Privacy Policy

What we collect

Without an account (default): all your data stays in your browser's local storage. Nothing is sent to any server. We have no access to your financial inputs or projections.

With an account: if you choose to create an account, we store:

Your email address (for authentication)
Your planner configuration (people, pots, income streams, lump sums, and market assumptions) as a JSON object
A timestamp of when the configuration was last saved

We do not store your projections, chart data, or Monte Carlo results — those are computed in your browser each time you load the page.

Where data is stored

Account data is stored in Supabase, a hosted PostgreSQL database. Data is encrypted in transit (TLS) and at rest. Supabase's infrastructure runs on AWS in the EU (Frankfurt) or US depending on project configuration.

How we use your data

Your data is used solely to restore your planner configuration when you sign in. We do not:

Sell or share your data with third parties
Use your data for marketing or advertising
Analyse your financial inputs for any purpose
Use tracking cookies, analytics pixels, or fingerprinting

Your rights (GDPR)

You have the right to:

Access your data — your full configuration is visible in the planner UI at all times
Export your data — your browser's local storage contains the complete JSON (inspect via Developer Tools → Application → Local Storage)
Delete your data — use the "Reset to defaults" button to clear local storage; to delete your account and all cloud data, email us at the address below
Withdraw consent — sign out at any time; your cloud data remains until you request deletion

Cookies and local storage

This site does not use cookies. It uses browser local storage to persist your planner configuration between sessions. Local storage is not sent to any server and is only accessible to this site on your device.

If you create an account, Supabase stores an authentication token in local storage to keep you signed in.

Third-party services

Supabase (authentication and data storage) — privacy policy
Google Fonts (if the design branch is used) — privacy policy. Font requests include your IP address.
jsDelivr CDN (serves Chart.js and Supabase client library) — privacy policy

Contact

To request data deletion or ask questions about this policy, email: [your-email@example.com]

Last updated: April 2026