1. Who we are
plan.It operates this Service. We act as the data controller for personal information processed through plan.It. Contact us about privacy at hello@planit.me.
2. Data we collect
- Account data: email address, a hashed password (if you do not use single sign-on), and authentication-provider identifiers (for example, Google).
- Your Content: the tasks, categories, calendar entries, grocery items, bills, priorities, and other text or numbers you put into the app.
- Usage and device data: IP address, browser and operating-system type, page-view and feature-use events, timestamps, and error reports.
- Billing data: billing name, country, last four digits of the card, and transaction history. Full card numbers are processed by our payment provider and never touch our servers.
- AI prompts: when you use brain-dump or the assistant, your prompt and any attached content are sent to our AI provider to generate a response.
3. How we use data
We process personal data to: provide the Service and the features you request; authenticate you and protect your account; send transactional and important account email; troubleshoot and improve the product; detect and prevent abuse; and comply with our legal obligations. We do not sell personal data and we do not use Your Content to train foundation AI models.
4. Legal bases (GDPR / UK GDPR)
Where the GDPR or UK GDPR applies, we rely on: performance of contract (to deliver the Service you signed up for), our legitimate interests (security, fraud prevention, product improvement), consent (for optional analytics or marketing), and legal obligation.
5. Subprocessors and integrations
We rely on a small number of vetted providers to run the Service. As of the date above:
- Lovable Cloud / Supabase — hosted database, authentication, and storage.
- Lovable AI Gateway — model routing for assistant and brain-dump features.
- Stripe — payment processing and subscription management (when payments are enabled).
- Google — optional single sign-on if you choose Google to sign in.
Each provider only receives the data it needs to perform its function. We will update this list when subprocessors change materially.
6. Sharing
We share personal data only with the subprocessors above, when you direct us to (for example, by accepting a family invitation), when required by law or valid legal process, or to protect the rights, property, or safety of plan.It, our users, or the public.
7. International transfers
Data may be processed in countries other than your own, including the United States. Where cross-border transfers require additional safeguards (for example, transfers from the EEA or UK to the US), we rely on Standard Contractual Clauses or equivalent measures.
8. Retention
We retain Your Content for as long as your account is active. When you delete content or your account, we remove it from production systems within 30 days and from encrypted backups within 90 days, except where applicable law requires longer retention (for example, tax records related to billing).
9. Your rights
Subject to the law that applies to you, you may request to access, correct, export, restrict, or delete your personal data, and to withdraw consent for processing that is based on consent. Email hello@planit.me and we will respond within the timeframes required by law. Residents of the EEA, UK, California, and similar jurisdictions also have the right to lodge a complaint with their supervisory authority.
10. Children
The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
11. Security
We use commonly accepted safeguards including TLS for data in transit, encrypted storage and backups at our hosting provider, row-level access control so each account only reads its own data, and least-privilege internal access. No method of transmission or storage is perfectly secure.
12. Changes
If we make a material change to this policy, we will post the update here and, where appropriate, notify you by email or in-app.
13. Contact
Privacy questions or requests: hello@planit.me.