Your data is yours.

1. What we don't do

• No account. You don't sign up, and we don't ask for your name, email, or phone number to use the app.
• No selling your data. Ever. We're not an ad company.
• No ads, no tracking pixels following you around the web.

2. Where your information lives

Everything you enter — your pay rate, schedule, deductions, budget, savings, notes, and any photos you attach — is stored on your own device (in your browser/app storage). If you clear your app data or uninstall, it's gone (so keep your own backups of anything important).

There are exactly five exceptions, and each one only happens because you did something that needs them. They're listed in full in the next section: scanning a pay stub or receipt, contributing to pay benchmarks (opt-in), buying scan credits, redeeming an invite from a coworker, and looking up a market price if you track holdings on the Wealth page. Nothing else you type ever leaves your device.

3. The limited data we do handle

To run and improve the app, a small amount of technical, non-identifying information is involved:

• Anonymous usage analytics. We use a privacy-first, cookieless analytics tool (Umami) to count things like page views and which screens are used, in aggregate. It does not use cookies, does not store your IP address, and cannot identify you.
• Crash reports. If the app hits an error, we may receive a technical crash report (via Sentry) to fix bugs. It contains no personal or financial information — user identifiers are stripped.
• AI scanning (only if you use it). If you choose to scan a pay stub or receipt, the image is sent to our server and to our AI provider (Anthropic) to read it and return the results to you. The image is processed for that purpose and not stored by us. Don't want anything sent out? Simply don't use the scan feature — the rest of the app works fully offline.
• Pay benchmarks (only if you opt in). If you choose to contribute to the anonymous pay benchmarks, your industry, two-letter region and annual pay figure are sent to our server and kept there so the aggregate stays accurate. No name, no email, no employer — just those three values, tied to the random device code below. Aggregates are only ever shown once enough people have contributed that no individual can be picked out. You can delete your contribution at any time (see "Your control").
• A random device code, and your scan-credit balance. Your device generates a random code (not your name, not an advertising ID, not linked to any account). We use it to keep track of how many scan credits you have, since that balance has to be held on our side rather than on the device where it could simply be edited. It tells us nothing about who you are.
• Invites (only if you redeem one). If a coworker shares an invite and you redeem it, we store a single row: your device code, their device code, and the date — so the free credits are awarded once to each of you and the same invite can't be redeemed twice. There is no name, email or message attached to it, and it is not used for anything else. You can delete it (see "Your control").
• Payments. Purchases in the Android app are handled by Google Play; on the web they're handled by Stripe. We never see or store your card details — they don't pass through our servers at all.
• Market prices (only if you track holdings). If you add a stock or crypto holding on the Wealth page, the symbol alone — for example VOO or BTC — is sent from our server to a market-data provider to look up the current price: Yahoo Finance for stocks and CoinGecko for crypto. How many units you hold, what you paid, and which brokerage or exchange holds it never leave your device. The lookup is made by our server rather than by your device and carries no device code and no identifier, so those providers see a price request for a symbol and nothing that ties it to you. Don't want even that sent? Don't add holdings — the rest of the Wealth page works on figures you enter.

4. Cookies

Cimplora doesn't use advertising or tracking cookies. Your device storage is used only to save your own app data and settings.

5. Children

Cimplora is intended for working adults. It isn't directed at anyone under 18, and its target audience on Google Play is set to 18 and over. We don't knowingly collect information from children.

6. Your control

You can delete everything at any time: open Privacy & your data inside the app and choose Delete all my data (step-by-step instructions are on the Delete your data page). That wipes what's on your device and tells our server to erase what it holds for your device code — your scan-credit balance, your pay-benchmark contribution if you made one, and your invite record if you redeemed one. You can also just clear your browser/app storage for the on-device part.

One deliberate exception: a record that a particular purchase was already credited is kept, with your device code removed from it. It identifies a Google Play or Stripe transaction, not you, and it's what stops the same purchase being redeemed twice.

7. Changes

If we update this policy, we'll change the date above and, for anything significant, tell you in the app. If we ever introduce a feature that shares more data, it will be clearly explained and opt-in.

8. Contact

Questions? Reach us at support@cimplora.com.

Who is responsible for your data: Cimplora is a service of AK STEVENS LLC, a Texas limited liability company, which is the controller of any personal data described above.
17350 State Highway 249, Ste 220, Houston, TX 77064
Texas SOS file number 0803954116