Legal

Privacy Policy

Effective: 26 April 2026  ·  Last updated: 26 April 2026

This Privacy Policy explains what data Planny ("Planny", "we", "us") collects when you use the Planny mobile and web app, why we collect it, who we share it with, and the rights you have over it. It is written in plain language because Apple's App Store guidelines (§5.1.1) and the EU GDPR both require it — and because legalese helps no one.

1. Who we are

Planny is operated by [Legal entity name], registered at [registered address]. For any privacy question or to exercise your rights, contact privacy@getplanny.app.

2. The data we collect

We try to collect as little as we can get away with. Here is the complete list.

2.1 Account data

• Your email address.
• An authentication record (managed by Supabase — see §4).
• The sign‑in method you used (email & password, Google, or Apple).
• Sign‑up and last sign‑in timestamps.

If you sign in with Google or Apple we receive only the email address and an opaque user ID from the provider. We do not request your contacts, calendar, photos, or social graph.

2.2 Budget data you enter

Everything you log inside Planny is stored on our backend so it can sync across your devices: expenses (amount, category, note, date, currency), income, paychecks, recurring items, savings goals, the categories you create, and joint Spaces (and their membership). This is content you create. It belongs to you. We do not read it, mine it, or share it.

2.3 Settings & preferences

Locale, theme, currency, rounding, notification opt‑ins, and your haptic preference (Off / Minimal / On) are stored on your device and, where it makes sense, synced to your account so a fresh install picks them up.

2.4 Device & technical data

• IP address (used by Vercel and Supabase for routing and abuse prevention; not stored long‑term against your account).
• Browser / OS version, device type, screen size.
• App version and build number.
• Crash reports — stack trace and the route you were on. Crash reports are scrubbed of expense values and notes before being stored.

2.5 Usage events (PostHog)

We use PostHog to understand how features are used so we can improve them. The events we send are listed below. None of them include the amount or note of an expense — only the structural fact that the action happened.

When you sign in we associate these events with your email address (identify) so we can compute things like 7‑day retention. PostHog data is hosted on PostHog Cloud (US region). PostHog acts as our processor under a Data Processing Agreement and does not share data with any AI or LLM provider for training.

You can opt out of analytics — see §7.

2.6 Vercel Analytics (web only)

The web version of Planny (not the iOS app) loads Vercel Analytics and Vercel Speed Insights. They collect, on a per‑page basis: the page URL, a coarse country and device type, a hashed, rotating identifier so a session can be counted once (the hash cannot be reversed to identify you), and page‑load performance metrics (LCP, FID, CLS).

Vercel Analytics is cookie‑less. It does not set tracking cookies, does not build a cross‑site profile of you, and does not share data with any AI/LLM provider for training. The iOS app does not load Vercel Analytics.

2.7 What we do not collect

For clarity, Planny does not:

• Read your contacts, photos, microphone, or camera.
• Track your precise location.
• Use third‑party advertising SDKs or behavioural advertising.
• Sell, rent, or trade your personal data.
• Send your data to any third‑party AI or LLM provider for model training, fine‑tuning, or evaluation.
• Use your expense data, notes, or any content you create to train models — ours or anyone else's.

3. Why we process your data (legal basis under GDPR)

We do not rely on consent except where local law requires it (for example, the EU/EEA cookie‑ish analytics consent banner on the marketing website).

4. Who we share data with (sub‑processors)

Planny uses a small number of carefully chosen vendors. None of them have permission to use your data for their own purposes, and none of them share it with AI/LLM providers for training.

We do not currently use any third‑party advertising network, attribution SDK, or AI/LLM provider in Planny. If we add a new sub‑processor we will update this page and, where required, notify you in‑app.

5. International data transfers

If you are in the EU/EEA, UK, or Switzerland, some sub‑processors above (notably PostHog and Vercel) process data in the United States. We rely on the EU Standard Contractual Clauses and equivalent UK/Swiss safeguards for these transfers, plus supplementary technical measures (TLS in transit, encryption at rest).

6. How long we keep your data

7. Your rights and how to exercise them

Wherever you live, you can:

1. Export your data — Settings → "Export as CSV" or "Open as spreadsheet". Includes every expense, income entry, recurring item, and category.
2. Delete your account — Settings → "Delete account". Permanently removes your account, expenses, settings, and your membership of any joint Spaces. Joint Spaces you created become orphaned and are deleted 7 days later if no other member remains.
3. Opt out of analytics — Settings → Privacy → toggle "Share anonymous usage data" off. We stop sending PostHog events from your device. You can also block PostHog at the network level.
4. Email us — write to privacy@getplanny.app from the email on your account. We will reply within 30 days as required by GDPR Art. 12(3).

If you are in the EU/EEA, UK, or Switzerland, the GDPR also gives you the rights of access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20), and objection (21), plus the right to lodge a complaint with your local Data Protection Authority (list here).

If you are in California, the CCPA/CPRA gives you analogous rights to know, delete, correct, and opt out of "sale" or "sharing". We do not sell or share personal data as those terms are defined under California law.

8. Children

Planny is not directed to children under 13 (or under 16 in the EU, where higher). We do not knowingly collect personal data from children. If you believe a child has created a Planny account, email privacy@getplanny.app and we will delete it.

9. Security

We use TLS in transit, encryption at rest on Supabase, scoped service tokens, and row‑level security so users can only read their own rows and rows in spaces they belong to. No system is perfectly secure, but we keep dependencies up‑to‑date and run regular reviews.

If you discover a vulnerability, please report it to security@getplanny.app. We do not pursue legal action against good‑faith security researchers who follow our coordinated‑disclosure guidelines.

10. User‑generated content & joint Spaces

Planny lets you create joint Spaces with people you invite. Anything you write inside a shared Space (expense names, notes, category names) is visible to other members of that Space. We provide:

• An invite‑only model — you must accept an invite to join a Space.
• A leave / remove‑member control inside Space settings.
• A reporting channel — abuse@getplanny.app — for content or behaviour that violates our rules. There is also a "Report content or behaviour" link inside Space settings.

We will review reports promptly and may remove content or suspend accounts that violate our terms.

11. Changes to this policy

We may update this policy as the product evolves. When we do, we will update the "Last updated" date at the top, and for material changes notify you in‑app or by email at least 30 days before they take effect. The previous version is always available on request.

12. Contact

Postal address: [Legal entity name], [registered address].

This document is intentionally written in plain English. If anything is unclear, please email us — we will rewrite it.