Placi does not recognise as a bank transaction — which is every personal message in your inbox — is never uploaded. It stays on your phone, and you can delete it in the app.
• What is uploaded is encrypted first. Message content is encrypted on your device before it is sent, so it never travels or sits in our database in readable form. The encryption key is held against your account so that your other devices — and a reinstall — can still read your own history. That means Placi is technically able to decrypt it; we do not, and it is never used for anything other than showing you your own data. If you would rather no message content left your device at all, use paste-only and turn message capture off.
• It is private to you, not your household. Unlike bills or shopping lists, your financial messages and the transactions from them are visible only to you. No other member of your household can see them, whatever their role. If you choose to settle a household bill from one of your transactions, only the payment is shared — never the message.
• We do not sell or share it. Financial message data is never sold, never shared with third parties, and never used for advertising or profiling.
• You control how long it is kept. Stored message content is deleted automatically after the period you choose in Settings — 90 days, 1 year, 2 years, or kept until you delete it. The default is 1 year. Deleting it removes it from both your device and our servers.
• You can turn it off or erase it at any time. Revoke the permission in your device settings, or use Delete all financial data in the app to erase every transaction and message. The rest of Placi is unaffected — the feature keeps working from messages you paste in yourself.

Sharing

We share data only with the service providers that run the app on our behalf (cloud database/storage, email delivery, and, if enabled, crash/diagnostics), under agreements that limit their use to providing those services. We may disclose information if required by law.

Within a household, members see shared content according to their role and permissions (for example, children and staff have restricted visibility, and certain documents/occasions can be kept private).

Your choices & rights

• Access / update your information in the app.
• Delete your account at any time: More → Delete Account. This permanently deletes your account and personal data; households you solely own are deleted with their data. You can also email info@placi.io, or follow the steps on our account deletion page.
• Notifications are optional and controllable in Settings and iOS.
• Depending on your region, you may have rights to access, correct, export, or erase your data; contact us to exercise them.

Children

Placi is designed for family use and lets adults manage profiles for children within a household. It is not directed to children for independent sign-up. Child profiles are created and controlled by a household adult.

Data retention

We keep your data while your account is active. When you delete your account (or a household is deleted), the associated data is removed from our systems. Backups are purged on a rolling basis.

Changes

We'll update this policy as the app evolves and note the "last updated" date. Material changes will be surfaced in the app or by email.

Contact

Rentolic Technologies Est. — info@placi.io