Privacy & security
How Plannie handles your family's data.
A plain-language explainer alongside our full privacy policy - that policy is the legally binding document; this page just explains it in everyday terms.
Your data is yours
We never sell your data, and we don't show ads. Personal data is shared only with the service providers that host and run Plannie (under contract, only as needed to do their job), with services you explicitly connect, or where the law requires it - never with advertisers. The full list of service providers is published in our sub-processor list.
What the Assistant is allowed to see
When you use the Plannie Assistant, Magic Import, or the Family Inbox, the specific content involved - the email, photo or link you gave it - is sent to our AI provider to produce the result, and for no other purpose. Your content is never used to train AI models. Anything created by the Assistant or by a connected API key is marked with an attribution badge in the app, so it's always visible who - or what - made a change.
Revoking a connected calendar or device
Any connected calendar (Google, Outlook or an Apple Calendar feed) can be disconnected at any time from Settings → Calendar. API keys and MCP access created for agents can be revoked at any time from Settings → Integrations - revoking a key immediately stops that agent from reading or writing anything further.
How long we keep data
We keep personal data only as long as necessary for the purposes described in our privacy policy. A few concrete windows: quarantined Family Inbox email from an unapproved sender is deleted after 30 days; if a Premium subscription ends, there's a 30-day grace period before the household's dedicated email address and its stored mail are released; deleted accounts are removed from active systems immediately, with residual backup copies cleared within 30 days.
Deleting your account
Account deletion is self-service: Settings → Delete account & data. It takes effect immediately and can't be undone - it removes the entire household from our active systems. If your subscription is billed through our web billing it's cancelled together with the deletion; a subscription billed through the App Store or Google Play needs to be cancelled there first.
Parental controls
A household PIN, set under Settings → Parental lock, gates editing chores and rewards, changing settings, and other members' private areas. Children can complete their own tasks and see their own day without the PIN; changing what's expected of them, or what it's worth, needs the code.