Privacy and security
Your plan is private. You decide who sees it.
You'll be writing down things you may never have written down before. Here is, in plain words, who can see them and how they're protected.
Only you, and who you invite
No other customer can see, change or delete your plan. You can invite up to 3 people and remove them at any time.
Never sold
We don't sell your information, and we don't use it for advertising.
Delete it whenever you like
Deleting your account removes everything right away.
How your information is protected
- Scrambled while stored and sent
- Your information is encrypted when it travels between your device and our servers, and while it's stored.
- Kept apart from other accounts
- Each plan is locked to its owner and the people they've invited. Changes go through our servers, which check who you are every time.
- Passwords
- We never store your password itself, only a scrambled version that can't be turned back into it. You can also sign in with Google, Microsoft, Facebook or Apple. We receive only your name, email address and an account number from them, never your password, contacts or files.
- Two-step sign-in
- You can add a second step: after your password, you type a 6-digit code from an authenticator app on your phone. It's required to view a plan someone shared with you and to delete an account. Too many wrong codes locks the account for a while.
- Backup codes
- When you turn on two-step sign-in, you get one-time backup codes to keep somewhere safe in case you lose your phone.
- Sign-in history
- Sign-ins are recorded with the device used, so you can spot one that wasn't you.
- Payments
- Payments are handled by our payment provider. We never see or store your full card number.
When your information is deleted
- If you cancel
- You can still read and print your plan until the end of the time you paid for. Within 24 hours after that, your plans, calendar and sign-in records are permanently deleted.
- If you delete your account
- Everything is deleted immediately, and your subscription is cancelled so you aren't charged again. This can't be undone.
- What we keep
- A record of who you invited, so the 3-person limit can't be misused, and payment records we must keep for tax and accounting.
Your rights
You can ask for a copy of your information, ask us to correct it, or ask us to delete it. People in California, the European Economic Area and the United Kingdom have extra rights under their laws. The full details are in our Privacy Policy.
Questions? Email [email protected].
No system is perfectly secure. If a breach ever affected your information, we would tell you and the authorities as the law requires.
Start your plan privately.
Nobody else sees it unless you invite them.