Oinker
← Home

Privacy Policy

Last updated: October 25, 2026

Important privacy information

Oinker connects to your bank through Plaid (read-only). We store encrypted access tokens on our servers and generate short roast or cheer lines from transaction metadata. We do not use IDFA or cross-app tracking for ads, and we do not move money from your accounts.

We do not sell the data we collect about you. We do not sell, rent, or trade your personal information — including bank and transaction data — to data brokers, advertisers, or anyone else.

Questions: oinker@khomin.tech

1. Who we are

Oinker (“we”, “us”) is operated by Oleksandr Khomin. This Privacy Policy explains how we collect and process personal data when you use the Oinker iOS app and the website at https://getoinker.com.

Contact: oinker@khomin.tech

2. Data we collect

2.1 Account and device

  • Firebase anonymous authentication identifiers
  • Device language, timezone, OS version, and app version needed to run the service
  • Push notification tokens (if you allow notifications)

2.2 Financial data (when you link a bank)

  • Bank institution metadata and account labels provided by Plaid
  • Transaction history: amounts, dates, categories, and (when available) merchant names
  • Encrypted Plaid access tokens stored on our servers — never your bank password

2.3 Content we generate

  • Verdicts (ROASTED, RESPECT, NOTED) and short lines based on your spending patterns and chosen tone
  • Weekly recap summaries and share-card images you create

2.4 Purchases

  • Subscription status processed by Apple and RevenueCat. We receive entitlement signals, not your full payment card details.

2.5 Website

  • Standard server logs (IP address, user agent, referring URL) when you visit https://getoinker.com, used for security and reliability

3. How we use data

  • To show transaction feeds, verdicts, widgets and weekly receipts
  • To send the notifications you opted into
  • To generate roast/cheer lines via our servers and AI providers (category, amount, local time, tone, and merchant name only if you opt in)
  • To process subscriptions and prevent abuse
  • To respond to support requests
  • To improve reliability and fix bugs

4. Legal bases (where GDPR/UK GDPR applies)

  • Contract — providing the app features you request (bank linking, verdicts, receipts)
  • Consent — notifications; optional merchant names on lock screen / share cards; AI processing disclosures where required
  • Legitimate interests — security, fraud prevention, basic product analytics without ads
  • Legal obligation — when we must retain or disclose information under law

5. Third parties

We use trusted processors to run Oinker:

  • Plaid — bank linking and transaction retrieval
  • Google Firebase — authentication, cloud functions, hosting, and related infrastructure
  • Apple — App Store distribution, push delivery, and in-app purchases
  • RevenueCat — subscription entitlement management
  • OpenRouter and model providers (for example Groq, Google, OpenAI) — generating roast/cheer lines from limited transaction metadata

Each provider processes data under its own terms and privacy policy, solely to help us run Oinker. Using a processor is not a sale of your data.

6. We do not sell your data

We do not sell the data collected about users of Oinker or this website. That includes identifiers, device information, bank connection metadata, transaction history, generated roast or cheer lines, and any other personal information described in this policy.

  • We do not sell, rent, lease, or trade personal information to third parties for their own marketing or commercial use.
  • We do not sell or share personal information for cross-context behavioural advertising (as those terms are used under California and similar U.S. state privacy laws).
  • We only share data with service providers who process it on our behalf to operate the Service (for example Plaid, Firebase, Apple, RevenueCat, and AI providers that generate roast lines), under contracts that limit their use of the data.

7. Retention

We keep linked-bank data and generated content while your account is active. When you delete your account in Settings, we disconnect bank connections and delete stored transactions and roast lines from our systems, subject to short backup windows and any legally required retention. Server logs are rotated on a routine schedule.

8. Your rights

Depending on where you live, you may have the right to:

  • Access, correct, or delete personal data
  • Export a copy of your data
  • Withdraw consent where processing is based on consent
  • Object to or restrict certain processing
  • Lodge a complaint with a supervisory authority

In-app: Settings → Delete my account and data. Or email oinker@khomin.tech.

9. Children

Oinker is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect data from children.

10. International transfers

We may process data in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.

11. California and other U.S. state notices

We collect the categories described above (identifiers, commercial / financial information, internet activity on our site). We do not sell personal information, and we do not share personal information for cross-context behavioural advertising. Because we do not sell or share personal information in those ways, we do not offer a “Do Not Sell or Share My Personal Information” opt-out link; if that ever changes, we will update this policy and provide a clear opt-out. To exercise access or deletion rights, contact oinker@khomin.tech.

12. Changes

We may update this policy. The “Last updated” date at the top will change, and material updates may also be noted in the app or on https://getoinker.com.

13. Contact

Oleksandr Khomin · oinker@khomin.tech · https://getoinker.com