Effective: 2026-07-12 · Last updated: 2026-10-30 (cloud sync and its subscription discontinued — the app no longer sends your records or photos to a server · how records already on the server are kept and how to have them deleted)
This app is built around offline-first, local storage. The data you enter is stored only on your device and is not sent to a server. The exceptions are explained below:
The app shows ads (Google AdMob) so it can be free (sections 3–4)
If you turn on barcode nutrition lookup, the scanned barcode number is sent to a third party (Open Food Facts) (section 5)
Cloud sync was discontinued on 2026-10-30. If you used cloud sync before, see section 2 for how records still on the server are kept and how to have them deleted.
1. Data you enter (stored on your device)
There is no sign-up or login, and the data you enter is never sent to or stored on a server. The data below is stored on your device.
Data
Where
Purpose
Emergency contacts (name and phone number)
On this device only — not included on the server, in backup files, or in device-to-device sync
To fill in recipients when [Send alert] opens your messaging app. The app does not send messages on your behalf, and it does not request access to your contacts (you type them in).
Stock items, storage boxes, in/out history
Local database on device (SQLite)
Managing stock, estimating days of supply
Household members, calorie basis
Local database
Calculating requirements
Journal, checklists
Local database
Record keeping
Storage place photos
Device internal storage (app folder) — never sent to a server
Finding where you put things by a pin on the photo. Created only when you take or choose one yourself. On saving, EXIF data (capture location, device details) is stripped and the image is re-encoded as WebP. Shelf and cupboard photos may show the inside of your home. Photo files are not included in the app's backup file.
There is no account and no login. We do not collect identifying information such as your name, email address or phone number.
2. Cloud sync — discontinued (2026-10-30)
Cloud sync and its subscription (survive_cloud), which kept your records on a server after you signed in with a Google account, were discontinued on 2026-10-30. The latest version of the app has no sign-in, sync or photo upload, and the records on your device stay as they are (nothing is deleted because of the discontinuation).
2.1 Nothing new is stored
From 2026-10-30 the server accepts none of your records (stock, storage boxes, journal, checklists, etc.), photos or subscriptions. Even on an older version of the app, records are no longer uploaded.
Signing in on an older version of the app may still create an empty account link (account identifier, email address and display name). It contains none of your records, and you can have it deleted as described in 2.3.
2.2 What may already be on the server
If you used cloud sync before it was discontinued, the following may remain on the server.
Data
Where (processor)
Records you synced (stock, storage boxes, in/out history, household members, checklists, journal, etc.)
Supabase — AWS Seoul region (ap-northeast-2) · in Korea
Email address · account display name · account and device identifiers
Supabase — in Korea
Subscription receipt identifier (purchase token) and state
Supabase — in Korea
Storage place photo files (if uploaded while subscribed)
Cloudflare — Asia-Pacific (APAC) region · outside Korea
These records are not sold or disclosed; the processors above only store them. Communication is encrypted with HTTPS.
Retention: they will be deleted in bulk when the server is cleaned up. Before then, we delete them right away on request (2.3).
2.3 How to have them deleted
By email: write to allegru.dev@gmail.com with the email address of the Google account you signed in with. We will delete all of that account's server records, photo files, receipts and account link, and reply.
If you still have an older version of the app: the cloud icon at the top → Manage account → Delete account still works.
See the Account and data deletion page for details. In every case the records on your device are not deleted.
3. Ads (Google AdMob)
To keep the app free we show Google AdMob ads. A full-screen ad appears once for every 30 minutes of accumulated time you spend in the app; it does not appear when you open a particular menu.
AdMob may collect and process the advertising identifier (AAID) and device/app interaction data for ad delivery, frequency capping, measurement and fraud prevention. This is processed by Google under the Google Advertising Policies and Google's privacy policy.
Consent (EEA/GDPR): in applicable regions the app requests consent for personalised ads through Google UMP at launch, and serves personalised or non-personalised ads accordingly.
Removing ads: you may purchase permanent ad removal as an in-app purchase. The ad-free status is stored only on your device.
4. In-app purchases (permanent ad removal)
Payment, refunds and card details are handled by Google Play. This app never receives or stores payment instrument data such as card numbers.
The app records only the fact that the purchase completed, and keeps it on the device. Nothing is sent to a server.
You can restore the purchase (same Google account) after changing or reinstalling on a device.
Sales of the cloud sync subscription ended on 2026-10-30 (section 2). Remaining subscription receipts are handled under 2.2–2.3, and refunds follow Google Play policy.
5. Other external communication
Climate indicators: public data (NASA GISTEMP and similar) is downloaded read-only for reference. No personal data is sent, and the app works from cached values if the request fails.
Barcode nutrition lookup: when turned on in settings (on by default), scanning a barcode sends the scanned barcode number to Open Food Facts (a third-party service run by a French non-profit, privacy policy) to fetch product nutrition data and pre-fill the entry form. Values are not saved straight away — they fill the form and you confirm or edit before saving.
What is sent: only the barcode number. No name, account, stock history or location is sent. As with any internet request, your IP address and an app-identifying User-Agent reach the receiving server and are handled under that service's policy.
When offline: no request is attempted. If a previous result is stored on the device, the form is filled from that alone.
Retention: results are stored on your device for up to 90 days so the same product can be reused without another request, and are not sent back to any server.
Turning it off: Settings → Barcode nutrition lookup at any time; with it off no transfer occurs at all. The app notifies you once before the first transfer.
Nutrition wizard choices: when you open the wizard that fills in average values for foods whose nutrition data is hard to find, the app downloads the list version and list contents, read-only, from our server to check whether the list is current (at most once a day).
What is sent: the app sends no data — the request contains none of your records, account or barcodes (as with any internet request, your IP address reaches our server).
When offline: if there is no connection or the server cannot be reached, the app is not affected at all. The choices ship with the app and work from the list on your device.
If you do not use the wizard, this request never happens.
Apart from sections 3–4 (ads, payment) and the climate and barcode lookups above, the data you enter is not sent to any external server.
6. Permissions
Permission
Purpose
Camera
Used for barcode scanning (identifying items), the survival tools flashlight (camera flash), and — only when you tap [Space photo] yourself — taking a photo of a storage place. Video is never recorded.
Photo library
Only when you tap [Choose from library], the app receives the single photo you pick. The app does not browse your library or read any other photo.
Location
Used only to show your current coordinates on screen in Survival Journal → Tools → My location, and only while that screen is open (no background location). Coordinates are never stored or sent to a server; they leave the app only when you tap Send by text or Share, and only to the app you choose (e.g. messages).
Internet
Public climate data, barcode nutrition lookup (Open Food Facts), refreshing the nutrition wizard choices, ad delivery (AdMob), in-app purchases.
Notifications
Shows expiry reminders directly from your device. No server or push service is involved, and you can turn them off in settings.
Run at startup
Used only to restore scheduled reminders and the home-screen widget after the device restarts.
Network state
Checks whether the device is online — so that lookups and ads are not attempted while offline.
Wi-Fi multicast
For a feature that finds your other devices on the same router and syncs records directly between devices. That feature is not offered to general users in the current version, so the permission is not used.
Advertising ID
Used for ad delivery and measurement (AdMob) (section 3). You can reset or delete it in your device settings.
Share sheet
Used only when you export data (Excel/CSV) to a location you choose.
7. Sharing and transfer
The stock and record data you enter is never sold or handed to third parties.
Remaining records from the discontinued cloud sync: only stored with Supabase (Korea) and Cloudflare (outside Korea, photo files) until the server is cleaned up — section 2.
Barcode nutrition lookup (when on): the scanned barcode number is passed to Open Food Facts (French non-profit, third party) for the lookup (section 5). No information identifying you is included (for unavoidable transport data such as IP address, see section 5), and nothing is passed while it is off or you are offline.
Advertising identifiers and similar may be passed to Google AdMob for ads (section 3). Payments are handled by Google Play (section 4).
Exporting data happens only when you export it yourself through the operating system's share function.
8. Retention and deletion
Your entered data, settings and ad-free status are held on the device and are removed when you uninstall the app.
Barcode lookup results are held in the device cache for up to 90 days, then expire; they are removed when the app is uninstalled.
If you used cloud sync before it was discontinued, records and photo files left on the server will be deleted in bulk when the server is cleaned up; before then we delete them on request by email (2.3 · Account and data deletion).
You can delete individual entries inside the app.
Resetting or deleting the advertising identifier is done in your device settings (Settings → Google → Ads).
In-app purchase history stays in your Google Play account; manage or request refunds through Google Play.
9. Children's data
We do not separately collect children's personal data. The “child” household member type is a classification used for calorie calculation, not identifying information.
10. Notice
This app is a reference tool for personal preparedness and record keeping. It does not provide emergency rescue, medical or disaster response services. In a real emergency, use official emergency services.
11. Privacy officer and contact
Personal information protection officer: the developer and operator of Survival Plan (a solo developer, who also handles privacy duties and related complaints)
Requests to access, correct, delete or suspend the processing of your personal data, as well as privacy questions and complaints, are received at the address above and answered without undue delay.
Remedies: for advice or dispute mediation about a privacy infringement in Korea, you may contact:
Personal Information Dispute Mediation Committee: 1833-6972 · kopico.go.kr