Privacy & Data

Cloud accounts: Firebase Firestore in Google Cloud's europe-west region (Belgium). Local-only (no account): your browser's localStorage on your device. No third-party analytics brokers, no ad networks, no CRM tools. Google Analytics is the only third-party tool we use, and it's configured to anonymize IPs.

In transit: TLS 1.3 everywhere (standard HTTPS). At rest: Firebase encrypts all data with Google-managed keys. End-to-end encryption (where we couldn't read it even if we wanted to) isn't in place yet — doable, but it breaks server-side search and some sync features. On the roadmap for sensitive fields like journal text.

No. Your journal, finances, health entries, and trips are never used to train AI models — ours or anyone else's. We don't run an LLM over your data for 'insights' or 'summaries' either. If we ever add AI features, they'll be explicitly opt-in with clear disclosure.

Yes — we're based in Norway (EEA), host in Belgium, and meet GDPR requirements: right to access (Export Data), right to erasure (Delete Account), clear lawful basis, minimal data collection, and a published privacy policy at /privacy. For DPO requests, email privacy@lifeplanr.app.

Yes — without an account, no personal info is collected. Everything stays in your browser's localStorage. With an account, we only need an email; you can skip every other profile field including name, birth date (calendar still works with a placeholder), and photo.

Profile → Delete Account clears all cloud data within 30 days. For local browser data, clear your browser's site storage (Settings → Privacy → Clear Data → lifeplanr.app). If you had Pro, cancellation stops billing immediately but you can still Delete Account afterward. Deletion is irreversible.

If you have a cloud account: photos are uploaded to Firebase Storage (Google Cloud, Belgium region). Encrypted in transit + at rest. Only you can see them. If you use Lifeplanr without an account: photos stay in your browser localStorage and never leave your device.

No. We don't sell or share aggregated, anonymized, or any other form of user data. Our business model is user subscriptions ($4.90/mo or $39/yr), not data brokerage. We have no analytics partners with PII access — only Google Analytics with anonymized IPs for traffic shape.

Firebase (Google Cloud) for storage + auth. Stripe for payments (we never see your card). Resend for transactional emails. Google Analytics for traffic (anonymized IPs). That's the full list. All are GDPR-compliant data processors with signed DPAs.

On Delete Account: cloud Firestore data is deleted within 24 hours. Photo storage purges within 7 days. Cloud backups (we keep rolling 30-day backups for accidental-deletion recovery) are purged at day 30. After 30 days, all your data is unrecoverable. We email you a confirmation when the final purge completes.