PlanowaPrivacy Policy
Effective 6 September 2026 · Last updated 5 October 2026 · 한국어
Planowa (“the app”) is a personal household ledger. Everything the app does by default happens on your own device. If you use it without signing in, your records stay in your device’s storage (the browser on the web, app storage in the iOS and Android apps) and are never sent anywhere.
Signing in is an optional feature for seeing the same records on several devices. Records are stored on a server only if you sign in.
1. Information the app collects
a) Information you enter yourself
- Ledger records — date, category group, category, budget and actual amounts, payment account, description, memo
- Card payment messages that you paste into the app yourself
- Settings — category and account lists, recurring payments, favourites, monthly budgets, exchange rates, auto-classification rules
- Plans — short- and long-term roadmaps, money plan, life plan, monthly goals and reviews
- Asset status — monthly asset and debt amounts and notes
- Daily notes — gratitude notes, the mood you pick for a day, and to-dos
b) Information received from the identity provider when you sign in
You sign in with one of Kakao, Google or Apple (iOS app).
- Account identifier, email address, nickname (name), profile image URL
- If you choose “Hide My Email” with Sign in with Apple, we receive a relay address created by Apple.
This information is used only to identify your account and show you your own records.
c) What the app does not collect
- The app never asks for SMS permission and never reads your messages automatically. A payment message enters the app only when you copy and paste it yourself.
- Location, contacts, photos, call logs, calendar
- Advertising identifiers (ADID/IDFA), behavioural data, third-party tracking
- Card numbers, account numbers, passwords or other financial credentials
- Face or fingerprint data. With Face ID / Touch ID unlock in the iOS app, the device only tells the app whether it is you; no face or fingerprint data reaches the app. Only whether the feature is on is stored, on that device.
- Automatic usage analytics, automatic crash reporting, advertising — no such tools are included.
d) Problem reports (only when you send one)
If you write a message under More → Help → Report a Problem and press Send, only that message, which app it came from (web, iOS app or Android app) and the time it arrived are stored on the server (Supabase). No account, device details or ledger records are sent with it, and you can send one without signing in. Only the operator can read reports, and they are used only to find and fix problems in the app. Please do not include personal information in the message.
e) Clipboard
When you press the paste button, the app reads the copied text and checks on your device whether it is a payment message. If you have allowed clipboard access in your browser, the app also checks when you return to it and asks before pasting (turn this off under Settings → General → Check the clipboard automatically). Nothing is sent until you save an entry.
About the screen-lock passcode. The four-digit screen lock is stored on that device only and is never sent to a server. It is stored as an irreversible hash, not as the original digits. This value is explicitly excluded from synchronisation and backups.
2. Where data is stored
| State | Stored where | Who can access it |
|---|---|---|
| Not signed in (default) | Storage on your device (browser or app) | Only whoever uses that device. Not even the operator can see it |
| Signed in | Device storage + Supabase database | Your account only. Isolated per account by Row Level Security |
Even when data is stored on a server, the device comes first (local-first). The app therefore keeps working when you are offline.
3. Processors and third parties
The app does not sell your personal information or share it with third parties for advertising. It uses the following providers’ infrastructure only as far as the service requires.
| Processor | Purpose | Information passed |
|---|---|---|
| Supabase Inc. | Account authentication, record storage and sync | Account identifier, email, nickname, everything listed in 1-a) (only if you sign in) |
| Kakao · Google · Apple | Social sign-in (the one you choose) | Information needed to process the sign-in request |
| Netlify, Inc. | Web hosting (when using the web) | Usual server access logs such as IP address and browser information |
| Google (Fonts) jsDelivr | Delivery of fonts and libraries | IP address, browser information |
| open.er-api.com | Exchange rates for foreign card charges (only when you press refresh) | IP address. No ledger content is sent |
4. Retention
- On your device — until you delete it in the app, clear your browser data, or uninstall the app
- On the server — until you delete your account. Deleting the account also deletes that account’s records
The app has no payment or sales function and handles no financial transaction data, so it does not collect any information that must be retained for a statutory period. Deletion requests are carried out without delay and no separate copy is kept.
5. Your rights and how to exercise them
| Right | How to do it in the app |
|---|---|
| Access | View it at any time on screen |
| Rectification | Tap an entry to edit it |
| Partial deletion | Delete individual entries, or Settings → Data → delete this month only |
| Full deletion | Settings → Data → delete everything |
| Download (portability) | Export as xlsx, CSV or JSON under Settings → Data |
| Account deletion | Settings → Account → Delete account The account and the records stored on the server are deleted together. See Account and data deletion for details |
Account deletion cannot be undone. Please download a backup first if you may need the data.
6. Security measures
- All communication is encrypted with HTTPS.
- The database enforces Row Level Security so that only rows belonging to your account can be read or written.
- The app contains no database administrator key — only the public key is used.
- The screen-lock passcode is stored in an irreversible form, on the device only.
- With the screen lock on, the app locks again when you come back after more than a minute away, and your records are hidden in the app switcher.
7. Children
The app is not directed at children under 14 and does not knowingly collect their personal information.
8. Changes to this policy
If this policy changes, the revision date on this page is updated, and significant changes are announced inside the app.
9. Contact
You can access, correct, delete and download your personal information yourself, inside the app. Records live on your device and in your own account, so the operator is not in a position to look them up or hand them over on your behalf. The specific steps are listed under 5. Your rights above.
For anything that cannot be resolved inside the app, please use the contact below.
- Privacy officer — Planowa operator
- Email — 00joohee@gmail.com
If you are in the Republic of Korea, you may also contact the following bodies about a privacy complaint.
- Personal Information Infringement Report Centre — privacy.kisa.or.kr · 118
- Personal Information Dispute Mediation Committee — kopico.go.kr · 1833-6972