Privacy Policy

1. Who is responsible for your data

The data controller for WeeklyPlanner.app (weeklyplanner.app) is:

Operator: WeeklyPlanner.app
Jurisdiction: Romania
Email: support@weeklyplanner.app

You can contact support@weeklyplanner.app for any privacy question or to exercise your GDPR rights.

2. What data we collect, why, and on what legal basis

Providing an email address and password is required to create an account. All planner entries and settings are optional. Because your planner fields accept free-form text, please avoid storing sensitive personal data of third parties or critical secrets (such as raw passwords, seed phrases, or financial keys) inside your task notes.

3. What we explicitly do NOT collect or do

• No payment card details: We never see, touch, or store your credit card number, bank account details, or billing street address. All checkout and payment data is handled exclusively by Lemon Squeezy as Merchant of Record.
• No analytics or behavioral tracking: We do not run Google Analytics, PostHog, Mixpanel, hotjars, session recorders, or clickstream trackers.
• No advertising or data brokering: No ad networks, social media pixels, cross-site tracking cookies, or browser fingerprinting. We never sell, rent, or trade user data.
• No AI training: Your tasks, notes, reflections, and habits are never used to train or fine-tune artificial intelligence or machine learning models.
• No hardware sensor access: Our server explicitly sends a strict Permissions-Policy: camera=(), microphone=(), geolocation=(), interest-cohort=() header blocking access to your camera, microphone, GPS location, and browser ad-cohort APIs.
• No automated decision-making or profiling producing legal or similarly significant effects under GDPR Art. 22.

4. Subprocessors and service providers

We rely on a small number of providers to run the Service. Convex, Netlify, Resend and Dynadot act as data processors on our behalf under data processing terms; Lemon Squeezy acts as an independent data controller (Merchant of Record) when you purchase a Pro plan.

When you choose to upgrade to Pro, your purchase contract is with Lemon Squeezy under their own Privacy Policy. To match your purchase to your planner account, we pass Lemon Squeezy your internal user_id along with your account name and email to pre-fill the checkout form. Lemon Squeezy's checkout script (assets.lemonsqueezy.com/lemon.js) is loaded on demand only when you click to start a purchase—never during normal use of the planner.

We may also disclose data only if strictly required to do so by applicable law or valid legal process, or to defend against legal claims.

5. International data transfers

Your account and planner data is stored in our Convex database, which is hosted in the European Union (Ireland). The providers listed above are nevertheless headquartered in the United States, and some processing takes place there: Netlify may run the code that renders pages and relays sign-in requests on servers in the United States, account emails pass through Resend, and support emails are held in the Dynadot mailbox. Personal data may therefore be processed outside the European Economic Area (EEA). Such transfers are safeguarded under the EU–US Data Privacy Framework (DPF) where the provider is certified, and otherwise by the European Commission's Standard Contractual Clauses (SCCs, Art. 46 GDPR). You can ask us for a copy of the relevant safeguards at support@weeklyplanner.app.

6. Data retention and immediate account deletion

• Account and planner data: Retained for as long as you keep your account open.
• Immediate erasure when you delete your account: When you use Settings → Data & Export → Delete Account (confirming your email and password), our server executes an atomic deletion hook before removing your user record. Every document linked to your userId across all seven database tables (settings, days, entries, habits, habitLogs, templates, and subscriptions), along with your authentication credentials and active sessions, is erased from our live database immediately.
• Encrypted provider backups: Residual copies in automated infrastructure backups are overwritten automatically on our database provider's standard rolling backup window.
• Session records: Kept until you sign out, delete your account, or the session token expires (up to 30 days).
• Password-reset links: A reset link is valid for 1 hour and can be used once. Our email provider keeps a delivery log of each account email for a limited period for troubleshooting.
• Billing and tax invoices: If you purchased Pro, Lemon Squeezy retains order and tax invoice records for the statutory period required by tax and accounting laws.
• Support correspondence: Emails sent to support@weeklyplanner.app are retained for up to 24 months after the inquiry is resolved.

7. Cookies and local browser storage

We use only strictly necessary first-party cookies required to authenticate your session and render your chosen visual theme. Under Art. 5(3) of the ePrivacy Directive, strictly necessary cookies do not require a consent banner.

All web fonts are self-hosted directly from our own domain (font-src 'self')—we do not load fonts from Google Fonts or third-party CDNs. Authenticated application and API responses are served with Cache-Control: private, no-store.

8. Encryption and technical security measures

We protect your planner data using defence-in-depth technical measures:

• Encryption in transit: All connections use HTTPS/TLS enforced with HTTP Strict Transport Security (Strict-Transport-Security: max-age=63072000; includeSubDomains) and encrypted WebSockets (wss://) for real-time sync.
• Encryption at rest & row isolation: Database storage and backups are encrypted at rest by our database provider (Convex). Every server query, mutation, and action verifies your authenticated user token (requireUserId) so your rows are strictly isolated from all other accounts. (Note: data is encrypted in transit and at rest on the server rather than client-side end-to-end encrypted, allowing server-side queries, exports, and multi-device sync to function).
• Password hashing: Passwords are never stored or logged in plaintext; they are salted and cryptographically hashed before storage.
• HTTP security headers & webhook verification: Responses are hardened with a strict Content-Security-Policy, X-Frame-Options: DENY, X-Content-Type-Options: nosniff, and Referrer-Policy: strict-origin-when-cross-origin. Incoming billing webhooks from Lemon Squeezy are verified in constant time using HMAC-SHA256 cryptographic signatures.

If a personal data breach ever poses a risk to your rights and freedoms, we will notify the competent supervisory authority and affected users in accordance with Articles 33 and 34 of the GDPR.

9. Your GDPR rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data and receive a copy of it (Art. 15);
• Rectify inaccurate or incomplete personal data (Art. 16);
• Erase your personal data ("right to be forgotten", Art. 17);
• Restrict processing or object to processing based on legitimate interests (Arts. 18 & 21);
• Data portability: receive your data in a structured, commonly used, machine-readable format (Art. 20).

You can exercise your core rights yourself at any time inside the app: Settings → Data & Export lets you download all of your data as JSON or CSV and permanently delete your account, while Settings → Account lets you update your profile name and password. For any other request, email support@weeklyplanner.app. We respond within 30 days at no charge.

You also have the right to lodge a complaint with your national data protection authority. In Romania, the supervisory authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, dataprotection.ro). We encourage you to contact us first so we can address your concern directly.

10. Children's privacy

The Service is not directed at children under 16. You must be at least 16 years old to create an account. If we learn that an account has been created by a child under 16, we will promptly delete the account and all associated data.

11. Changes to this Privacy Policy

When we update this Privacy Policy, we will revise the "Effective" date at the top of this page. If we make material changes to how we process your personal data, we will notify you in advance by email or via a notice in the application.