Your financial memory stays yours.

Effective and last updated: August 30, 2026

Overview

Pluto is a personal finance app that helps you understand spending from transaction receipts and payment alerts. Pluto requests Gmail read-only access only after you choose to start an import. You can use the app's core planning features without connecting Gmail.

Information Pluto accesses

Gmail message metadata and content for transaction-like receipts and payment alerts.
Derived transaction records, including merchant, amount, date, category, evidence, and linked Gmail message identifiers.
Receipt images or PDFs you select, and fields extracted from them.
App settings, import state, local rules, reimbursement policies, reminders, savings-plan choices, and a purchase-entitlement cache.
If you deliberately submit feedback directly to Pluto: your feedback text, the screen and issue type, a random report identifier and timestamp, and technical context consisting of the app version and build, iOS version, device model, and locale.

How Pluto uses information

Pluto uses Gmail data to find transaction-like mail, extract spending details, avoid duplicates, match receipts, build local transaction history and insights, apply your local rules, and calculate reimbursement suggestions and reminders.

Pluto does not use Gmail data for advertising, creditworthiness, data brokerage, or training generalized artificial-intelligence models. Pluto's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage and disclosure

Gmail-derived records, receipt extraction results, local rules, reimbursement policies, and savings-plan data are stored on your device. Google OAuth credentials are stored in the iOS Keychain. Pluto has no advertising SDK and does not sell personal data.

Pluto does not send Gmail message content, receipt content, or derived transaction records to Pluto's feedback service.

Feedback is optional. If you choose Send feedback now, Pluto first redacts common account or card numbers, balances, VPAs, email addresses, one-time codes, and long numeric identifiers from the text, then sends the feedback and technical context listed above to a private Google Sheet controlled by Pluto's developer. It is used only to respond to support needs, investigate bugs, and improve Pluto; it is not used for advertising, tracking, sale, credit decisions, or training generalized artificial-intelligence models. Automated redaction may not catch every sensitive detail, so do not include Gmail content, receipt details, authentication codes, or financial account information.

You may instead choose Share feedback. iOS shows you the report before you select a destination, and the information then goes to the service or person you choose under their terms.

Speech recognition and Apple services

Voice dictation is optional and starts only when you request it. Depending on your device and Apple settings, Apple may process speech to create a transcript under Apple's privacy terms. Pluto does not retain an audio recording.

Purchases

Apple processes in-app purchases. Pluto receives transaction and entitlement information needed to unlock access, but does not receive your full payment-card details. Apple's privacy terms govern Apple's processing.

Your choices and controls

Disconnect Gmail from Settings.
Delete local Pluto data from Settings → Privacy center.
Revoke Pluto access in your Google Account security settings.
Use privacy mode to hide monetary amounts on screen.
Choose whether to submit feedback directly, share it through an iOS destination, or send none.
Delete the app to remove its local app container from the device.

Retention

Local data remains on your device until you delete it through Pluto, delete individual records where available, or delete the app. Pluto does not maintain a server-side copy of your Gmail-derived financial history.

Direct feedback reports remain in the private feedback inbox only while they are reasonably needed to investigate the report, provide support, or improve Pluto, and are then deleted. You may request earlier deletion through the Pluto support page; include the approximate submission date, screen, and issue type, but do not post the feedback text or other private information in a public request.

Children

Pluto is not directed to children under 13 and does not knowingly collect children's personal information.

Changes

If this policy changes materially, this page will be updated with a new effective date before the revised practices take effect.

Contact

For privacy questions or requests, use the Pluto support page. Do not include Gmail content, transaction details, authentication codes, or financial account information in a public support request.