Privacy Policy

Who we are

ChurnPilot is published by CM Software Studio ("we", "us"). If you have a question about this policy, email cmsoftwarestudio@gmail.com.

Information you enter

ChurnPilot is a tracker. You type in the details you want to keep, such as card and bank names, the last four digits of a card, open dates, annual fees, spending progress, bonus amounts, point balances, money movements, reminders, notes and the names of household members.

This information is saved on your device using the operating system's app storage (Capacitor Preferences, which uses SharedPreferences on Android and UserDefaults on iOS). It is not sent to us or to anyone else by the app. ChurnPilot cannot move money and never asks for full card numbers or for your bank passwords or login credentials. It reads bank or card activity only if you turn on AutoTrack (below), and then only through your own SimpleFIN Bridge account, read-only. Please do not enter full card numbers, account numbers or passwords in note fields.

Information we collect

The app does not send your personal records to us. Specifically, ChurnPilot does not include:

• user accounts, sign-in or cloud sync;
• analytics, crash reporting, advertising or attribution SDKs;
• device identifiers or advertising IDs used for tracking;
• location, contacts, camera, microphone or photo library access.

Because we never receive your records, we cannot view, recover, sell or share them.

When you contact support

If you email us, we receive your email address and the message or attachments you choose to send. We use that information to respond and investigate your request. Our support mailbox is hosted by Google (Gmail), which processes email under its own terms and privacy policy. Do not send bank passwords, SimpleFIN tokens or access URLs, full card or account numbers, or an unredacted backup. Send a description of the problem and redact any screenshots.

You can ask us to delete your support correspondence by emailing cmsoftwarestudio@gmail.com. We may retain information where necessary to resolve an ongoing request or meet legal obligations. Support correspondence is separate from the records stored in the app.

Features that involve other parties

Some features rely on your device, your app store or a service you choose. Here is exactly what happens in each case.

App stores and ChurnPilot Pro purchases

ChurnPilot is free to download. Google Play or the Apple App Store handles the download under its own terms and privacy policy. We receive only the aggregate statistics and sales reports each store provides to all developers (such as install counts and purchase totals), never your records.

ChurnPilot Pro is an optional in-app purchase: a monthly or annual auto-renewing subscription, or a one-time lifetime ("Founders") purchase. Payment, billing, renewals, refunds and cancellation are handled entirely by Google Play or the App Store under their terms, using your store account. The app talks to the store's purchase system on your device to show prices, complete a purchase and check whether Pro is active. It keeps a small record of your Pro status (product, expiry date, store transaction ID) on your device only; this is not part of your records or backups. We run no receipt server and never receive your card details.

AutoTrack via SimpleFIN (optional, ChurnPilot Pro)

AutoTrack is off unless you turn it on. It uses SimpleFIN Bridge, an independent service you sign up for and pay for separately, under SimpleFIN's own terms and privacy policy. You link your bank and card accounts to SimpleFIN on SimpleFIN's website, not in ChurnPilot, and ChurnPilot never sees your bank username or password.

• Setup is user-initiated. You create a one-time setup token on SimpleFIN's website and paste it into ChurnPilot (Settings → Bank connections). The app exchanges it once, directly with SimpleFIN, for a read-only access credential.
• The credential stays on your device. It is stored in your device's secure storage (the iOS Keychain, limited to this device and not synced to iCloud; the Android Keystore). It is never placed in your records, backups, exports, logs or error messages, and is never sent to us.
• Read-only, from your device to SimpleFIN directly. The app requests your account names, institution names, balances and recent transactions (date, amount, description, payee, memo and merchant category) from SimpleFIN Bridge (bridge.simplefin.org) over HTTPS. There is no ChurnPilot server in between: we run none, and we receive nothing. The connection cannot move money.
• Stored with your records. Transactions you import (spending, deposits, fees, bonuses) and the links between SimpleFIN accounts and your cards and bank accounts are saved on your device with your other records, so they are included in the backups and exports you make. A cache of the last sync (up to 90 days) is kept on the device for re-matching and is not included in backups.
• You stay in control. Settings → Bank connections → Disconnect deletes the credential and the sync cache from your device; imported history stays in your records until you exclude or delete it. You can also revoke ChurnPilot's access at any time from your SimpleFIN Bridge account. If Pro ends, syncing stops; your records and imported history remain.

SimpleFIN and the banks and data providers it uses process your financial data under their own terms. Please review SimpleFIN's privacy policy before connecting.

Backups, exports and calendar files

When you tap Export or Save backup, or export deadlines as a calendar (.ics) file, the app creates the file on your device and opens your system share sheet. You decide where it goes (for example, Files, Google Drive, iCloud Drive or email). Once you share a file, it is handled by the destination you chose. Backup files contain your full records in readable form, so store them somewhere you trust.

Importing a backup reads a file you pick. Nothing is uploaded.

AI import helper (optional)

The import helper lets you copy a prompt to your clipboard. The prompt includes the names of your household members so an AI assistant can assign cards to the right person. You may then paste the prompt, along with a screenshot or credit report of your choosing, into an AI service you select (for example, Claude or another chat assistant), and paste the result back into ChurnPilot.

ChurnPilot does not send anything to any AI service. Anything you paste into a third-party service is governed by that service's terms and privacy policy. Only use this feature with services you trust.

Local reminders

If you turn on reminders and grant notification permission, the app schedules notifications on your device through the operating system. No push service or server is involved. Reminder text (for example, a card or bank name and deadline) can appear on your lock screen, depending on your device's notification settings.

External links

Resource links (for example, Doctor of Credit, Reddit or annualcreditreport.com) and the AI service link open in your device's browser. Those websites have their own privacy practices.

Eligibility rules and reference content

Issuer application rules, point valuations and other reference content are bundled inside the app. The app does not download rule updates or send your records to check eligibility; all calculations run on your device.

Device backups

On Android, ChurnPilot turns off the system's automatic app-data backup. On iOS, the operating system may include app data in device backups (iCloud or computer) that you have enabled, under Apple's policies. Use ChurnPilot's own Export backup to move records to a new phone.

Keeping and deleting your information

• Delete your records: Settings → Privacy & about → Delete tracking data. This removes every card, account, application, point balance, transfer and member record on the device, including imported AutoTrack history and account links, and disconnects AutoTrack. It cannot be undone.
• Disconnect AutoTrack only: Settings → Bank connections → Disconnect removes the SimpleFIN credential and sync cache from the device. Data held by SimpleFIN is managed in your SimpleFIN account.
• Delete everything: uninstall ChurnPilot or clear its app storage.
• Exported files: delete them from wherever you saved or sent them.

Because we hold no data about you, there is nothing for us to access, correct, export or delete on your behalf.

Security

Your records are protected by your device's security, such as its screen lock and the operating system's app sandbox. The AutoTrack credential is kept in the operating system's secure keychain/keystore, and AutoTrack connects only over HTTPS to SimpleFIN Bridge. Anyone who can unlock your phone and open the app can see your records. Keep your device locked and your backup files private.

Children

ChurnPilot is a personal finance tool intended for adults. It is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect information from children.

Your privacy rights

Depending on where you live, you may have rights to access, correct or delete personal information. You control your on-device records through the app's editing, export and deletion tools. For support correspondence we hold, contact us at the address above. We do not sell your personal information or share it for advertising. For data held by SimpleFIN or your app store, contact them directly.

Changes to this policy

If a future version of the app changes how information is handled, we will update this page and its effective date before that version is released. Material changes will also be noted in the app's release notes.

Contact

CM Software Studio
Email: cmsoftwarestudio@gmail.com