Privacy by design

Your questionnaire answers remain on your device. They are not included in server requests, analytics, URLs, Stripe metadata, logs, or license tokens.

Device storage

Session progress is stored in this browser. Optional persistent saves and downloaded backups use AES-GCM encryption with a key derived from your passphrase using PBKDF2. We do not receive or recover that passphrase.

Purchases

Stripe processes payment information. Purchase records contain product and payment metadata, never planner answers. Erasing planner information does not erase a locally stored purchase license.

Information not to enter

Do not enter passwords, PINs, seed phrases, private keys, full Social Security or SIN numbers, security answers, full card numbers, or complete bank account numbers.