What Plan90 keeps, and why.
Last updated 25 October 2026.
Plan90 is a small app with a simple deal: we keep what your plan needs and nothing else, and you can take it all away in two taps. This page says exactly what that is: what we collect, how, what for, who helps, how long we keep it, and how to get rid of it.
What we collect
- Your account: the email address you sign up with (or the one Apple or Google gives us when you sign in with them), the name you choose to give, and your time zone, so a day starts and ends when it does for you.
- Your plan: the goals you set, your answers to the planning questions, the plan written from them, the tasks you add yourself, what you mark done, moved, skipped, or missed each day, the reasons you give for skipping, and the reason you pick if you start over and choose to give one.
- Your subscription: whether it is active, which plan, its dates, and Apple's identifier for the purchase. Apple handles the payment; we never see your card.
- Reminders: if you allow notifications, the device token that lets us send them.
- How you use the app: which screens open, when the app opens, and moments like a purchase started or a day finished. These carry no names, no goal text, and no message content.
- The feedback board: the ideas and problems you post, and the votes you cast.
- Email delivery: for each email we send, whether it was delivered, bounced, opened, or a link in it was clicked, as reported by our email provider.
- The beta list (the waitlist before launch): your email address, an optional line about what you'd like to try, and a hashed form of your network address that limits how often one address can sign up.
- The website: page views measured by Cloudflare Web Analytics, which sets no cookies and identifies no one.
How we collect it
- Most of it you type or tap. The app sends it to our server over an encrypted connection.
- Apple tells us about your subscription and its renewals. Our email provider tells us what happened to each email.
- If you sign in with Apple or Google, they tell us your email address and, the first time, your name. We never see a password from them, and when you delete your account we tell Apple to forget the sign-in.
- On the website, the country your connection comes from, as Cloudflare reports it, chooses the currency prices are shown in. It is read for that page and not stored.
- Nothing is collected from other apps, your contacts, your location, your photos, or your health data.
What we do with it
- Write and run your plan, and show you your own progress.
- Send the emails you ask for: sign-up and password codes, a welcome, a note when your plan is ready, weekly and monthly notes about your sprint, tips in the first weeks and a nudge when you have been away, and an update when something you posted changes. The notes and the tips each have a switch in Profile, and every one of those emails has an unsubscribe link.
- Write to you about your account: when finishing a sprint gives you a lifeline back, when we add or take away lifelines, and when we give you days of Plan90 at no cost. These come whatever your switches say.
- Send notifications about your plan, if you allowed them: a short plan for the day, a nudge when it would help, a word when a week goes well, and now and then a short note from us. The plan comes when you usually start your day, and each kind has its own switch in Profile.
- Understand what people use, so the app gets better: the usage events above, counted, never read one by one.
- Keep the service working: limits on sign-ups and codes, and spotting abuse.
- Your goals and answers are sent to an AI model to write your plan, to word your notifications, and to check the reasons you give for skipping a task. We send only what the plan needs, never your email address or name, and neither we nor the providers use your data to train models.
Who helps us run it
- Supabase hosts our database and handles sign-in. Resend delivers our emails. OpenRouter routes our AI requests to the model providers behind it. Apple handles purchases and delivers notifications, and Apple and Google sign you in when you choose to. Cloudflare hosts the website and measures its visits.
- Each of them sees only what its job requires, under terms that oblige it to protect your data at least as well as we do. We do not sell your data, share it for advertising, or give it to anyone else.
What we don't do
- No advertising, no advertising or tracking software in the app, no selling or renting of your data, and no profiling you across other apps or sites.
How long we keep it
- Your account, your plan, your posts, and the email delivery records: for as long as your account exists.
- Usage events: up to a year, then deleted.
- The beta list: until you unsubscribe, which every email to the list lets you do in one tap.
Your choices
- Delete your account from the Profile tab. It takes effect at once: your sign-in record is removed, and your plan, posts, and events are detached from anything that identifies you.
- Change your name, time zone, and reminder time in the app. Switch the notes, the tips, and each kind of notification off in Profile. Turn notifications off in your phone's Settings.
- Ask us for a copy of your data, or to erase it entirely, through the contact page. We answer within a month, usually much sooner.
- The plan cannot be written without the AI step, so withdrawing consent for it means deleting your account.
Children
- Plan90 is not intended for anyone under 13, and we do not knowingly keep their data. If you believe a child has an account, write to us and we will remove it.
Changes
- When this page changes, the date at the top changes with it. A change that matters gets an email, if you have emails from us switched on.
Questions
If anything here is unclear, write to us through the contact page and a person will answer.