Privacy Policy

Planno ("we," "us," or "our") is committed to protecting your privacy. This policy applies to all users of the Planno application, whether accessed via web, mobile, or desktop platforms.

By using Planno, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2.1 Account Information

When you create a Planno account, we collect:

• Email address (required for authentication and account recovery)
• Display name or full name (for personalization)
• Password (encrypted and never stored in plain text)
• Profile picture (optional)
• Account preferences and settings

2.2 Planning and Task Data

To provide our core planning services, we store:

• Tasks, to-do items, and their descriptions
• Task metadata (creation date, due dates, completion status, priorities)
• Schedules, calendar events, and time blocks
• Categories, tags, and organizational preferences
• Notes, comments, and task descriptions you create
• Recurring task patterns and templates

2.3 Communication Preferences

If you enable notifications, we collect:

• Email notification preferences
• Preferred notification times and delivery methods
• Push notification tokens for mobile devices

2.4 Usage Information

We automatically collect certain information about how you use Planno:

• Device information (device type, operating system, browser type)
• IP address and general location data (country/region level only)
• Login timestamps and session duration
• Feature usage patterns (which features you use most)
• Error logs and diagnostic information

2.5 AI Assistant Interactions

When you use our AI planning assistant:

• Your queries and requests to the AI assistant
• AI-generated suggestions and responses
• Interaction patterns to improve AI performance (anonymized)

3.1 Primary Service Functions

• Create, store, and synchronize your tasks across devices
• Provide task reminders via email notifications
• Generate daily summaries and progress reports
• Offer AI-powered planning suggestions and assistance
• Enable task scheduling and calendar integration
• Facilitate task sharing and collaboration (if enabled)

3.2 Service Improvement and Analytics

• Analyze usage patterns to improve features (with anonymized data)
• Optimize notification timing and content relevance
• Train and improve AI models for better suggestions
• Identify and fix bugs or technical issues
• Develop new features based on user needs

3.3 Security and Fraud Prevention

• Detect and prevent unauthorized access
• Monitor for suspicious activity or abuse
• Enforce our Terms of Service
• Comply with legal obligations

3.4 Communication

• Send important service updates and announcements
• Respond to your inquiries and support requests
• Send optional product updates (with your consent)

4.1 Encryption

• In Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security)
• At Rest: Data stored in our databases is encrypted using AES-256 encryption
• Passwords: User passwords are hashed using bcrypt with salt

4.2 Infrastructure Security

• Hosted on Google Firebase with enterprise-level security certifications
• Regular security patches and updates
• Distributed denial-of-service (DDoS) protection
• Automated backup systems with redundancy
• Network isolation and firewall protection

4.3 Access Controls

• Multi-factor authentication for administrative access
• Role-based access control (RBAC) for team members
• Comprehensive audit logs of all data access
• Zero-knowledge architecture where feasible
• Regular access reviews and permission audits

4.4 Data Isolation

Your data is logically isolated from other users' data. Only you can access your personal tasks and planning information through your authenticated account.

5.1 Service Providers

We work with the following categories of trusted service providers:

All service providers are bound by contractual obligations to protect your data and use it only as necessary to provide their services to us.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

6.1 What Are Cookies?

Cookies are small text files stored on your device that help us remember your preferences and provide a better user experience.

6.2 Types of Cookies We Use

• Essential Cookies: Required for authentication and basic functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our service

6.3 Cookie Control

You can control and/or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of our service.

7.1 Access and Portability

Right to Access: You can request a copy of all personal data we hold about you.

Right to Data Portability: You can request your data in a machine-readable format to transfer to another service.

7.2 Correction and Deletion

Right to Rectification: You can update or correct your personal information at any time through your account settings.

Right to Erasure: You can request deletion of your account and all associated data at any time.

7.3 Other Rights

• Right to Object: Object to processing of your personal data for specific purposes
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

8.1 Active Accounts

We retain your data for as long as your account is active or as needed to provide you with our services.

8.2 Account Deletion

When you delete your account:

• Your profile information is immediately removed from active systems
• All tasks and planning data are permanently deleted within 30 days
• Some data may be retained in backup systems for up to 90 days for disaster recovery purposes
• We may retain certain information if required by law (e.g., tax records, fraud prevention)

8.3 Inactive Accounts

If your account remains inactive for 3 years, we will send you a notification. If you don't respond within 90 days, we may delete your account and associated data.

9.1 If We Discover Child Data

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible.

9.2 Parental Rights

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete it.

10.1 Global Infrastructure

We use Google Firebase, which operates globally. Your data may be stored and processed in the United States or other countries where Firebase has infrastructure.

10.2 Data Protection

When your data is transferred internationally, we ensure it receives the same level of protection through:

• Standard contractual clauses approved by regulatory authorities
• Compliance with applicable data protection frameworks (EU-U.S. Data Privacy Framework, etc.)
• Technical and organizational security measures

11.1 How We Notify You

When we make significant changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email (if you have provided an email address)
• Display a prominent notice in the application

11.2 Your Acceptance

By continuing to use our service after changes become effective, you accept the updated Privacy Policy. If you don't agree with the changes, you may delete your account.

12.1 Privacy Questions

If you have questions about this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@dailyplanner.app
• Response Time: We aim to respond to all privacy inquiries within 48 hours