PLANKHO Privacy Policy
Last updated: 26 October 2026 Service: PLANKHO Operator: Ashlan Grey Ang (individual operator, Philippines) Privacy contact: [email protected]
1. Introduction
PLANKHO is a debt-planning application designed to help users organize financial obligations, explore repayment strategies, and estimate their progress toward becoming debt-free.
This Privacy Policy describes how PLANKHO processes information when users create an account, use financial-planning tools, import statements, use cloud backups, or subscribe to Premium.
PLANKHO is operated by Ashlan Grey Ang, an individual operator based in the Philippines. For privacy inquiries, contact [email protected].
2. Information PLANKHO processes
2.1 Information stored primarily on your device
PLANKHO uses local storage for financial-planning information, which may include:
- Financial account aliases, institutions, account types, credit limits, and optional last four card digits.
- Statement balances, dates, minimum payments, interest, fees, and installment information.
- Transaction descriptions, dates, and amounts.
- Monthly budgets, repayment strategies, and future money.
- Recurring payments, simulations, projections, and reports.
- Application settings and feature-progress information.
The inspected application database does not define fields for full payment-card numbers, CVVs, or online banking passwords.
Local device data is distinct from information stored in the PLANKHO cloud services.
2.2 Account and authentication information
To operate user accounts and protect access, PLANKHO processes information such as email addresses, display names, account identifiers, password hashes and salts, session information, verification and password-reset records, and security activity.
Passwords are used for authentication. Stored password hashes are not represented as readable account passwords.
2.3 Statement imports
If you choose to import a statement PDF, PLANKHO processes its contents to extract financial information for review.
Statement processing can create temporary files and images. The application includes temporary-file cleanup operations, but it cannot guarantee that an interruption always removes every temporary file immediately.
The original PDF selected on your device is not assumed to be deleted merely because processing has finished.
2.4 Optional cloud backups
When you use cloud backup features, PLANKHO processes backup metadata and encrypted backup content using Cloudflare D1, Cloudflare R2, and Cloudflare Workers.
Backups may contain financial information from your device. PLANKHO applies server-side AES-256-GCM authenticated encryption. This is not end-to-end encryption: the service can decrypt backup content when needed to provide backup functionality.
PLANKHO is designed to retain up to five available cloud recovery points per account, subject to successful retention cleanup. Older backup cleanup can require retries.
2.5 Premium subscriptions
For paid features, PLANKHO may process subscription product identifiers, purchase verification information, entitlement status, renewal status, and related timestamps.
Subscription processing involves the relevant app-store platform. The scope of App Store subscription record storage must be checked against the final iOS implementation.
3. Why information is processed
PLANKHO processes information as needed to:
- Provide debt tracking, simulations, and planning features.
- Authenticate users and protect accounts.
- Import and review financial statements.
- Provide cloud backup and restoration features when used.
- Verify paid subscriptions and manage Premium access.
- Maintain application security and account lifecycle records.
- Respond to privacy, support, and account-deletion requests.
- Meet applicable legal obligations.
Processing may rely on performance of the service agreement, the user's choices or consent where applicable, legitimate interests subject to applicable law, or legal obligations.
4. Storage and service providers
Financial-planning records are primarily stored on the user's device. Cloud account, backup, and Premium verification services process additional information when those functions are used.
PLANKHO uses Cloudflare infrastructure for its relevant cloud services and relies on app-store providers for subscription transactions and verification.
Other applicable providers, international processing locations, and operational data disclosures must be verified before publication.
PLANKHO does not describe encrypted backups as anonymous.
5. Retention
Local financial records do not currently have a confirmed automatic time-based expiry. Their availability may depend on the device, application storage, and user actions.
Authentication records include expiry and revocation mechanisms, but expiry does not necessarily mean the underlying database records are immediately physically erased.
Cloud backup retention aims to maintain up to five available recovery points, with cleanup subject to successful execution.
Premium verification records and anonymized deletion receipts do not currently have a confirmed fixed physical retention period for public disclosure.
Information may also need to be retained where required by applicable law or for legitimate legal purposes.
6. Account deletion and data removal
PLANKHO requires authentication and deliberate confirmation before accepting an account-deletion request.
A confirmed request marks the cloud account as deleted, revokes its active sessions, and schedules permanent erasure of the associated cloud account data after 30 days.
The production deletion processor is deployed and scheduled to run daily. Permanent erasure includes coordinated cleanup of associated cloud backups and authentication records, subject to successful processing and applicable legal obligations.
Account-deletion requests submitted before the adoption of the 30-day period retain their originally scheduled deadlines.
The 30-day period does not guarantee that a deleted account can be restored. Self-service account recovery is not offered as part of this deletion process.
Account deletion, locally stored information, cloud-backup removal, and cancellation of a paid app-store subscription are separate operations. Uninstalling the app is not equivalent to requesting cloud account deletion.
7. Security
PLANKHO uses measures including account authentication, session controls, local device storage, and authenticated server-side encryption for cloud backups.
No storage or transmission method can be guaranteed to prevent all security incidents.
Users should protect access to their devices, accounts, and relevant authentication credentials.
8. Privacy rights
Depending on applicable law, users may have rights to be informed, access personal information, request correction, object to certain processing, request erasure or blocking, and exercise other rights provided by the Philippine Data Privacy Act of 2012.
Privacy requests may be directed to:
Users may also contact the National Privacy Commission where applicable.
9. Children
PLANKHO is intended for adults aged 18 years and older. It is not intended for children or individuals under 18.
If we become aware that an account belongs to someone under 18, we may take appropriate steps to restrict the account and handle associated personal information in accordance with applicable law.
10. International users
PLANKHO may become available outside the Philippines. Cross-border operation and any applicable local privacy rights must be assessed before expansion into each relevant jurisdiction.
This policy does not assert compliance with every country's privacy laws solely because PLANKHO is accessible there.
11. Changes to this policy
PLANKHO may update this policy to reflect service changes, privacy requirements, or applicable law.
Material changes will be communicated as required by law.
12. Contact and responsible operator
Service: PLANKHO
Operating location: Philippines
Privacy contact: [email protected]
Responsible operator: Ashlan Grey Ang (individual operator, Philippines)