Effective 25 February 2025 · Last updated 23 September 2026
This Privacy Policy explains what personal information Planscope collects, why we process it, the lawful bases we rely on, how long we keep it and what rights you have.
Planscope is provided by Everyday Arc Ltd, a company registered in England and Wales under company number 17064023, trading as Planscope. We are the data controller for the personal information described here. You can reach us at support@planscope.app.
Planscope is a planning service. You write down what is on your mind, and we help turn it into a manageable plan. Some of what you write may be personal, particularly on a difficult day. We therefore collect and keep as little of it as we reasonably can, and explain below what happens to the information we do process.
Your account
When you use Planscope
Shared plans
Mood and context
Planscope does not diagnose or infer medical or mental health conditions. We do not classify you as anxious, burned out, depressed or anything similar, and we do not build a health profile of you.
Notifications
Optional voice input on Android
Payment information
Usage and device information. IP address, browser type and version, operating system, the features you use, and the time and date of your visits. On mobile, device type, device identifiers, operating system version and app installation source.
Technical failure information. If Planscope cannot render its recovery screen normally, it may send a root-render-failure event and a framework-generated diagnostic digest to our server log. This report does not include the error message, stack trace, your plan content or your account ID.
Analytics. We use Vercel Web Analytics to understand how Planscope is used and to improve reliability and features. It does not use cookies and does not store an identifier on your device. Visitors are identified by a hash generated from the incoming request, and Vercel discards a visitor session after 24 hours. Each data point may include the time, the page path, the referring site, filtered query parameters, approximate location derived from the request, and your browser, device type and operating system.
We redact page addresses before they are sent, so identifiers that appear in a web address do not reach our analytics provider. Custom events carry no free text: mood check-ins are recorded without the mood value, so our analytics never receives your emotional state. We do not use analytics for advertising, and we do not use heatmaps, session recordings or tracking across other websites.
If you sign in with Google or Apple, we receive your email address and basic profile information. We receive subscription and payment information from Stripe, Apple, Google Play and RevenueCat.
Under UK data protection law we must have a lawful basis for each thing we do with your personal information. These are the bases we rely on.
| What we do | Lawful basis |
|---|---|
| Create and maintain your account, generate and store your plans and tasks, provide shared plans, and manage subscriptions and payments | Performance of our contract with you. |
| Keep Planscope secure, prevent fraud and abuse, debug faults, and understand how the Service is used so we can improve it | Our legitimate interests in running a secure and functioning service. |
| Send optional notifications and reminders | Your consent. You can withdraw it at any time by changing your notification settings or device permissions. |
| Transcribe optional Android voice input when you request it | Performance of our contract with you. Android also asks for microphone permission, which you can deny or withdraw. |
| Use patterns from your existing plans to tailor future plans | Our legitimate interests in making Planscope's planning recommendations more useful to you. You can switch this off in Settings. |
| Keep accounting, tax and other records we are legally required to keep | Legal obligation. |
| Check what you write for signs of serious harm, and show support information instead of a plan when we find them | Our legitimate interests in the safety of the people who use Planscope. See section 4.2. |
Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights, and you can object at any time using the contact details below.
We do not sell your personal information. We do not use your content to train artificial intelligence models. Under our arrangements with Anthropic, information sent through its API is not used to train its models. Anthropic may hold a temporary copy of that information for a limited period for its own operational and abuse-monitoring purposes, in accordance with those arrangements.
Planscope can use patterns from your own finished plans to make future plans fit you better, for example by noticing that you tend to complete fewer tasks than a full week allows.
This works out the pattern at the moment your plan is generated, using only plans already in your account, and uses only counts and categories. Your brain dump text and task titles are never used. Nothing is created or stored: the pattern exists only for as long as it takes to build that one plan, and is then discarded. It is never shared, never combined with other people's information, and never used to train any model.
Learning from your own plans is on by default. You can turn it off at any time in Settings, and the change applies to your next plan.
Planscope checks what you write for signs that you may be at risk of serious harm to yourself or someone else. This happens in two places: a check on the words themselves before anything is sent anywhere, and a check by the model that generates your plan.
If either check is triggered, Planscope shows support information, including a link to a directory of helplines, instead of a plan. Nothing is stored when this happens. No plan is created, the text you wrote is not saved, and no record of the check is kept. Nobody at Everyday Arc is alerted, and no human reads what you wrote.
Planscope is not a crisis service and does not monitor you. This check exists so that the Service does not respond to a difficult moment with a task list.
We use appropriate technical and organisational measures designed to protect your personal information, including encryption in transit, access controls, secure authentication provided by Firebase, and measures provided by our hosting and infrastructure providers. Payment card details are handled by our payment providers and never stored by us.
No system can guarantee absolute security, and we cannot promise that a breach will never happen.
If a personal data breach occurs, we will assess it and make any notifications required by data protection law. Where a breach is likely to result in a high risk to your rights and freedoms, we will tell you without undue delay.
| Information | How long we keep it |
|---|---|
| Your brain dump text | Not retained. Discarded once your plan is generated. |
| Account, plans, tasks, reflections and mood records | While your account is active, then deleted when you delete your account, subject to the backup period below. |
| Billing and transaction records | As long as necessary for accounting, tax and legal obligations. |
| Support correspondence | Up to 12 months, unless a longer period is necessary for an unresolved dispute, a legal obligation or a security matter. |
| Backups | Up to 90 days, after which they are overwritten or deleted in the normal backup cycle. |
| Brain-dump duplicate fingerprint | Kept with the plan it relates to, and deleted with it. |
| Notification settings, web push subscriptions and scheduling records | While notifications are switched on. Scheduling records are short-lived and are cleared once a reminder is sent or is no longer relevant. |
| Subscription identifiers held by us, such as a Stripe customer ID | While your account is active, then deleted with it, subject to billing records we must keep. |
| Analytics data | Held by Vercel in aggregate. A visitor session is discarded after 24 hours and is not linked to your account. |
| Technical failure event and diagnostic digest | Available only in restricted Vercel runtime logs for the retention period attached to our hosting plan. We do not copy it into your Planscope account records. |
| Deleted-account identifier fingerprint | Kept indefinitely, so that a deleted account stays deleted. It does not contain your account ID in readable form and is used only to prevent a deleted account from being restored. |
We use a small number of service providers to run Planscope. Some process personal information on our behalf, in accordance with our contractual arrangements with them, while others may act as independent controllers for particular activities such as payment processing.
| Provider | What they do for us |
|---|---|
| Anthropic | Processes the information needed to generate your plans and task breakdowns, on our behalf. |
| Google, including Firebase, Google Play and the Android speech-recognition service where selected by your device | Authentication and database hosting on our behalf; Google Play purchases; and optional voice transcription. Google acts as an independent controller for Google Play transactions and may act under its own terms for a device-selected speech service. |
| Vercel | Application hosting and web analytics, on our behalf. |
| Stripe | Payment processing for web subscriptions. Stripe also acts as an independent controller for some processing it carries out for fraud prevention and to meet its own legal and regulatory obligations. |
| RevenueCat | Subscription management for app purchases, on our behalf. |
| Resend | Sending service emails, on our behalf. |
| Apple | App Store purchases and sign-in. Apple acts as an independent controller for the App Store transaction and applies its own privacy policy to it. |
We may also disclose information where we are required to by law, or where it is necessary to protect the rights, safety or property of Planscope or others.
If our business is sold or reorganised, personal information may transfer as part of that, and we will tell you if that happens.
Some of our service providers process personal information outside the United Kingdom. Where this involves a restricted transfer under UK data protection law, we use an approved transfer mechanism where required, such as UK adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards required by law.
Planscope uses one cookie.
| Name | Purpose | Type | Duration |
|---|---|---|---|
__session | Keeps you signed in. Set as an httpOnly cookie so it cannot be read by scripts in your browser. | Strictly necessary | 5 days. |
We also use your browser's local storage for information such as your theme preference, unsaved drafts and onboarding progress. Information kept only in local storage remains on your device unless you later submit it as part of using Planscope, as an unsaved draft would be if you go on to generate a plan from it.
One local storage entry records the calendar week in which you last used Planscope, so that a weekly-active count is reported once per week rather than on every visit. It holds a week number and nothing else.
Our analytics does not set a cookie and does not store an identifier on your device, so it does not rely on your consent to place anything there. If we ever add analytics or storage that does require your consent, we will ask for it first.
Depending on the circumstances and the lawful basis we rely on, you have rights to:
You can access, export and delete your data yourself from Settings, or email us at support@planscope.app. We may need to verify your identity before acting on a request.
We will respond without undue delay and within the time required by law. Under UK data protection law this is generally one month, although the period may be extended in certain circumstances permitted by law.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. If privacy laws where you live give you additional rights, we will honour those rights where they apply to our processing.
Planscope is not intended for children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal data from children under 13. If we learn that an account belongs to a child under 13, we will take appropriate steps to delete the account and associated personal data.
We recognise that younger people may still use Planscope, so we have designed it to collect little information, to keep the most sensitive input for no longer than it takes to build a plan, and to do no advertising, no profiling for advertising and no tracking across other services. Optional notifications stay off until they are switched on, and learning from your own plans can be switched off at any time.
If you are a parent or guardian and you believe a child has given us personal information you would like removed, please contact us at support@planscope.app and we will investigate and take appropriate steps.
You can delete your account at any time from Settings. When you do, your account and the Planscope data associated with it, including your plans, tasks, reflections and mood records, are scheduled for deletion immediately, and you will no longer be able to sign in.
Residual copies may remain in encrypted backups for up to 90 days before being overwritten or deleted through our normal backup cycle. We also keep records we are required or permitted to keep by law, such as billing records, and a one-way fingerprint of your account ID so that the deleted account stays deleted.
Signing up again with the same email address creates a new account rather than restoring the old one.
We may update this Privacy Policy when our practices, services or legal obligations change. If a change materially affects how we use your personal information, we will give you appropriate notice and, where required, seek your consent before the new processing begins.
The date at the top of this page shows when it was last updated.
If you have a question about this Privacy Policy, or you want to exercise any of your rights, email us at support@planscope.app.
Everyday Arc Ltd, trading as Planscope. Registered in England and Wales, company number 17064023.