The short version: your tasks stay on your devices. Your tasks, goals and progress live on your device, and we can't read them. Plannly has no accounts, no ads and nothing that reads your content. If you choose to link your own devices, changes travel between them end-to-end encrypted, so only your devices can read them. If you let Plannly plan around your calendar, it reads only when you are busy, and that never leaves your phone. The app sends anonymous usage counts (never what you type), and you can turn that off in You → Share anonymous usage. The only third parties involved are Apple, Google and RevenueCat to process purchases, and PostHog to receive the anonymous counts.
What Plannly stores
Everything you create in Plannly — tasks, goals, milestones, completions, streaks, XP and settings — is stored locally on your device. We cannot see, read, access or recover this data. Deleting the app deletes the data, so the app lets you export a backup file that you keep wherever you like.
What Plannly does not do
- No account creation, sign-in or email collection inside the app
- No advertising and no ad networks
- No selling, sharing or monetizing of personal data
- No tracking across other apps or websites, and no advertising identifier
- No analytics that read your tasks or content
Plannly AI
Plannly AI, which turns a brain dump into tasks, runs entirely on your phone. What you type into it is read on the device and is never sent anywhere. On phones without a built-in model, turning Plannly AI on downloads the model file once; that download sends nothing about you or your tasks.
Linking your devices (optional)
You can link your own devices (for example a second phone, a computer or the Plannly Chrome extension) under You → Linked devices → Link a device (part of Plannly Pro). Nothing is shared until you do. Once linked, each change is encrypted on your device before it is sent, and only your linked devices hold the key. The changes pass through a small relay server that we run, which stores the encrypted messages for up to 30 days so a device that was offline can catch up. The relay cannot read them: it never sees a key, a task, a name, an email address or an account, because there are no accounts. Stop syncing on a device, or make a new code, at any time under You.
Planning around your calendar (optional)
If you turn on Plan around my calendar (during setup or under You → Your day), Plannly asks your phone for calendar access and reads only the start and end times of your events, so your day's plan and reminders fit around your meetings. It never reads or stores what an event is, where it is or who is in it. The busy times stay on your phone: they are not synced to your other devices, not included in backups and never sent to us or anyone else. iOS only lets apps read event times with full calendar access, which is why the system prompt asks for it; Plannly never adds, changes or deletes events. If you tap Add to Calendar on a task, Plannly opens your phone's own new-event screen filled in with that task; you choose whether to save it, and Plannly still never gets permission to write to your calendar. Turn it off in You → Your day, or remove the access in your phone's Settings, at any time.
Anonymous usage counts
To learn whether Plannly is actually helping people, the iOS and Android apps send anonymous usage counts to PostHog. In App Store terms this is Usage Data (product interaction), used only for analytics, not linked to your identity and not used for tracking.
What is sent:
- The name of an event from a fixed list, such as: the app was opened today, an onboarding step was shown or finished, tasks were added (how many, and whether by typing, brain dump or voice), a task was completed, set aside for today or brought back, the All tasks panel or the fine-tune options were opened, low-energy mode was switched, a set of three was finished, the streak moment was shown, and the upgrade screen was shown or a purchase went through.
- A few fixed values with those events: numbers (counts, the streak length, a position in today's three, minutes since the app was opened), fixed choices (swipe or tap, a built-in category such as "health", or simply "custom"), whether you use the dark, light or automatic theme, and which stage of the app you have reached.
- The app version and the phone's operating system and version, plus a random identifier for this install that is not linked to you, your device ID or any account. Deleting the app resets it.
What is never sent: task titles, notes, goal names, brain dumps, your name, category names you made up, anything else you type, your contacts, your location, your device name or model, your language or time zone, screen recordings, or your advertising identifier. PostHog is set to discard IP addresses and keeps no profile of you.
Turning it off: open Plannly, go to You → Share anonymous usage and switch it off. It takes effect immediately, and nothing more is sent until you switch it back on.
Purchases
Plannly Pro is a one-time in-app purchase processed entirely by the App Store (Apple) or Google Play (Google) — Plannly never sees your payment details. To validate the purchase and restore it across reinstalls, Plannly uses RevenueCat, which receives an anonymous app-install identifier and your purchase status. No task content is ever sent.
Support codes
If you contact support, you may choose to include a support code: tapping You → Contact support opens an email to us with the code already filled in. It contains diagnostic information such as app version and settings, never your tasks. It is shared only if you decide to send that email.
Children
Plannly is not directed at children under 13 and does not knowingly collect personal information from anyone, including children.
Changes
If this policy changes, the updated version will be posted at this address with a new date. Material changes will be noted in the app's release notes.
Contact
Questions about privacy? Email [email protected].