Privacy Policy

Last updated: 6 July 2026

Plutus is made by Two Threads Labs ("we", "us"). This policy explains what Plutus does and does not do with your information. It applies to the Plutus iOS app and this website.

What we never collect

Plutus never:

• Sells your data — to anyone, for any purpose, ever.
• Runs ads, or uses any ad network, ad SDK, sponsored content or affiliate links.
• Reads your email — there is no inbox access, scanning or parsing.
• Accesses your contacts — the permission is never requested.
• Collects your phone number, and no one calls you.
• Shares your data with brokers, asset managers, advisors, or anyone else.
• Uses third-party analytics or crash SDKs (no Firebase, Mixpanel, Amplitude, Crashlytics or Sentry).
• Sends your financial data to AI servers — any intelligence runs on your device.
• Tracks you across other apps or websites — no advertising identifier, no tracking.

What stays on your device

Your portfolio — your accounts, holdings, amounts and the name you enter — is stored on your device. It is not transmitted to us and we have no server that can read it.

If you enable iCloud sync, your data syncs through your own private iCloud account, end-to-end encrypted. Apple operates iCloud; we cannot read your synced data, and there is no account on our servers.

What we collect, only if you opt in

Analytics are off by default. If — and only if — you turn them on in Settings, Plutus sends anonymous product-usage events to our own server (a Cloudflare Worker we operate; no third party). You can see exactly what is queued, and turn it off, at any time.

These events are anonymous by design. Each event contains only: the event name (from a fixed list), the hour it happened (never a finer timestamp), your iOS major version, and — from a fixed vocabulary — which screen or action it relates to. Subscription events additionally carry the plan (annual or lifetime) and your App Store storefront region. There is no device identifier, no account, and no free text, so events cannot be tied back to you or to each other.

In Apple's App Privacy terms, this is "Usage Data" and "Purchases", collected only with your opt-in, not linked to your identity and not used for tracking.

Purchases

Plutus Pro is sold through Apple's In-App Purchase. Purchases and their verification happen through Apple and on your device; we do not run a payment or receipt server. Apple handles payment and applies its own privacy terms to that transaction.

Diagnostics and logs

Plutus keeps a small, on-device diagnostic log to help with support. It never leaves your device unless you choose to share it via "Send Logs to Developer", and before it can be shared it is scrubbed of amounts, account numbers and other personal figures. Crash reports, if you have opted into sharing them with Apple at the system level, go to Apple, encrypted at Apple's end — never to us.

How your data is protected

Data on your device is protected by iOS file-system encryption. Personal and financial fields synced to iCloud are additionally end-to-end encrypted. Encrypted backups you export are protected by a passphrase only you hold.

Your data, your control

You can view, export (as an encrypted backup you control) and permanently delete all of your data from within the app, at any time — including if your subscription lapses. Deleting the app removes its on-device data. Because opt-in analytics are anonymous and contain no identifier, there is no per-person record to retrieve or delete; turning analytics off stops any further collection and clears the local queue.

Children

Plutus is a personal-finance tool intended for adults and is not directed at children.

Changes to this policy

If we make a material change to what we do or don't collect (the commitments above), we will announce it at least 60 days in advance, in the app and on this page. Routine clarifications will be reflected here with an updated date.

Contact

Questions about privacy? Email support@example.com. (Set the real support address before publishing.)