Your planner, your information.

Arden Systems LLC operates Plan4me. Our mailing address is 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA. Contact support@plan4me.app for privacy questions or requests. The initial service is for US residents age 18 or older.

Information we collect

Account email, authentication and verification records, and server-recorded acceptance of policy versions and timestamps. Password authentication is handled by Supabase; passwords are not stored in your planner document.
Tasks, notes, checklists, projects, routines, saved text, dates, estimates, recurring-task settings, reminder choices and time zones, focus history, planning settings, and synchronization metadata.
Subscription provider, customer or order references, purchase tokens, subscription status, payment periods, payment and refund records, and recurring-billing consent. Stripe or Google handles payment details. Plan4me does not receive your full card number.
Device registration identifiers and encrypted notification subscription or FCM tokens when you enable notifications; permission, delivery, retry, and failure status.
How you found Plan4me: the campaign tag in the link you first arrived with (such as ?ref=reddit) or the domain of the website that sent you, saved with your account when you sign up. We use it only to see which channels bring people to Plan4me, and we never keep the full address you came from.
Support messages you choose to send, and service security information such as request timestamps, IP addresses, browser information, and error or abuse records processed by our infrastructure providers.

Google sign-in and optional Calendar

Continue with Google uses basic identity permissions: an account identifier, email address, and profile information such as name or avatar that Google provides to Supabase. Signing in does not grant Calendar access. Supabase may store identity information as part of your authentication record.

If you separately connect Google Calendar, we request read-only calendar-list and event access. We use selected calendar identifiers, event titles, start and end times, recurrence instances, all-day and busy/free status to show appointments alongside tasks and calculate capacity and conflicts. Google returns additional event fields during API responses; our event cache retains the normalized fields needed for these features. We keep an encrypted server-held refresh token and protect the authorization return with expiring state and PKCE. Plan4me never edits Google events.

You can disconnect in Calendar settings or revoke access in your Google account. Disconnection deletes active connection tokens and the server cache. Local cached appointments are cleared when the app receives the disconnection status; an offline device may retain an earlier cache until it reconnects or its app storage is cleared. Plan4me’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising or sell it.

Optional voice and text planning

When this feature is enabled, you choose whether to send a recording, live microphone audio or typed notes to OpenAI for transcription, conversation, proposed new tasks and proposed changes to tasks you already have. So that a live voice session can complete, move or reschedule your tasks and answer questions such as what is next, it also sends OpenAI a list of up to 60 of your current and upcoming tasks: each task’s title, an internal identifier, its planned date and time, its deadline and whether it is done. Task notes, checklists and Calendar details are not sent. A live voice session streams audio to and from OpenAI; other voice modes can send reply text to generate an AI voice. With the natural briefing voice, part of Plus, the text of your briefing, including task titles and times, is sent to OpenAI to generate speech; the device voice uses your device’s own speech and does not send the briefing to OpenAI. This is disclosed before you start. You must accept the voice-processing notice before each session. You can edit the transcript, review every proposed task or change, and choose Save or Cancel, including by an explicit spoken confirmation. Suggestions may be wrong; nothing is added or changed automatically. Ordinary manual capture remains available.

Plan4me holds recordings and transcripts temporarily on your device and in the processing request, and does not retain them on its server or deliberately log their contents. Application-held audio is discarded after processing, cancellation or leaving the voice session. Generated replies and their audio are also temporary and are discarded when the voice session closes. Only additions and changes you approve become planner data. We do not send Google Calendar events, calendar tokens, attendees or raw Calendar responses to OpenAI. Your selected appointments are used locally to find available time.

OpenAI processes the material you choose to submit under its API data controls. Extraction uses storage disabled, but that does not eliminate provider abuse-monitoring retention or infrastructure security logs. Avoid recording sensitive information. Plan4me retains account-linked request identifiers, reserved audio duration, dates and success or failure status to enforce limits and prevent duplicate processing. These records contain no audio or transcript; records older than 93 days are purged when subsequent voice requests are processed, and account deletion removes the account-linked usage records.

How information is used

We use information to provide your planner, authenticate your account, synchronize your edits, manage subscriptions, dispatch reminders you choose, send account-security and billing notices, send three short emails after you sign up (a welcome, a tip, and a note before your Plus trial ends; a link in each stops them), answer support requests, and protect service integrity. We do not sell personal data, display advertising, use planner content to train generative AI, or use behavioral advertising trackers. Application email-open and click tracking are not used.

Providers and disclosures

Supabase hosts authentication, private planner data, and server records; the Plan4me projects are in the US East region. Netlify hosts the site and server functions. Cloudflare manages the domain, DNS, and incoming support-email routing. Resend sends application and branded support messages; our currently configured sending region is Tokyo, Japan. Google supplies optional identity and Calendar services, FCM notifications, Google Play purchases, and the Gmail support inbox. Stripe handles website Checkout, subscription management, and payment records. When you start a website purchase we send Stripe your account email and an account identifier so that the subscription can be linked to your planner.

These providers process information needed for their roles and may process service logs or data in other locations according to their services and agreements. We may disclose information to comply with law, investigate abuse, protect rights or security, or fulfill an authorized transfer of the business subject to appropriate notice and Google’s Limited Use requirements. Staff access to private planner or Calendar content is limited to authorized support or security needs; we ask for consent when investigating specific content where required.

Device storage, offline use, and reminders

Your account-scoped planner and pending edits persist in browser or app storage for offline recovery. Calendar snapshots and known access status may also be cached. The sample day remains on your device. Signing out ends your session but leaves your planner copy, plan status and cached appointments on that device. On a shared device, export what you need and then clear Plan4me’s site or app storage. Installing or uninstalling an app does not cancel a subscription.

A reminder stores your chosen date, wall-clock time, IANA zone, and push or email channels. Push content may appear on a lock screen and contains the task title. Email reminders send the title to your verified account email. Enable only channels you want, and adjust your device’s notification-preview settings if task titles are private. Reminders are best effort, may be delayed, and use synchronized data. Removing a reminder or completing a task invalidates pending jobs; a message already accepted by a provider may still arrive.

Security and retention

We use account-scoped access controls, encrypted server-held connection and device tokens, restricted server credentials, and HTTPS connections. No system can guarantee perfect security.

Active planner content is removed when account deletion completes. Application-controlled operational logs and reminder delivery history are kept for up to 30 days. Records of the billing notices we send are kept while the subscription or account exists. Support correspondence is retained for up to 12 months after resolution. Minimum financial and policy-consent records are retained for seven years to support accounting and demonstrate consent; limited records may be held longer when required for a dispute, security investigation, or legal obligation. Infrastructure providers retain their own payment records, authentication logs, backups, and security records according to their applicable schedules and obligations. Deleted content may remain in backups until those schedules expire. Contact us for details relevant to a request.

Your choices and requests

Export your planner in Settings. Edit or remove planner content at any time. Manage notification devices, remove reminder channels, disconnect Calendar, or cancel renewal through the original billing provider. Request account deletion in Settings or follow the public deletion instructions. Deletion attempts to stop future billing before erasing active data; an incomplete provider operation remains pending and retryable.

Email support to request access, correction, deletion, or other rights available under applicable law. We verify ownership and respond as required by applicable law; requests may have lawful exceptions. We do not sell or share personal information for cross-context behavioral advertising, so there is no sale or advertising-sharing opt-out to exercise.

Age and policy changes

Plan4me is not directed to children. If you believe a child has provided information, contact support. We post policy updates here and notify users of material changes. New uses of Google data require updated disclosure and consent where applicable. Server-recorded policy versions identify what you accepted.