Privacy Policy

1. Who We Are

1PLANLY is provided by 1PLANLY LIMITED ("1PLANLY", "we", "us", or "our"), a New Zealand company (company number 9463419). We are the agency responsible for your personal information under the New Zealand Privacy Act 2020 and its Information Privacy Principles (IPPs).

This Privacy Policy explains what personal information we collect when you use 1PLANLY, why, who we share it with, and the rights you have.

2. Information We Collect

2.1 Information You Give Us

• Account: your name, email address and password (stored only as a secure one-way hash).
• Your planning content: tasks, TODOs, chores, notes, time logs, plans and anything else you type, say or upload into the app.
• Household: names and details of household members you add, and what you choose to share with them.
• Support: messages you send us.

2.2 Information Collected When You Use the Service

• Sign-in and security records: sign-in times, IP address, browser and device type, and an approximate location (city/region and time zone) derived from your IP address. We use these to keep accounts secure, set your time zone and show local-currency price estimates.
• Usage: which pages and features are used and for how long, and error logs, so we can fix problems and improve the Service.
• AI usage: a record of each AI request (time, feature and size) so we can apply the daily AI allowance and control costs.
• Notifications: if you turn on push notifications, a subscription token from your browser.

2.3 Payment Information

If you subscribe, payment is handled by Stripe. We receive your Stripe customer and subscription identifiers, your plan, payment status and renewal date. We never receive or store your full card number.

3. Signing In with Google

If you choose "Continue with Google", we ask Google only for your basic profile (the openid, email and profile permissions). Google then shares with us:

• your name
• your email address and whether Google has verified it
• your profile picture
• a unique Google account identifier

We use these only to create your account, sign you in, and show your name and picture in the app. We do not receive your Google password and we do not get access to your contacts, calendar, files or email through sign-in. You can remove 1PLANLY's access at any time from your Google Account's third-party connections page.

3.1 Optional Google Connections

A small number of optional tools (for example, publishing a video to YouTube or reading Gmail to suggest tasks) ask for additional Google permissions. These are only offered to accounts where the tool has been enabled, are requested separately with Google's own consent screen at the moment you choose to connect, and can be disconnected at any time. Information obtained through them is used only to provide that tool to you.

1PLANLY's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models.

4. How We Use Your Information

• To provide the Service: store your content, sync it across your devices, and share it with the household members you choose.
• To manage your account and subscription: sign-in, billing, receipts and payment-failure notices.
• To communicate with you: verification emails, reminders and digests you turn on, security alerts, and important changes to the Service, these policies or prices.
• For AI features: when you use an AI feature, the text needed for that request is sent to our AI provider to produce the result.
• To keep the Service safe and working: preventing abuse and fraud, fixing errors, and understanding which features are used.
• To meet legal obligations: such as keeping payment records for tax purposes.

Providing your name and email is necessary to have an account. Most other information is optional, but some features will not work without it.

5. Who We Share It With

We do not sell or rent your personal information, and we do not share it with advertisers. We share it only:

• With people you choose: household members and people you share notes or tasks with.
• With service providers who process it for us under contract:
  • Railway — application hosting and database (servers located outside New Zealand)
  • Stripe — payment processing (privacy policy)
  • OpenAI — AI features; content sent through OpenAI's API is not used to train their models (privacy policy)
  • Google — Google sign-in and email delivery (privacy policy)
  • ipapi.co — approximate location from your IP address
  • Your browser's push service (for example Apple, Google or Mozilla), if you turn on notifications
• When required by law: for example, in response to a valid court order or a lawful request from a New Zealand agency, or to prevent a serious threat to someone's life or health.
• If our business changes hands: to a buyer or successor, who must keep protecting it in line with this policy.

6. Storage Overseas

Several of our service providers store or process information outside New Zealand, including in the United States. Before disclosing personal information overseas we take reasonable steps (as required by IPP 12) to ensure it will be protected in a way comparable to the Privacy Act 2020 — by using established providers bound by contractual privacy and security commitments. By using the Service you acknowledge that your information will be processed in these countries.

7. How We Protect It

• Encryption in transit (HTTPS/TLS) for all connections
• Passwords stored only as salted one-way hashes
• Access to personal information limited to what is needed to run and support the Service
• Protection against cross-site request forgery and rate limiting against abuse

If a privacy breach occurs that has caused, or is likely to cause, serious harm, we will notify you and the Office of the Privacy Commissioner as soon as practicable, as the Privacy Act 2020 requires.

8. How Long We Keep It

• Your account and content: for as long as your account is open.
• When you delete your account (Settings → Delete account): your account and content are deleted straight away from our live database, and any active subscription is cancelled. Backup copies are overwritten within 30 days.
• Payment records: invoices and transaction records are kept by us and Stripe for 7 years, as New Zealand tax law requires.
• Security and error logs: kept for a limited period and then deleted.

9. Your Rights

Under the Privacy Act 2020 you can:

• Ask for access to the personal information we hold about you
• Ask us to correct information that is wrong — much of it you can edit yourself in Settings
• Delete your account and content at any time from Settings, or ask us to
• Ask for a copy of your content in a portable format
• Change your mind about optional emails, notifications and Google connections at any time

Email ask@1planly.com to make a request. We will respond within 20 working days, and there is no charge. If you are not satisfied with how we handle a privacy concern, you can complain to the Office of the Privacy Commissioner.

10. Children

Accounts are for people aged 16 or over. A parent or guardian may add information about their children to a household; they are responsible for doing so appropriately. If you believe a child under 16 has created an account, please contact us and we will delete it.

11. Cookies

We use only cookies that are needed for the Service to work (such as keeping you signed in) and to remember your settings. We do not use advertising or third-party analytics cookies. See our Cookies Policy.

12. Changes to This Policy

We may update this policy. If we make a material change to how we use your personal information, we will tell you by email or in the app before the change takes effect. The "Last updated" date at the top shows when it last changed.

13. Contact Our Privacy Officer

For questions about this policy or your personal information, contact our Privacy Officer at ask@1planly.com.