Planther
Privacy Policy
Planther is a planner for habits, lists, goals, tasks, notes and countdowns. It's made by Rahul Vagadiya, an independent developer ("we"). This policy says what Planther keeps, why, where, and how you can take it with you or delete it.
The short version
- Your spaces and cards live on your iPhone first. Planther works offline.
- We back them up to our server so you can get them back on a new phone and, with Plus, sync them across devices.
- Locked notes are encrypted on your iPhone with a key kept in your iCloud Keychain. We can't read them.
- No ads, no third-party analytics or tracking, and we never sell your data.
- You can export everything and delete your account from inside the app.
What we keep
- Your account. When you start using Planther it makes an anonymous account, with a random id and no email. If you sign in, we also keep your email, the name you give, and an identifier from Apple or Google if you use them. Passwords are stored only as a secure hash.
- Your content. Your spaces, cards, their history and your notes, so they can be backed up and synced. Locked notes reach us only in encrypted form.
- Photos you add, such as a space cover or a profile photo.
- Notifications. Your device's push token and reminder settings, so we can send the reminders you set up, and whether they were delivered and opened.
- Apple Health. If you link a habit to Apple Health, Planther reads only what that habit needs (for example, steps). With Plus, the daily totals for linked habits are sent to our server so your check-ins and reminders stay up to date. Health data is never used for advertising or shared with anyone.
- Purchases. Apple handles payment. We receive the transaction details for Planther Plus to unlock it on your account and to offer the free trial once per person. We never see your card.
- Diagnostics. Crash reports, performance data from iOS, and a short list of app events (such as "card added") with your app and iOS version. They never include what you write. You can turn this off in the app's settings.
Who helps us run Planther
We use a few services to host and deliver Planther. They process data only on our behalf:
- Google Cloud (servers in Belgium) runs our server and stores photos.
- MongoDB Atlas (on Google Cloud in Belgium) stores the database.
- Mailgun (EU region) sends account emails, such as confirmation and password-reset links.
- Apple provides Sign in with Apple, push notifications and in-app purchases.
- Google provides Sign in with Google, if you choose it.
How long we keep it
- Everything is kept while you have an account.
- When you delete your account in the app, we remove your account and everything in it within 24 hours. We keep a one-way hash of your email for 30 days, so a just-deleted email can't restart the free trial, and purchase records without your account id, as the law requires.
- An anonymous account that hasn't been used for 12 months is deleted, after three reminders. What's on your iPhone stays.
- Diagnostics are deleted after 13 months at most; crash reports after 180 days.
Your choices
- See and take your data: User area › Account & data › Export my data.
- Delete your account: User area › Account & data › Delete account. A subscription is managed by Apple: cancel it in Settings › your name › Subscriptions.
- Notifications and Apple Health can be turned off in iOS Settings at any time.
- For anything else, including access, correction or deletion requests, write to hello@planther.app.
Children
Planther isn't made for children under 13, and we don't knowingly keep data about them.
Changes
If this policy changes, we'll update the date above and, for important changes, ask you in the app.