Privacy Policy
Planex turns one goal into a plan and helps you follow it. To do that it holds some genuinely personal things — what you are trying to change, sometimes your income, sometimes a photo of your face. This page says exactly what we hold, who else sees it, and how to get rid of it.
Who runs Planex
Planex (the "app") is operated by [TO BE COMPLETED — registered legal entity name], at [TO BE COMPLETED — registered postal address]. That entity is the data controller for everything described here.
Contact for any privacy question, data request or complaint: akr3ch@icloud.com.
The short version
- We collect what you type into the app, what your plan is, what you do with it, and any photo you choose to take.
- Your goal details — including money figures and your location if you gave them — are sent to Anthropic, which runs the AI model that writes your plan.
- We do not sell your data and there are no advertising SDKs in the app.
- You can delete everything, yourself, at any time. See Delete your data.
- Planex is for adults. You must be 18 or older.
What we collect
Your identity
- A Planex identity — a random identifier issued by our server the first time you open the app, and a signed token your device stores to prove it is yours. Everything else is filed under that identifier.
- Google account details, if you sign in with Google — your Google account identifier, your email address and the name on the account. We store these so your plans survive a new phone or a reinstall. Signing in is optional; the app works without it.
- Your email address, if you sign in with email — we email you a one-time code and keep the address linked to your account, for the same reason: so your plans survive a new phone or a reinstall. We don't send marketing to it.
- Which phones use your account — a random identifier created when the app is installed (not a hardware identifier), whether it's Android or iPhone, the phone model, and when each was last used. We use it to count how many devices share an account and to spot misuse.
What you tell us about your goal
- The goal in your own words, why it matters to you, what "done" looks like, your deadline and where you are starting from.
- Your answers to the intake questions, and anything you write later under "something changed".
- Your constraints: hours a week you can give, the times of day you are free, a budget, skills and assets you already have, and any limits you describe — which may include health, family, legal or religious circumstances.
- Your location as free text (typically a city or country), because seasons, prices, markets and rules differ by place.
- The shape of your day — when you wake, when you sleep, when you work best.
Money details, when the goal is about money
If your goal involves an amount of money, the app asks for and stores: the target amount, the currency, how much you have toward it today, your monthly income after tax, what is actually left over in a normal month, and whether that income is secure. These are used to compute the gap between where you are and the goal, and they are sent to the AI model along with the rest of the goal.
Photos you take
- Camera scans — when a question asks for one, you can photograph your face, your body, an area of skin, a document, a space or an object. The photo is uploaded to our server, stored as a file there, and sent to the AI model, which returns written observations that shape your plan.
- Photo proof of a completed task — separate from scans. When a task asks for photo evidence you can attach one; it is uploaded and kept as part of that day's record.
Every photo is something you choose to take. Nothing is captured in the background, and you can skip any scan — the question falls back to a tap answer.
Your plan and what you do with it
The generated plan itself (milestones, tasks, habits, times, any prices or rules Planex researched), plus what you mark done, skipped or rescheduled, timer durations, numbers and notes you log, your weekly reviews, and which items you have muted.
Device and payment
- A push notification token for your device, if you allow notifications, so we can tell you a plan or a review is ready.
- Your subscription record, if you subscribe: the Google Play purchase token, or the App Store transaction id, with the product and renewal date. Card and payment details go to Google or Apple, never to us — we never see them.
Usage and diagnostics
- A record of named events — app opened, goal created, plan viewed, paywall viewed, upgraded, plan shared, share page viewed, clip played, and so on. Each row carries the time, your user id and a few small properties such as which goal it was about, which plan term you looked at, a referral tag on a shared link, or the browser identification string of a visitor to a public share page.
- One row per day you used the app, so we can count how many people use Planex.
- Server logs, which include the IP address a request came from. Administrative actions on our side are recorded in a separate log with the administrator's IP address.
Sensitive information
Some of the above is more sensitive than the rest: a photograph of your face, an assessment of your skin, limits you describe that touch on your health, and your income. We treat these as sensitive. They are collected only because a feature you chose to use needs them, they are never used for advertising or profiling, and you can decline any of them and still use the app.
Planex is not a medical device. Scan results are written observations, not a diagnosis, and must not be used in place of a doctor, a lawyer, an accountant or any other professional.
How the AI works, and what it receives
Plans, revisions, realism checks, research lookups and weekly reviews are produced by AI models operated by Anthropic. Be aware of what that means in practice:
- The whole structured goal is sent on every planning, critique, research and review call — including the money figures and your location, when you have given them.
- Scan photos are sent to the model for the vision step.
- While researching prices, rules and options, the model runs web searches derived from your goal. Do not put anything into a goal that you would not want turned into a search query.
AI output can be wrong or out of date. Check anything that matters before you act on it.
Who else receives your data
| Recipient | What they receive | Why |
|---|
| Anthropic | Your goal text and answers, the full goal brief including the money block and your location, your plan, and your scan photos | Runs the AI models that write and review your plan |
| Google — Sign-In | The sign-in token we verify with Google | Confirms the Google account is real, so your account is recoverable on a new phone |
| Resend | Your email address and the sign-in code, if you sign in with email | Sends the one-time sign-in code from hello@myplanex.app |
| Google — Firebase Cloud Messaging | Your device push token and the text of the notification | Delivers "your plan is ready" and "your review is ready" to a closed app |
| Google — Play Billing | Your purchase token, so we can verify it | Confirms a subscription is genuine before unlocking Pro |
| Apple — App Store | Your signed transaction and renewal notices from Apple | Confirms and renews an iPhone subscription before unlocking Pro |
| Apple — Push Notification service | Your iPhone's push token and the text of the notification | Delivers "your plan is ready" and "your review is ready" to a closed app on iPhone |
| Expo | A push token and notification text, only for older app versions using an Expo-issued token | Legacy push delivery route |
| Sentry | Crash reports and technical diagnostics from the app, with no personal details attached | Finding and fixing crashes. This is off unless a reporting key is configured for a build; in builds without one, nothing is sent at all |
| YouTube / Google | Search terms derived from a task when we look for a how-to clip, and — when you play a clip — whatever the embedded YouTube player itself reports, including cookies it sets and playback it records | Shows a short video that teaches the task |
These are the only recipients. We do not sell personal data, we do not share it with data brokers, and there is no advertising or analytics SDK in the app beyond what is listed above.
YouTube
Planex uses YouTube API Services. By using the parts of Planex that show video clips you also agree to the YouTube Terms of Service. Google's handling of the data its player and API collect is described in the Google Privacy Policy. You can review and revoke Planex's access to your data through Google's security settings page.
Public share pages
If you tap Share on a plan, Planex creates a link at /p/… that anyone with the link can open and search engines can index. It shows the plan's title, summary, milestones and first days — written by you and by the AI. It does not show your answers, your money figures, your location, your photos or the research behind the plan. Turning sharing off in the app makes the link stop working.
Where your data is processed
Planex's server, Anthropic, Google, Expo and Sentry all operate internationally. Your data is processed outside the country you live in, including in the United States. The privacy laws there may differ from those where you are.
How long we keep it
- Delete a goal in the app and that goal is removed immediately, along with its plan, your answers, its check-ins, its reviews and every photo attached to it — both scans and photo proof.
- Delete your account in the app (Profile → Delete account) and everything goes: all of your goals, all of their uploaded photos, your profile — name, settings, day shape, push token, subscription record — any Google sign-in link, and the usage events, daily-active rows and administrative records tied to your identifier.
- What still survives, and for how long. Two things, and only two. Our server's request logs, which contain the IP address a request came from, kept for up to 15 days. And any dated backup of the database taken before you deleted: the most recent 14 are kept, so deleted data can remain in a backup for up to 14 days before it ages out.
- Otherwise we keep your data for as long as your account exists. Nothing expires on its own.
Signing in on a second phone merges two identities rather than deleting one: the older identity's goals and usage history are carried across to the account that survives. Only the delete described above removes anything.
How your data is protected
Plainly, and without overclaiming:
- Everything between the app and our server travels over HTTPS. The Android app refuses unencrypted connections outright.
- Your device holds a signed identity token issued by our server, and a request only reaches your goals, your photos and your profile if it presents a token whose signature checks out — so a Planex identifier on its own, leaked in a log or a bug report, is not enough to reach your account. It is still a bearer token: whoever holds it holds the account. Treat it like a password, and delete Planex from any phone you no longer control.
- Your data lives on a single server we operate. The database file and the uploaded photos are ordinary files on that server's disk and are not separately encrypted at rest, and neither are the backups.
- Administrative access needs a secret token, is rate-limited against guessing, and every administrative action is logged.
- Payment card details never reach us at all — Google handles them.
No service is perfectly secure. If you find a weakness in Planex, please tell us at akr3ch@icloud.com.
Your rights
Wherever you live, and regardless of which law applies to you, you can ask us to:
- See what we hold about you, and get a copy of it.
- Correct anything that is wrong.
- Delete it — do it yourself in the app, or see Delete your data.
- Stop a particular use, including turning off notifications, declining scans, or withdrawing consent you gave earlier.
- Complain to us, or to your national data protection authority if you are in the UK, the EU or anywhere else with one.
Email akr3ch@icloud.com and we will respond within 30 days. We do not charge for this, and we will not treat you differently for asking.
Children
Planex is for adults only. You must be 18 or older to use it. It is not directed at children, and we do not knowingly collect anything from anyone under 18. If you believe a child has used Planex, email akr3ch@icloud.com and we will delete the account and its data.
Changes to this policy
We will update this page when the app changes, and move the date at the bottom. If a change materially affects what we collect or who receives it, we will say so in the app.
Contact
[TO BE COMPLETED — registered legal entity name], [TO BE COMPLETED — registered postal address] · akr3ch@icloud.com