Privacy Policy
Last updated 5 October 2026
Planner is a small, invite-only timetable and to-do app. This page explains, in plain terms, what it stores and why. It never sells your data or uses it for advertising.
What we store
- Your account: email address, name, role, and a securely hashed password (we can’t see your password).
- Your planner: the events, to-dos, categories, settings and checklist ticks you create.
- Sign-in data: a session cookie that keeps you signed in, and the time you were last active.
- Google Calendar (only if you connect it): the events in the calendar you choose (from 30 days ago onward), and access tokens, which are stored encrypted.
How it’s used
Only to run Planner for you: show your timetable and to-dos, keep them in sync with Google Calendar if you ask it to, send sign-in codes and invitations, and keep the service secure. Admins can see basic account details (name, email, role, last active) and totals, not the contents of your planner.
Google user data
Planner’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is used only to show and sync your events, is never shared, sold or used for ads, and is never used to train AI models. You can disconnect at any time in Settings, or revoke access from your Google Account.
Services we rely on
- Vercel (hosting) and our database provider (storage)
- Google reCAPTCHA, to block bots on the sign-in pages
- Amazon SES / Resend, to send sign-in codes and invitations
- Google Calendar, only if you connect it
Keeping and deleting data
Your data is kept while your account exists. Disconnecting Google stops syncing and deletes the stored tokens; events already in your planner stay unless you delete them. To have your account and all of its data deleted, email [email protected].
Contact
Questions about your data? email [email protected].