Privacy Policy

1. Who we are

Adaptive Cogito LLC ("we", "us", "our") provides the Planner app, as a web app and as a mobile app. We are the controller of the personal data described in this policy: we decide why and how it is processed. This policy explains what we collect, why, who receives it, how long we keep it, and what you can do about it.

2. Data we collect

Data you give us:

• Account data: your name and email address, and your password. The password is never stored as such, only as a salted Argon2id hash.
• Account settings: your preferred language, your colour theme and whether reminders are switched on.
• Your planner content: calendar entries (title, description, date and time, type, repeat rule, links and completion state), notes and their groups, to-do lists and their items, journal entries (date, mood, text, links) and the position, size and colour of the cards and stickers on your boards.
• Images and drawings you attach to entries, journal entries and stickers, and their file names. You can only upload images (PNG, JPEG, WebP or GIF) of up to 10 MB each.

Data created while you use the App:

• Session data: when you log in the server creates a session. It is valid for 30 days or until you log out. The session token is kept in the local storage of your browser in the web app (and in secure storage on your device in the mobile app).
• Audit log: for every action that changes data (creating or editing an entry, logging in, changing a setting, and so on) we record who did it, when, which kind of action it was, the affected record before and after the change, the request that was sent (with passwords removed) and whether it succeeded. You can see your account's audit log in the App. We do not record your IP address or device information in the audit log.
• Technical logs: the servers and cloud services that run the App may keep standard technical and security logs (for example request time and IP address) for a limited period.
• Information that stays on your device: your session, your cached language and colour theme. In the web app this is kept in the local storage of your browser. It is not sent to us as separate data. The web app does not use cookies.

What we do not collect: Planner contains no artificial intelligence features and we do not send your content to any AI service. We do not use advertising, analytics or crash-reporting services in the App, we do not track you across other apps or websites, and we do not access your location or contacts. We do not sell your personal data.

3. Device and browser permissions

• Files and photos: the App uses the system or browser file picker when you add an image, so it only receives the files you select. It does not get access to your whole gallery or your files.
• Drawings are made inside the App and need no permission.
• Notifications (mobile app): only if you switch reminders on and allow them in your device settings.

You can withdraw any permission at any time in the settings of your device or browser. The related feature then stops working, the rest of the App keeps working.

4. Why we use your data

• To create and secure your account, log you in, and send you confirmation and password-reset codes by email.
• To store, show and organise your entries, notes, to-do lists, journal and images, and to keep them in sync between your devices.
• To keep an audit trail of changes to your account, to detect and prevent abuse, and to keep the service secure and working.
• To answer your questions, to comply with legal obligations and to establish or defend legal claims.

Where the EU/UK GDPR or similar laws apply, our legal bases are: performing our contract with you (running your account and the features you use), our legitimate interests (security, abuse prevention, the audit log and improving reliability), your consent (device permissions such as notifications) and legal obligations.

5. Who receives your data

We share data only with service providers that process it for us, and only as far as needed:

• Cloud infrastructure (Amazon Web Services): runs the backend API and its database, and stores your images and drawings in private cloud storage. Files are stored under randomly generated names and are only handed out to you through short-lived links.
• Email delivery: your email address and the confirmation or reset code are passed to the email delivery service we use to send you that message.
• Hosting of the web app (Cloudflare): serves the web app files to your browser. It does not receive your planner content.

Your planner content is private to your account: other users of the App cannot see it.

We may also disclose data if the law or a valid legal request requires it, to protect our rights and the safety of users, or to a successor if the business is transferred. We will keep this to what is necessary.

6. International transfers

Our API and storage run on AWS in the us-east-2 (Ohio, United States) region, so your data is processed in the United States. Where the law requires it, transfers from the EU, the UK or other regions rely on safeguards such as adequacy decisions or standard contractual clauses.

7. How long we keep your data

• We keep your data for as long as your account exists.
• When you delete an entry, note, to-do list, journal entry or image it disappears from the App immediately. A deleted image file is removed from cloud storage together with it.
• Sessions expire after 30 days or when you log out. Password-reset codes expire after a limited time.
• Technical logs are kept for a limited period and then deleted.

8. Deleting your account and data

Open Account in the App, choose "Delete account", enter your password and confirm. This is immediate and cannot be undone. All your sessions stop working at once.

• We erase your user and the whole account: calendar entries, notes and groups, to-do lists, journal entries, stickers, settings and the audit log. Your images and drawings are also removed from cloud storage.

Copies in backups, if any are kept, and in technical logs are removed when they expire. If you cannot use the App, contact us and we will help you delete your data.

9. Security

We protect your data with measures such as: password hashing with Argon2id, encrypted connections (HTTPS) between the App and the server in production, private cloud storage for your images, and access rules that limit each request to the data of the logged-in account. No system is completely secure, so we cannot guarantee absolute security. Choose a strong, unique password.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct inaccurate data (you can edit your name, account settings and content in the App);
• delete your data (see the previous section);
• restrict or object to certain processing, including processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent you have given, without affecting what was done before;
• complain to your local data protection authority.

To use a right that you cannot use inside the App, contact Adaptive Cogito LLC using the support contact shown on the App's store page. We may need to confirm your identity first. We do not sell or share personal information for advertising, and we do not make decisions about you based only on automated processing that have legal or similarly significant effects on you.

11. Children

The App is not intended for children under 16. We do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy when the App or the law changes, for example if we add a new service provider or a new kind of data. The date at the top shows when it was last updated. If a change is material we will tell you in the App before it takes effect.

13. Contact

For any question about this policy or your data, contact Adaptive Cogito LLC using the support contact shown on the App's store page.