Privacy Policy

⚠️ This translation is provided for informational purposes only. In case of any discrepancy, the French version shall prevail.

Last updated: 2026-08-04

1. Data Collection

Plika.app collects no personal data on its own servers. The Software operates primarily locally on your device. For optional connections to third-party services, see Section 6.

2. Local Storage

All your financial data (accounts, transactions, budgets) is stored locally in IndexedDB in your browser. Sensitive data is encrypted with AES-256.

3. Cloud Sync (optional)

If you enable cloud sync (Google Drive, OneDrive, or WebDAV), your data is encrypted client-side before any transmission. Only encrypted data travels over the network. We cannot read your data content.

For WebDAV, the connection is made directly between your browser and your server, without passing through our servers. Your WebDAV credentials are encrypted locally (AES-256) and are never transmitted to us.

4. OAuth Permissions and Google API Services Disclosure

Google Drive: if you connect Google Drive, Plika.app requests only the https://www.googleapis.com/auth/drive.appdata scope (dedicated app storage area, least-privilege principle). Use of data obtained through Google APIs is strictly limited to the user-visible sync feature, in accordance with the Google API Services User Data Policy, including its Limited Use requirements — never for advertising, data brokerage, or unrelated profiling.

Microsoft OneDrive: the requested scopes are Files.ReadWrite.AppFolder offline_access (dedicated app folder). WebDAV: you provide your own server and credentials; no third-party authorization is requested.

Synced data is encrypted on your device before any upload. If our use of Google user data were to change materially, this policy would be updated beforehand.

5. Cookies and Trackers

Plika.app uses no cookies, trackers, or third-party analytics. No browsing data is collected.

6. Optional Third-Party Services

Exchange rates (optional): If you choose to use the “Fetch rate from Internet” feature, a request is sent to the Frankfurter API (frankfurter.dev), an open-source service that relays exchange rates published by the European Central Bank (ECB). This connection is triggered only by your explicit action — never automatically. Data exposed: your IP address, requested currency codes. No personal identifier, cookie, or token is transmitted.

PRO License (optional): If you activate a PRO license, verification is performed via Gumroad (Gumroad, Inc.). Only your license key is sent to our backend server, which communicates with the Gumroad API. Your Gumroad purchase email is included in the response. No payment data is accessible by Plika Team.

Automatic license revalidation (PRO): If you have a PRO license, the Software performs an automatic validity check every 7 days via our backend server. Only your license key is transmitted. No financial, personal, or browsing data is sent. If no connection is available, a 90-day grace period applies (see Terms, Section 11).

7. Data Sharing

Your financial data is never sold. No data transfer occurs outside the operation of features you explicitly enable: sync integrations you request (Google Drive, OneDrive, WebDAV — data encrypted before upload), PRO license verification (Gumroad), and exchange-rate retrieval (Frankfurter), as described in Sections 3 to 6.

8. Data Retention and Deletion

Data retention is controlled by you: your local financial data stays on your device until you delete it (or clear your browser data).

If cloud sync is enabled, encrypted files remain on your chosen provider account until you delete them, disconnect the provider, or overwrite them from the app. OAuth tokens are stored locally in encrypted form; you can invalidate them by disconnecting the provider in Plika.app and revoking access from your provider account settings.

Server-side, only PRO license activation information (license key) is retained — never your financial data.

9. Your Rights

You have full control over your data. You can export, delete, or modify your data at any time directly from the application.

10. Contact

For any privacy-related questions: [email protected]