Privacy Policy — PlanGasto

Last updated: 14 August 2026

1. Who is responsible

Data controller: Kevin Eduardo Olivo Revelo
RUC: 1003163456001
Domicile: Ibarra, Imbabura Province, Ecuador
Contact email: eduardindev@gmail.com

The channel for any communication, including the exercise of your rights, is the email address above. The controller's full identification, including registered domicile, is on record in Ecuador's Taxpayer Registry under the RUC above.

This policy describes how the PlanGasto application (com.eduardolivorevelo.gastoplan) handles your data on iOS and Android.

2. The honest summary

PlanGasto runs entirely on your device. We have no servers and we never receive your data.

The application contains no network client whatsoever: it is technically incapable of sending your information anywhere. There are no user accounts, no sign-up, no analytics, no advertising and no tracking tools.

Everything you type — your plans, your expenses, your categories and your name — is stored only in your phone's memory.

3. What data is handled, and where

Category	Examples	Source	Purpose	Where it is stored	Retention	Recipients
Display name	The name you enter during onboarding	You	Personalising the greeting	Device preference storage	Until you change it, clear the app's data, or uninstall	None
Personal financial data	Plans, budgeted and actual amounts, categories, descriptions and dates	You	Doing what the app promises: planning and comparing your spending	Local device database	Until you delete it or uninstall the app	None
Usage preferences	Language, light/dark theme, whether onboarding is complete, how many reports you exported this month, whether you own the Pro version	The app	Remembering your settings and applying the free-tier limits	Device preference storage	Until you clear the app's data or uninstall	None
Generated reports	PDF and Excel files	Generated on your device from your data	Letting you save or share a report	Wherever you choose when saving or sharing	You decide	Whoever you choose when sharing

None of these categories leaves your device on the application's initiative. Reports leave only when you share them, through the operating system's own dialog, and from that moment they are under your control and that of whichever app you send them to.

Personal financial data is sensitive in practice, even though it is not a "special category" under the GDPR. That is precisely why none of it is collected on any server: minimising is the strongest protection available.

4. In-app purchases

PlanGasto offers a single one-time purchase, PlanGasto Pro, which unlocks unlimited exports and unlimited plans.

Payment is processed entirely by Apple (App Store) or Google (Google Play).

We never see or store your payment method, card number, address or purchaser identity.
The application receives only a confirmation from the operating system that the purchase exists, so it can unlock the feature.
We receive aggregated sales reports from Apple and Google, which cannot identify you.

Apple and Google act as independent controllers for the data they collect to process the payment. Their processing is governed by their own privacy policies, not by this one.

5. Third-party components bundled in the app

These are all the third-party components the application includes. They are listed because they form part of the binary, not because they send data: none of them transmits personal information to its authors or to us.

Component	What it does	Sends data off the device?
`sqflite`	Local database	No
`shared_preferences`	Stores preferences	No
`path_provider`	Locates system folders	No
`file_saver`	Saves the reports you generate	No
`pdf`, `excel`	Builds the report files	No
`in_app_purchase`	Talks to App Store / Google Play for the purchase	Only with the store, to process and restore the purchase
`url_launcher`	Opens legal links in the browser	No
`go_router`, `provider`, `flutter_riverpod`, `intl`, `dropdown_button2`	Internal workings of the interface	No

There is no analytics, advertising, tracking or crash-reporting SDK.

6. Legal basis for processing

We are established in Ecuador, so the Organic Law on Personal Data Protection (LOPDP) applies to us. Because we offer the application to consumers in the European Union, the General Data Protection Regulation (GDPR) also applies to the extent relevant.

Under either regime:

Your name, financial data and preferences are processed on your own device and under your exclusive control, in order to provide the service you installed. The basis is performance of a contract (Art. 6(1)(b) GDPR), which you enter into by using the application.
We carry out no consent-based processing for advertising, analytics or profiling, because we carry out none of those activities.

Since we never receive your data in any system of ours, our ability to process it is, in practice, non-existent.

7. International transfers

We make no international transfers of your data, because we never receive your data.

Purchases processed by Apple and Google may involve processing by them in other countries, under their own policies.

8. Your rights

The GDPR and equivalent laws grant you rights of access, rectification, erasure, restriction, objection and portability.

In this application you exercise them directly, with no intermediary, because the data lives on your device:

Right	How to exercise it
Access	All your data is visible inside the app itself
Rectification	Edit or delete any plan, expense or category from the app
Erasure	Delete items from the app, or remove everything by uninstalling or using "Clear data" in your system settings
Portability	Export your data to PDF or Excel from within the app
Objection and restriction	There is no processing to object to, because we never receive your data

If you still wish to contact us, write to eduardindev@gmail.com. Please note that we cannot locate or delete data we have never received.

If you believe your rights have not been respected, you may lodge a complaint with the competent supervisory authority:

In Ecuador, where we are established, before the personal data protection authority provided for in the Organic Law on Personal Data Protection (LOPDP).
If you live in the European Union, before the supervisory authority of your own country. Selling to European consumers does not force you to file a complaint in Ecuador.

9. Deleting your data

There are no user accounts, so there is no account to delete.

To erase all your data:

iOS: uninstall the application.
Android: uninstall it, or go to Settings → Apps → PlanGasto → Storage → Clear data.

Deletion is immediate and complete on your device. We keep no copies, because we never had any.

Your purchase history stays associated with your Apple or Google account, not with ours: that is what lets you restore PlanGasto Pro if you reinstall.

10. Children

PlanGasto is not directed at children and does not knowingly collect data from minors. Since there are no accounts and no server-side data collection, the application processes no personal data from any user, regardless of age.

11. Security

Your data lives in the application's private storage, protected by the app sandboxing mechanisms provided by iOS and Android.

Because the information never travels over the network and is never hosted on servers of ours, there is no remote attack surface against it.

We cannot guarantee absolute security against a compromised, lost or unlocked device. We recommend keeping your system updated and using your device's screen lock.

12. Changes to this policy

If the application ever gains features that do process data off the device — for example cloud sync or backups — we will update this policy before enabling them and will say so inside the application.

The date of the last update appears at the top of this document.

13. Contact

eduardindev@gmail.com