Privacy Policy

KOI Planner is a personal productivity planning application. For questions about this privacy policy, contact us at [email protected].

Account Data — When you sign in with Google, we receive your email address, name, and profile picture. We store this information to identify your account.

Planning Data — We store all content you create: goals, tasks, notes, focus sessions, habit records, vision board content, and any other data you enter into the application.

AI Conversation Data — When you interact with the AI assistant, your messages and planning context (current goals, priorities, and tasks) are sent to Anthropic for processing. We store the conversation history to provide continuity.

Usage Data — We collect basic usage information, such as when you log in and which features you use, to improve the service.

Payment Data — Payment processing is handled entirely by Stripe. We do not store your credit or debit card information. We receive and store only the confirmation of your subscription status.

Free Planner Requests — If you request the free printable planner without an account, we store your email address, language, where you came from and whether you agreed to receive emails. We use it to send you the download links and, only if you ticked the separate opt-in box, a short series of emails about the 12-week method and the KOI app. Every email has a one-click unsubscribe link.

To provide and operate the KOI Planner service.

To power AI assistant features (requires sending context to Anthropic).

To process payments and manage your subscription via Stripe.

To send essential transactional emails: subscription confirmation, renewal receipts, and important service announcements.

To improve and develop the service based on aggregated usage patterns.

We do not sell your personal data. We do not use your data for advertising.

The AI assistant is powered by the Anthropic Claude API. When you send a message to the assistant, we transmit your message and relevant planning context — your current goals, priorities, and recent tasks — to Anthropic's servers in the United States for processing.

Anthropic does not use data submitted through the API to train its AI models. You can review Anthropic's privacy practices at anthropic.com/privacy.

You can limit AI data processing by choosing not to use the AI assistant feature.

KOI Planner's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements (see policies.google.com/terms/api-services-user-data-policy).

Limited Use Compliance — The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide and improve user-visible features within KOI Planner. We do not use, transfer, or sell Google user data — including raw, aggregated, or derived data — to create, train, or improve any machine learning or artificial intelligence models, whether foundational, generalized, or otherwise.

Calendar Access — If you choose to connect Google Calendar, KOI Planner will access your calendar events in read-only mode. We can read events to display them in your planner, but we cannot create, modify, or delete them.

Purpose Limitation — Calendar data is used exclusively to: (1) display your Google Calendar events alongside your KOI Planner schedule; and (2) detect conflicts between calendar events and your focus blocks. Calendar data is never used for advertising, user profiling, or any purpose beyond those listed here.

Data Storage — Calendar events are temporarily cached to provide a fast, responsive experience. We do not store the full content of your calendar events on a permanent basis beyond what is necessary to render them in the application.

No Data Sharing — Your Google Calendar data is never sold, rented, or shared with third parties for their own purposes.

Revoking Access — You may disconnect Google Calendar at any time via Profile Settings. Upon disconnection, cached calendar data is immediately deleted from our systems. You may also revoke access directly from your Google Account at myaccount.google.com/permissions.

The following providers have access to some of your data in order to power the service:

Your data is retained as long as your account remains active.

If you delete your account, we permanently delete all your planning data within 30 days.

Stripe retains payment records as required by applicable financial regulations.

Anonymized, aggregated usage statistics may be retained indefinitely.

Under Brazil's LGPD (Lei Geral de Proteção de Dados, Lei 13.709/2018) and GDPR (where applicable), you have the following rights:

Access — view a copy of your data (use the Export feature in Settings).

Correction — correct inaccurate data (edit directly in the application).

Deletion — request deletion of your data (delete your account in Settings).

Portability — receive your data in a structured, machine-readable format (JSON export).

Information — know how your data is processed (this policy).

Withdraw consent — cancel your subscription and delete your account at any time.

To exercise your rights, use the Settings page or contact [email protected].

We use essential session cookies required for authentication and security. We use browser local storage to temporarily cache your planning data for offline functionality and performance.

We use a first-party analytics cookie (PostHog) to understand how the website and the app are used — for example, which pages are visited and which features are used — so we can improve the product. Text you write in the planner, such as goals, tasks and notes, is masked and never collected by analytics.

We do not use advertising cookies or cross-site tracking cookies.

All data is transmitted over encrypted connections (TLS 1.2+).

Data at rest is encrypted by Supabase's infrastructure.

Row-level security policies ensure your data is never accessible to other users.

We limit employee access to personal data on a strict need-to-know basis.

Your data may be transferred to and processed in the United States, where our infrastructure providers operate. These transfers are subject to appropriate contractual safeguards.

KOI Planner is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact [email protected].

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 15 days before the changes take effect. The updated policy will be posted at this URL with a new effective date.

For privacy-related questions or to exercise your rights, email: [email protected]