Privacy Policy

Your account (optional sign-in)

The app and the Chrome extension work without an account. If you sign in — with Google, or with Apple on iPhone — Firebase Authentication (Google) receives your email address, your name and a user ID, so your data can follow you to your other devices. We never see your Google or Apple password.

• •Legal basis: Performance of a contract (the sync you asked for)
• •Processor: Google Ireland Ltd. (Firebase); sign-in data may be processed outside the EU under Standard Contractual Clauses
• •Retention: Until you delete your account

Your tasks and timers

Everything you create is stored on your device first. With Pro and an account, your tasks, timers, projects, reminders and focus sessions are also stored in Google Cloud Firestore, in Google’s European region, so they sync between your devices. On iPhone the app also stores a device identifier and the push tokens Apple issues for Live Activities, so a timer started on one device can update the lock screen of another. The Chrome extension’s page widget remembers where you placed it on each website: that website’s address is kept only in your browser’s local extension storage and is never sent anywhere. None of this is sold, used for advertising or used to train AI.

• •Legal basis: Performance of a contract
• •Processor: Google Ireland Ltd. (Firebase / Cloud Firestore, EU region)
• •Retention: Until you delete it. Deleted items are kept as deletion markers for 30 days so every device learns about the deletion, then removed; deleting your account removes the cloud copy.

Purchases (App Store, RevenueCat, Stripe)

On iPhone, Pro is bought through Apple’s App Store: Apple takes the payment and we never see your card. RevenueCat receives the purchase record and your user ID so that Pro unlocks on every device you sign in to. In the Chrome extension, Pro is bought through Stripe Checkout, which collects your payment details and email address on its own page; we receive only the purchase status and a Stripe customer reference linked to your user ID.

• •Legal basis: Performance of a contract; legal obligation (tax and accounting records)
• •Processors: RevenueCat, Inc. (USA, Standard Contractual Clauses); Stripe Payments Europe, Ltd. (Ireland)
• •Retention: Purchase records for as long as tax law requires

Crash and error reports (app + browser extension)

The PlanSync app and the Chrome extension send technical error reports to Sentry so we can find and fix crashes. A report holds the error message, the stack trace, and technical context (app version, operating system, device model) — never the content of your tasks, notes or project names, which are stripped before anything is sent. Reporting is on by default and can be switched off at any time in Settings → Diagnostics, where you can also read, copy and delete the locally stored error log. The log itself never leaves your device unless you send it.

• •Legal basis: Legitimate interest (keeping the app working); you may object at any time using the switch in the app
• •Processor: Functional Software, Inc. (Sentry) — data stored in the EU region
• •Retention: 90 days, then automatic deletion

Email updates (EmailOctopus)

When you sign up for email updates (for example to hear when Android launches) - or joined the earlier waitlist - we collect your email address. It is stored and processed by EmailOctopus and used solely to send you PlanSync news: the Android launch, new versions and build updates.

• •Legal basis: Consent (double opt-in)
• •Retention: Until you unsubscribe
• •Unsubscribe: Every email contains an unsubscribe link

Analytics (Umami)

This site uses Umami - a privacy-first analytics tool. Umami does not use cookies and does not collect personally identifiable information.

Product analytics (Microsoft Clarity)

This site also uses Microsoft Clarity to see how the page is used - aggregate heatmaps and anonymised replays of clicks and scrolls. Unlike Umami, Clarity sets cookies and the data is processed by Microsoft. Text you type and form fields are masked by default, so your email is never captured in a replay.

• •Legal basis: Legitimate interest (improving the site)
• •Processor: Microsoft Ireland Operations Ltd.