Privacy Policy

What we collect

To use plan7 you create an account. We collect and store the following:

• Account details — your email address and authentication credentials (or, if you sign in with Apple or Google, the name and profile details that provider makes available), together with your chosen language.
• Your answers — the goals, priority areas, fixed commitments, available time, sleep window, energy patterns and execution problems you enter in the questionnaire.
• Your routines — the plans generated for you, and any edits or recalibrations you make.
• Your plan and app settings — in the mobile app, your daily schedule and tasks, the alarm and wake-up times you set, and your reminder and app-blocking preferences.
• Planning chat and voice input — the messages you send to change your day. Voice input is converted to text and the audio is not stored. We keep the changes you apply to your plan, not the conversation.
• Notification token — an identifier from Apple or Google that lets us send notifications to your device, such as when your plan is ready.
• Usage and device data — analytics events about how you use plan7 (screens opened, features used) together with basic app and device information, which we use to keep the service working and to improve it.
• Diagnostics — uncaught app errors and rejected operations, including technical error details and stack traces, so we can diagnose reliability problems. The mobile app does not enable native crash recording or session replay.
• Payment and access data — if you buy access, our payment provider (Stripe on the web) or the app store (Apple or Google, for in-app purchases) handles your card details, and we store your entitlement status (for example, whether access is active, its expiry and remaining recalibrations) and the customer identifier from that provider.

This data is stored in our database, associated with your account. We do not receive or store your full card number — payments are handled by our payment provider or the app store.

Some things stay on your device and never reach us. Wake-up missions that use the camera or motion sensors process what they capture locally to check the mission — images and motion readings are not uploaded or stored. App blocking runs through your operating system's Screen Time / parental-control features: you choose which apps to limit, and that selection and your app-usage data are kept by the operating system on your device, not shared with plan7.

Your calendar also stays on your device. If you import your calendar, plan7 reads it on your device to suggest fixed commitments; only the commitments you confirm are saved to your account. plan7 does not use Apple Health or HealthKit and does not access any health data.

We do not collect your location. Our analytics do not derive a location from your IP address, and plan7 does not track you across other companies' apps or websites.

How we use it

We use your data to create and secure your account, to generate, save and display your routines, to let you edit and recalibrate them, to run the daily plan, alarms and reminders in the mobile app, and to manage your access and payments. We use usage analytics to understand how plan7 is used and to improve it. To protect the service from abuse, our server records the IP address of generation requests to apply rate limiting. We do not sell your data or use it for advertising.

Third parties

We rely on a few processors that handle data on our behalf, each under its own terms:

• Supabase — hosts our database and authentication, storing your account, answers and routines.
• OpenAI — receives your answers and chat messages to generate, recalibrate and edit your routine.
• Deepgram — receives your voice input to convert it to text when you dictate instead of typing.
• Stripe — processes payments and manages your card details when you buy access on the web.
• Apple and Google — the app stores process in-app purchases and subscriptions and, if you choose to sign in with Apple or Google, share your basic profile with us. Apple's system also powers the mobile app's alarms and app-blocking features on your device.
• RevenueCat — manages mobile subscriptions and tells us your entitlement status; it does not receive your card number.
• PostHog — provides product analytics so we can understand how plan7 is used and improve it.

The site also runs on third-party cloud hosting and infrastructure providers.

Data retention

Your account, answers and routines are kept in our database until you delete them or delete your account. In-app account deletion removes the associated records from our database and requests deletion of the customer/person records held by RevenueCat and PostHog. Rate-limit records are short-lived and expire automatically. Payment processors and app stores may retain transaction records where law or accounting rules require it.

Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data. You can view and edit your answers in the app, delete individual routines, and delete your account. For other requests, see our Data Requests page or contact us through the contact page on this site.

Children

plan7 is not directed to children under 13, or under the higher minimum age set by the law where they live. We do not knowingly collect personal data from children below that age; if we learn that we have, we delete it. Users under 18 need a parent or legal guardian to agree to our Terms.

Changes and contact

We may update this policy; the effective date above will change accordingly. Questions about privacy can be sent through the contact page on this site.