Privacy Policy

Plancove is built to store the minimum needed to run your family's plan. This policy explains what we collect, how we use it, who we share it with, and the choices you have.

1. Information we collect

• Account details — your email address and display name.
• Family information — your household name and the children you add (first names, ages, and colour tags), plus any co-parents or caregivers you invite.
• Captured content — the school messages you choose to share with Plancove and the plan items extracted from them. When you share a screenshot, photo or PDF, the app reads the text on your device and sends only that text to us — the image or PDF itself never leaves your iPhone. When you share a link, your iPhone fetches that page directly from the website it points to so its text can be read; that request goes to the site you shared, not through us.
• Forwarded email — if you use your family's Plancove forwarding address, we receive and store the full message: the sender's address, the subject, the body, and any attachments.
• Notification tokens — if you turn on notifications, we store the notification token Apple issues for your device so we can send you alerts. It is deleted when you delete your account.
• Calendar and Reminders entries you ask us to create — if you give Plancove permission, saving a plan item writes it into your iPhone's Calendar or Reminders. It goes into your default calendar or reminders list, which for many people is an iCloud, Google or Exchange account — so the entry, including its title and the child it concerns, is then held by whoever runs that account. We do not choose that destination and we cannot see what happens to it afterwards. You can turn this off, or change the destination, in your iPhone's settings.
• Subscription status — whether you have an active Plancove Plus entitlement, together with the transaction identifier and renewal dates Apple gives us. Billing is handled by Apple; we never receive your card details.
• Product usage counts — counts and timestamps in our own database (for example, how many items an extraction proposed and how many you kept). No message content, and no third-party analytics service is involved.
• Diagnostic data — the app records crash, hang and launch diagnostics using Apple's MetricKit. This stays on your device: it is written to the app's own storage and the system log, and is never transmitted to us or to anyone else.
• Website analytics — cookieless, privacy-friendly page metrics on this website. No third-party advertising or tracking cookies.

2. How we use your information

We use your information to provide the service: to extract and organize your plan, sync it across your devices and your household, manage your subscription entitlement, and respond to support requests. We do not sell your data, and we do not use it for advertising.

3. AI processing

When you capture a message, its text is sent to Anthropic's Claude API so it can be turned into plan items. Email forwarded to your family's Plancove address is handled the same way, and its attachments are sent to Anthropic as files so their contents can be read. A short first pass also asks Claude whether an incoming email looks like a school message at all. This content is used only to provide that extraction — it is not used to train AI models.

4. Where your data is stored

Your data is stored with Supabase (a managed PostgreSQL platform) and protected by row-level security, so only members of your household can read it. It is hosted in Supabase's US East region (N. Virginia, United States). Email you forward to your Plancove address passes through Cloudflare's email routing network on its way to us, and this website is served from Vercel's global network.

5. Service providers

We share data only with the providers that make the service work:

• Supabase — our database (including the attachments of any email you forward, stored as part of the message record), authentication, and our API.
• Anthropic — AI extraction of captured messages and forwarded email.
• Apple — App Store subscriptions and billing, Sign in with Apple, and push notification delivery through APNs.
• Cloudflare — our domain registration and DNS, and the inbound email route that receives mail sent to your family's Plancove address.
• Resend — outbound email: sign-in codes, password resets, and co-parent invitations.
• Google — only if you choose “Sign in with Google”.
• Vercel — website hosting and cookieless page analytics.

These providers process data on our behalf under written data-processing terms, and are not permitted to use it for their own purposes.

Email forwarded to your Plancove address may contain content written by people other than you — your school, a club, another parent. We process it only to build your family's plan, and we do not contact those senders.

Your own calendar and reminders provider. If you let Plancove write plan items to your iPhone's Calendar or Reminders, the entry — its title, its date, and the child it names — is handed to whichever account holds your default calendar or reminders list. That is commonly iCloud, Google or a school or work Exchange account. Those providers are not acting for us and we hold no data-processing agreement with them on your behalf: this is your own account, and once the entry is written it is governed by that provider's terms and privacy policy, not ours. Deleting a plan item in Plancove removes the entry we created; anything you or someone else has since copied elsewhere is beyond our reach. You can decline or withdraw calendar and reminders access at any time in your iPhone's settings, and Plancove will keep the item in the app only.

The Plancove app contains no third-party advertising, attribution or analytics software.

6. Children's information

Plancove is designed for parents and caregivers, not for children. Plancove is not directed to children, and we do not knowingly collect personal information directly from a child. Accounts are for adults: you must be at least 16, or the age of digital consent where you live, to create one. The details about a child in the app — a first name, an age, and a colour tag — are entered by an adult account holder about their own family, and are visible only to the members of that family. Children do not sign in and never interact with the app themselves. If you believe a child has created an account, email us at hello@plancove.app and we will delete it.

7. Your choices and rights

• Access & export — you can export your family data from Settings at any time.
• Deletion — deleting your account in Settings permanently removes your data. Families you solely own are deleted; shared families transfer ownership to another member.
• Requests — you can contact us to exercise any data rights available to you under applicable law.

8. Data retention

We keep your data for as long as your account is active.

Delete all family data (Settings) removes every child, captured message, plan item and edit-history entry from your family. It is deliberately narrower than deleting your account, and these survive it: your account and your family itself, the co-parents you invited, your subscription and your remaining free-extraction allowance, your family's forwarding address and its list of trusted senders, the stored copies of email already forwarded to that address — including the full message body and any attachments — and the usage counts described in §1. To remove those as well, delete your account.

Deleting your account (Settings) removes your sign-in identity and your membership of every family. If you are the only member of a family, that family is deleted along with everything in it — children, messages, plans, forwarded-email records, your family's forwarding address, trusted senders, notification tokens and usage counts. If you share a family with a co-parent, ownership passes to another member of that family — the longest-standing one who has full access, or, if nobody does, simply the longest-standing member — and that family's data stays with them.

After a deletion, residual copies may persist briefly in our providers' routine encrypted backups before they are overwritten. We may also keep limited records where the law requires it, for example for tax purposes.

9. Cookies

Our website does not use tracking or advertising cookies. Analytics are cookieless and do not identify you personally.

10. International transfers

Plancove is operated from Hungary, and your data is stored in the United States. If you are in the EEA, the UK or Switzerland, your personal data is therefore transferred outside your country. We rely on the standard contractual clauses — or an equivalent safeguard — in the data-processing agreement we hold with each of the providers listed in §5.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or on this page, with the “last updated” date revised accordingly.

12. Contact

The controller of your personal data is SteerScale Consulting Ltd.. Questions or data requests? Email us at hello@plancove.app.