Privacy Policy

Last updated: 6 July 2026

Plutus is made by Two Threads Labs ("we", "us"), based in India. This policy explains what Plutus does and does not do with your information. It applies to the Plutus iOS app and this website.

What we never collect

Plutus never:

• Sells your data — to anyone, for any purpose, ever.
• Runs ads, or uses any ad network, ad SDK, sponsored content or affiliate links.
• Reads your email — there is no inbox access, scanning or parsing.
• Accesses your contacts — the permission is never requested.
• Collects your phone number, and no one calls you.
• Shares your data with brokers, asset managers, advisors, or anyone else.
• Uses third-party analytics or crash SDKs (no Firebase, Mixpanel, Amplitude, Crashlytics or Sentry).
• Sends your financial data to AI servers — any intelligence runs on your device.
• Tracks you across other apps or websites — no advertising identifier, no tracking.

What stays on your device

Your portfolio — your accounts, holdings, amounts and the name you enter — is stored on your device. It is not transmitted to us and we have no server that can read it.

If you enable iCloud sync, your data syncs through your own private iCloud account, end-to-end encrypted. Apple operates iCloud; we cannot read your synced data, and there is no account on our servers.

What we collect, only if you opt in

Analytics are off by default. If — and only if — you turn them on in Settings, Plutus sends anonymous product-usage events to our own server (a Cloudflare Worker we operate; no third party). You can see exactly what is queued, and turn it off, at any time.

These events are anonymous by design. Each event contains only: the event name (from a fixed list), the hour it happened (never a finer timestamp), your iOS major version, and — from a fixed vocabulary — which screen or action it relates to. Subscription events additionally carry the plan (annual or lifetime) and your App Store storefront region. There is no device identifier, no account, and no free text, so events cannot be tied back to you or to each other.

In Apple's App Privacy terms, this is "Usage Data" and "Purchases", collected only with your opt-in, not linked to your identity and not used for tracking.

Beta waitlist & feedback (during the beta only)

While Plutus is in invite-only beta, this website has two optional forms: a beta-interest form and a feedback form. This is separate from the app — the app itself still stores nothing about your portfolio on our servers.

If you submit the interest form, we collect the email address you enter and your answers (which statement types you can test, an approximate holding count, your region and device), used only to send your TestFlight invite and run the beta. If you submit the feedback form, we collect your answers and — only if you choose to add it — an email to follow up. We never ask for, and the forms cannot accept, your amounts or account numbers.

These submissions are stored on our own server (a Cloudflare D1 database we operate; no third party), never sold, and never added to a marketing list. We keep them only for the duration of the beta and delete them afterwards. You can ask us to delete yours at any time via the contact below.

Purchases

Plutus Pro is sold through Apple's In-App Purchase. Purchases and their verification happen through Apple and on your device; we do not run a payment or receipt server. Apple handles payment and applies its own privacy terms to that transaction.

Diagnostics and logs

Plutus keeps a small, on-device diagnostic log to help with support. It never leaves your device unless you choose to share it via "Send Logs to Developer", and before it can be shared it is scrubbed of amounts, account numbers and other personal figures. Crash reports, if you have opted into sharing them with Apple at the system level, go to Apple, encrypted at Apple's end — never to us.

How your data is protected

Data on your device is protected by iOS file-system encryption. Personal and financial fields synced to iCloud are additionally end-to-end encrypted. Encrypted backups you export are protected by a passphrase only you hold.

Your data, your control

You can view, export (as an encrypted backup you control) and permanently delete all of your data from within the app, at any time — including if your subscription lapses. Deleting the app removes its on-device data. Because opt-in analytics are anonymous and contain no identifier, there is no per-person record to retrieve or delete; turning analytics off stops any further collection and clears the local queue.

Under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct and erase personal data, and to raise a grievance. In practice, because your portfolio never leaves your device and the opt-in analytics carry no identifier, these rights are exercised through the in-app view / export / delete controls above and the contact below — there is no server-side profile of you for us to produce or delete.

Children

Plutus is a personal-finance tool intended for adults and is not directed at children.

Changes to this policy

Except where a change is required by law, if we make a material change to what we do or don't collect (the commitments above) we will announce it at least 60 days in advance, in the app and on this page. Routine clarifications will be reflected here with an updated date.

Contact & grievances

Questions about privacy, or to raise a grievance under the DPDP Act, email twothreadslabs+support@gmail.com.

This policy is governed by the laws of India.