Your privacy
Privacy Policy
Last updated: August 2026
We try to hold as little of your data as possible. This policy explains what we collect, why we need it, and the controls you have.
Using the planner without an account
Without an account, your planner data stays only on this device. Calculations run in your browser, and the debts and budget you enter are kept in your browser’s local storage. They are not sent to our servers, and we cannot see them. Clearing your browser data erases them.
If you create an account
Account data is stored with Supabase. Supabase Authentication handles your email address and securely hashed password. We store the debts, budget, plans, payment records, reminder preferences, timezone, and audit history you choose to save. The audit history is visible to you. Optional fields, including display name, province, and credit score, are stored only if you enter them. Data is encrypted in transit with TLS. Database row-level security limits reading and writing to your account.
What we never collect
We never ask for bank credentials, bank account numbers, credit-card numbers, Social Insurance Numbers, or government ID. We do not connect to your bank.
Emails
If you choose payment reminders, Resend sends them to your account email. A reminder includes the debt name and planned amount you configured. A "Mark as paid" link uses a single-use token that expires. It cannot sign in to your account or expose other data. Every reminder includes an unsubscribe link, and you can turn reminders off in Settings.
Analytics
We record basic product events, such as a plan being generated or a payment being marked. These events use broad properties only. They never include balances, interest rates, income, or any dollar amount. We do not use third-party analytics, advertising scripts, fingerprinting, or cross-site tracking. Anonymous usage uses a random identifier stored in your browser.
Where your data lives
Account data is stored with Supabase (PostgreSQL) in its us-east-1 region. Cloudflare’s network serves the website. Resend delivers reminder emails. These providers process data on our behalf and cannot use it for their own purposes.
Your rights and controls
In Settings, "Your data" lets you export everything we hold about you as JSON at any time. "Delete account" removes your account and every associated record immediately and permanently. This includes debts, budget, plans, payments, history, reminder preferences, and tokens. There is no retention period, recovery window, or soft delete.
What we don't do
We don’t sell your personal information. We don’t rent it or share it for anyone else’s purposes. We don’t show ads or use your financial data to market lending products. We don’t train AI models on your data. Plan explanations use computed arithmetic, not machine learning.
Contact
You can raise questions about this policy or your data through the Help page. If you believe we have not respected your rights under PIPEDA, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.