Privacy Policy

1. What we collect

• Account details: your name, email address and password (stored only as a secure hash by our authentication provider).
• If you sign in with Google: your name, email address, profile photo and Google account ID, which Google shares with your permission. We never see your Google password and get no access to your Gmail, Drive, contacts or any other Google data.
• Profile settings you choose to add: display name, job title, avatar, timezone, language and notification preferences.
• Subscription data you enter: service names, prices, currencies, billing cycles, renewal dates, notes, reminder settings and status.
• Billing information: if you upgrade, we store your plan, subscription status, billing period, amounts paid and the Polar customer and subscription identifiers. Card details are collected and held by Polar and its payment processor, never by us.
• Email records: which reminder emails were sent to you and whether delivery succeeded.
• Sign-up source: which website or campaign link brought you to us (for example X, LinkedIn, Facebook, Instagram or a search engine) and the first page you visited, recorded when you create your account.
• Technical data: IP address, browser and device information, and request logs created by our hosting provider for security and troubleshooting.

2. How we use it

• To provide the service: store your subscriptions, show your calendar and spend, and send the renewal reminders you set up (performance of our contract with you).
• To manage your plan and payments with Polar (contract, and legal obligations for tax and accounting records).
• To send account emails such as sign-up confirmation, password reset and important service or billing notices (contract).
• To keep the service secure, prevent abuse and fix problems (legitimate interests).
• To understand which websites and campaigns bring new users, so we know where to focus our marketing (legitimate interests).

We don't sell your personal data, share it with advertisers, or use it to train AI models.

Information from Google sign-in is used only to create your account, sign you in, and show your name and photo in KeepMyPlans. KeepMyPlans's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

3. Who we share it with

We use a small number of providers that process data on our behalf under data protection terms:

• Supabase - database and authentication.
• Google - optional "Continue with Google" sign-in.
• Vercel - application hosting.
• Resend - sending account and reminder emails.
• Polar (with its payment processor Stripe) - checkout, payments, invoices and sales tax, as our Merchant of Record.

We may also disclose data if required by law, or to protect our rights and users' safety.

4. Cookies and local storage

We use cookies that are needed to keep you signed in securely. We also set one first-party cookie that remembers which website or campaign link brought you here, for up to 30 days, so we can credit your sign-up to it; it isn't shared with anyone and is removed when you create your account. Your theme choice (light or dark) is saved in your browser's local storage. We don't use advertising or third-party analytics cookies.

5. How long we keep it

We keep your data while your account is open. If you ask us to delete your account, we delete your personal data within 30 days, except records we must keep by law (such as payment and tax records held by us or Polar). Deleted subscriptions are hidden immediately and removed with your account.

6. Your rights and choices

• Access, correct or update your profile in Settings at any time.
• Remove our access to your Google account at any time from your Google Account permissions (https://myaccount.google.com/permissions). Data we already received is kept with your account until you ask us to delete it.
• Export your subscriptions as a CSV file from the Subscriptions page.
• Ask for a copy of your data, deletion of your account, or restriction of processing by emailing support@keepmyplans.com.
• Turn off renewal reminder emails in Settings → Notifications, or with the unsubscribe link in any reminder. Essential account and billing emails are still sent.
• Complain to your local data protection authority if you think we've handled your data incorrectly.

7. Security and transfers

Data is encrypted in transit, access to your records is restricted to your own account by database-level security rules, and only authorised staff can access production systems. Our providers may process data outside your country; where they do, they use recognised safeguards such as standard contractual clauses.

8. Children

KeepMyPlans is not intended for anyone under 16, and we don't knowingly collect their data.

9. Changes and contact

We'll post updates here and email you about material changes. For any privacy question or request, contact support@keepmyplans.com.