Privacy

The short version

Simple Planner keeps what you plan so it can show it back to you. There is no advertising, no tracking, and no analytics of any kind — the app loads no third-party scripts. Nothing you write is sold, and nothing is shared except with the handful of services named below that are needed to run it. You can delete the whole account, and everything in it, from Settings at any time.

What is kept

• Your account — name, email address, a hashed password (never the password itself), time zone and your settings.
• What you plan — priorities, goals, notes, follow-ups, end-of-day reviews, and the files you attach to a priority or a note.
• Calendars — the address of any calendar feed you subscribe to, and, if you use the Mac or iPhone app and allow it, a copy of the events in the calendars on that device, so your schedule shows beside your plan. Events the planner creates are written back to the one calendar you choose.
• Devices — a token for each app, Shortcut or Alfred workflow you connect, and when it was last used.
• Billing — if you pay, a Stripe customer reference, your plan, and the brand and last four digits of your card. Card numbers never reach our servers.
• Usage of the AI — a count of the AI requests you have made and the number of words in each, so we know what the service costs. The text itself is not kept in that record.
• Server logs — ordinary web server and error logs, kept for a short while for debugging.

Who it is shared with

Only these, and only what each one needs:

• The AI providers. When you use Add, Adjust or Review Plan, process a page of notes, or ask the planner a question, the text of that request — along with the priorities and calendar entries it needs for context — is sent to the model provider that answers it: Cerebras and OpenAI. Search also sends short excerpts to Google to turn them into embeddings. Their policies govern what they do with it; the planner sends nothing to them unless you ask for something that needs them.
• Stripe — payments, if you pay. They handle the card; we never see it.
• Our host — the servers and the object storage that hold the database and your attachments.
• Fonts — the pages load a typeface from Bunny Fonts, a font host that sets no cookies and keeps no logs. The video on the front page only loads from YouTube's no-cookie domain, and only once you press play.

Nobody else. Your plan is not sold, rented, or handed over for advertising.

Your attachments

Files you attach are private. They are never public, and they are never served straight from storage: every request for one is checked against the account that owns the priority or note it hangs off, and only then handed back, as a download. Nobody with a link but no account can open one.

Deleting it all

Settings → Account → Delete account removes the account and everything in it: priorities, goals, notes, attachments, calendars, reviews and stats. It happens immediately, it cannot be undone, and any subscription is cancelled at the same time. Backups of the database roll off within thirty days. You can do this from the web, the Mac app or the iPhone app.

If you would rather have a copy first, or want anything corrected, write to us and we will sort it out.

Children

Simple Planner is not aimed at children and is not intended for anyone under 13.

Changes, and how to reach us

If this policy changes in a way that matters, the date at the top changes and anyone with an account is told by email. Questions, requests, or anything that looks wrong: stephen@simpleplanner.org.