Privacy Policy

Ruth Johnson, trading as Plannli, is the data controller responsible for the personal information described in this policy. This policy explains what we collect when you use the Plannli mobile app, web app at app.plannli.com and the Plannli Chrome extension, how we use it, and the choices you have. Questions: support@plannli.com.

Where this policy applies

Plannli is available through the mobile app, web app and Chrome extension. Information saved to your Plannli account uses the same cloud service and is available across supported devices when you sign in with the same account. Some information may be stored only on your device where you use Plannli without signing in or without cloud syncing enabled.

What we collect

Account

• Your email address, and your name if you provide it, to create and secure your account.
• If you sign in with Google or Apple, we receive the information the provider makes available to us, which may include your name, email address and provider-specific account identifier (with Apple’s Hide My Email this may be a relay address). We do not receive your Google or Apple password.
• Authentication is handled by Supabase. Plannli stores authentication tokens on your device or in your browser to keep you signed in; we do not receive or store your password.

Your content

• The projects and items you create: names, budgets, prices, quantities, notes, deadlines, priorities, product links and any photos you add.
• For product links imported from a retailer, we may store the URL of an image made available on that page — the product image detected by the extension, or the site’s icon — so it can be displayed with the item. We store the image URL rather than copying the retailer’s image into Plannli’s file storage; the image is displayed directly from the website hosting it. When an externally hosted image is displayed, that website may receive standard request information such as your IP address and browser information. Where no image URL is stored, we may display the retailer’s site icon derived from the product link.
• Photos you upload yourself (for example project photos) are stored in Plannli’s file storage.
• Price history we record over time for items you choose to track.
• Your currency and notification preferences.

Subscriptions

• If you subscribe to Plannli Pro, billing is handled by the Apple App Store, Google Play, or — for subscriptions started on our website — by our billing partner RevenueCat with payments processed by Stripe. We receive your subscription status and expiry. Plannli does not receive or store your full payment-card number.

Product analytics (optional)

• With your consent, we record a limited number of product-usage events, such as when a project is created or an item is added, to understand how Plannli is used, diagnose problems and improve the service. These events may be associated with a randomly generated installation identifier (stored in the browser as plannli_device_id) and, when you are signed in, with your account identifier, but do not include your project names, notes, product links or other content you save.
• On the Plannli website and web app, analytics is off by default and runs only if you accept it in our cookie banner or privacy settings. We use two analytics tools: Plannli’s own analytics (recorded in Plannli’s Supabase database) and Google Analytics 4, provided by Google. Google Analytics is loaded only after you accept analytics; it sets cookies such as _ga and _ga_<id> and is configured for measurement only — we do not enable Google advertising features, Google Signals or remarketing, and we never use analytics to build advertising profiles or show targeted advertising.

Technical and diagnostic information

• When you use Plannli, we and our service providers may process technical information such as your IP address, device or browser type, operating system, app version, request times, authentication events, error reports and crash information. We use this information to operate, secure, troubleshoot and improve the service.

The Chrome extension — what it reads

The extension is designed to read as little as possible. It reads the content of the page you are viewing only when you open the extension or choose “Save to Plannli”, and only the current tab, to detect the product’s name, price, image and link so you can review and edit them before saving.

The extension does not:

• read tabs other than the tab in which you activate it;
• continuously monitor the pages you visit or collect a history of your browsing;
• read form inputs, passwords, payment details or basket contents;
• send any information read from the page to Plannli until you confirm a save.

When you open the extension, it reads the current tab locally in your browser to show you the detected details, and contacts Plannli only to check that you are signed in and to load your project list. Nothing read from the page leaves your browser unless you choose Save.

The extension stores your Plannli session locally in the browser’s extension storage so you stay signed in. Signing out clears it.

How we use your information

• To provide the service: store your projects and items and sync them across your devices.
• To show budgets, price watch and deadlines.
• To operate subscriptions and gate paid features.
• To improve the product using the product-usage events above.
• To keep the service secure and prevent abuse.

Notifications and price checks

If you enable notifications, Plannli uses your notification preferences to alert you about things you have asked to track, such as deadline reminders and price changes. Depending on the alert, notifications may be scheduled locally on your device or delivered through the notification services provided by your device platform. You can disable them at any time in Plannli’s settings or your device settings.

Price checks are performed locally on your device using the product links you choose to track; the retailer’s website receives the standard request information involved in loading a page. Price checks may not run when Plannli is unable to perform background activity.

Affiliate links

Some outbound links to retailers carry Plannli affiliate tags (for example Amazon Associates, eBay Partner Network and AWIN). If you buy after clicking one, we may earn a commission at no extra cost to you. We store the plain product link you saved — the affiliate parameters are only added when you open the link, and we never overwrite your saved link with an affiliate one. Clicking an affiliate link shares standard request information with that retailer or network under their own privacy policies.

Who we share with

We do not sell your personal information. We use service providers for cloud hosting, authentication, file storage, payments, subscription management, crash reporting and email delivery. The principal providers currently used are:

• Supabase — database, authentication, file storage and account emails (hosted in the EU, AWS eu-central-1, Frankfurt).
• Vercel — hosting for the website and web app; its request logs include IP addresses.
• Google Analytics — optional website and web-app analytics, used only if you accept analytics. Google processes the analytics data as described in Google’s privacy policy; we run it in measurement-only mode, without Google advertising features or Google Signals.
• Google / Apple — only if you use their sign-in.
• Apple App Store / Google Play — app distribution and in-app subscription billing.
• RevenueCat and Stripe — subscription management, and payment processing for subscriptions started on our website.
• Sentry — mobile-app crash and error reporting, which may include device information, operating system, app version, technical logs and information about the error. We do not attach your saved content or account details to crash reports.
• Affiliate networks (Amazon Associates, eBay Partner Network, AWIN) — only when you click an outbound affiliate link.

We may also disclose information where reasonably necessary to comply with law, respond to a valid legal request, protect the security or rights of Plannli or its users, or investigate fraud and abuse.

International transfers

Some of our service providers operate outside the UK or permit support personnel outside the UK to access information. Where a restricted international transfer takes place, we and our service providers use a recognised transfer mechanism where required, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You may contact us for further information about the safeguards used.

Retention and deletion

• We retain your account and saved content while your account remains active. When your account is deleted, active account data is removed immediately, although encrypted backups and security logs may remain for a limited period before being automatically overwritten or deleted. We retain billing and transaction records for as long as necessary to meet tax, accounting, fraud-prevention and legal obligations. Support correspondence may be retained for as long as reasonably necessary to resolve the request and maintain appropriate business records.
• Deleting a project or item removes it from your account.
• You can export your data from the web app (Settings → Export my data).
• Analytics retention: the plannli_consent preference lasts up to six months; Google Analytics data is retained for up to 14 months; and Plannli’s own product-usage events are retained for up to 24 months, after which they are deleted or aggregated so they no longer identify you.
• You can delete your account yourself at any time, from either app: in the mobile app open the account menu and choose “Delete account…”, or on the web go to Settings → “Delete account…”. For security, you may be required to sign in again or complete another authentication step before deletion. Account deletion immediately removes access to your account and deletes your active Plannli account data, including your projects, items and stored photos. Some information may remain temporarily in encrypted backups or security logs until those records are overwritten. Payment providers and app stores may retain transaction records under their own legal obligations and privacy policies. Product-usage events are stripped of their account identifier when your account is deleted; a random installation identifier and aggregated statistics that no longer identify you may be retained. Information stored only on your device is not automatically deleted when you delete your cloud account — you can remove it using the controls in Plannli or by deleting the app and its local data from your device. You can also contact support@plannli.com to request deletion.
• Deleting your Plannli account does not necessarily cancel an active subscription. Subscriptions purchased through Apple must be cancelled through your Apple subscription settings, Google Play subscriptions through Google Play, and web subscriptions through the subscription-management option provided for your web purchase (linked from Settings or your payment receipt).

Lawful bases

Where UK data-protection law applies, we generally rely on:

• Contract — to create your account, store and sync your content, provide price tracking and manage your subscription.
• Legitimate interests — to secure Plannli, prevent fraud and abuse, troubleshoot faults and understand how the service is used, provided those interests are not overridden by your rights.
• Legal obligation — where we must retain or disclose information to comply with law, tax or accounting requirements.
• Consent — where required, including for optional notifications or non-essential analytics technologies where applicable.

Your rights

If UK data-protection law applies, you may have the right to request access to your personal information (including obtaining a copy), correct inaccurate information, request deletion, restrict or object to certain processing, receive certain information in a portable format, and withdraw consent where processing relies on consent. These rights are subject to legal conditions and exceptions. You can exercise them in the app or by contacting us at support@plannli.com.

You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk). We would appreciate the opportunity to address your concern first, but you are not required to contact us before complaining to the ICO.

Automated decision-making

We do not use your personal information to make decisions that produce legal or similarly significant effects about you solely by automated means.

Cookies and local storage

Strictly necessary storage keeps you signed in, maintains security, runs your subscription and remembers your privacy choice. It includes your authentication session and a small first-party preference cookie, plannli_consent, that records your analytics choice for up to six months and is shared across plannli.com and app.plannli.com. Necessary storage does not require consent and cannot be switched off while you use Plannli. The Chrome extension separately stores your Plannli session in the browser’s extension storage so you stay signed in.

Optional analytics storage is used only if you accept analytics. It includes the plannli_device_id identifier and, for Google Analytics, cookies such as _ga and _ga_<id>. Until you accept, no analytics identifier is created, no analytics event is sent, and Google Analytics is not loaded. We do not use advertising cookies.

You can accept, reject, review or withdraw analytics consent at any time using the “Cookie settings” control in the website footer, in the web app’s Settings, or the small control shown on every page. Withdrawing consent stops analytics collection and deletes the analytics identifiers from your browser; your choice applies separately from the strictly necessary storage above. We ask again after six months, or sooner if what we collect materially changes. Information already collected on our servers before you withdraw is handled as described in “Retention and deletion”, and you can request deletion at support@plannli.com.

Security

Each user’s data is isolated at the database level (row-level security), traffic is encrypted in transit, and sessions use short-lived tokens. No system is perfectly secure, but we work to protect your information.

Children

Plannli is not directed to children under 16 and we do not knowingly collect their data.

Changes

We may update this policy; we’ll change the “last updated” date above and, for material changes, notify you in the app.

Contact

Ruth Johnson, trading as Plannli · support@plannli.com