Privacy Policy

1. Who we are and how to reach us

Plan Plan is operated by BEHIRE TECNOLOGIA LTDA, a Brazilian company registered under CNPJ 68.009.498/0001-97, which is the controller of the data covered by this policy. For any privacy matter, including exercising your rights, write to hello@planplan.pro.

2. Data we collect

Account data:

• name, email and password (we only keep an encrypted version of the password);
• if you sign in with Google, Microsoft or LinkedIn: name, email, profile photo (Google and LinkedIn) and the account identifier at that provider;
• preferences such as language, time zone, first day of the week, time format and currency.

Content you create:

• planners, pages, tasks, notes, journal, habits, goals, budgets, contacts and other widgets;
• handwriting, images and PDF pages you import in Notebook mode, and the text transcribed from your handwriting;
• mood, energy, health and cycle logs, if you choose to use them. These may be sensitive personal data;
• emails of people you share a planner with or invite to a workspace.

Use of the AI assistant: conversations, actions the assistant proposes, and the monthly message count.

Payments: plan, subscription status, billing dates and the history of events sent by Stripe, which may include name, email, billing address and tax ID. Card details are collected directly by Stripe; Plan Plan never receives or stores them.

Technical data: IP address and browser associated with each sign-in session, and the IP used to rate-limit abusive access attempts.

Visits to the public site: page visited, language, referring site, campaign parameters (UTM), country and device type. We use no cookie for this and do not store the IP: we keep only a code derived from the IP and browser that changes every day, to count unique visitors.

3. Why we use data and on what legal basis

• Creating and maintaining your account, saving and syncing your planners and enabling sharing: performance of the contract (LGPD, art. 7, V).
• Charging subscriptions and keeping tax records: performance of the contract and compliance with legal obligations (art. 7, II and V).
• Sending account confirmation, password reset and invitation emails: performance of the contract.
• Protecting the service against abuse, fraud and unauthorized access, and measuring site visits in aggregate: legitimate interest (art. 7, IX).
• Letting the AI assistant read your mood, health and cycle logs: specific consent (art. 11, I), which you give in the assistant itself and can withdraw at any time.

We do not use your data for advertising, we do not sell data and we do not build profiles for third parties.

4. Artificial intelligence

Plan Plan's AI features use models from Anthropic. To work, we send Anthropic only what each feature needs:

• assistant: your message, earlier messages in the conversation, your name, the workspace name and the planner data the assistant looks up to answer;
• handwriting transcription: an image of your strokes. It runs automatically a few seconds after you stop writing, so your notes show up in search;
• convert to block and suggest with AI: an image of the selected strokes or the planner content to be completed.

The assistant only reads mood, health and cycle logs if you give specific consent for it. In organization workspaces, the administrator can turn AI off for all members.

AI answers may contain mistakes. They are not a substitute for medical, psychological, financial or legal advice.

5. Who we share data with

We share data only with the service providers that make Plan Plan work, and only as much as needed:

• Vercel: hosting of the site and the app;
• Neon: the database that holds your account and planner content;
• Stripe: payments and subscription management;
• Resend: delivery of system emails;
• Anthropic: processing of the AI features described above;
• Google, Microsoft and LinkedIn: only if you choose to sign in with them;
• Google Fonts: Notebook mode stickers are loaded from Google's servers, which receive your IP when displaying them.

We also share data when you ask us to: a shared planner is visible to the people and links you choose, and the calendar (iCal) link shows your tasks and dates to anyone who has the address. In an organization workspace, administrators can see the members and the content of that workspace.

We may also provide data to authorities when required by law or court order.

6. International transfers

The providers listed above store or process data outside Brazil, mainly in the United States. These transfers are made to perform our contract with you and with providers that adopt contractual clauses and security measures compatible with the LGPD (art. 33).

7. Sign in with Google, Microsoft and LinkedIn

If you sign in with one of these accounts, we receive only your name, email, confirmation that the email is verified and, for Google and LinkedIn, your profile photo. We do not request access to your emails, contacts, files or calendar.

We use this data only to create your account and let you sign in. Plan Plan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data is not used for advertising, is not sold and is not used to train AI models.

You can remove Plan Plan's access at any time in the security settings of your Google, Microsoft or LinkedIn account.

8. Cookies and browser storage

We only use first-party cookies that the service needs to work. We do not use advertising or third-party tracking cookies.

• sign-in session (planplan.session_token and related cookies);
• language (planplan_locale) and currency (planplan_currency), for up to 1 year;
• view mode (pp_view), mascot preferences (pp_mascot) and sidebar state.

Your browser also keeps, on your device, the theme you picked, Notebook mode preferences and a copy of your handwriting and visited pages, so the app works offline. That copy is deleted when you sign out.

9. How long we keep data

• Account data and planner content are kept for as long as the account exists.
• Planners and pages you delete stay in the trash for 30 days so they can be recovered.
• When you ask us to delete your account, we erase your personal data and content within 30 days, except what the law requires us to keep, such as payment records for tax purposes.
• Access logs may be kept for 6 months, as required by the Brazilian Internet Civil Framework (Law 12,965/2014).

10. Your rights

Under the LGPD, you may at any time:

• confirm whether we process your data and access it;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• request portability of your data;
• request deletion of your account and of data processed based on your consent;
• find out who we share your data with;
• withdraw consent, such as the one that lets the assistant read health data;
• file a complaint with the Brazilian National Data Protection Authority (ANPD).

To exercise any of these rights, including deleting your account or getting a copy of your data, write to hello@planplan.pro from the email on your account. We reply within 15 days.

11. Security

We use encrypted connections (HTTPS), encrypted password storage, per-workspace access control, sign-in rate limiting and restricted database access. No system is completely immune to failures; if an incident could create a relevant risk, we will notify you and the ANPD, as the law requires.

12. Children and teenagers

Plan Plan is not intended for anyone under 18 without the authorization of a parent or guardian, and we do not knowingly collect data from children under 12. If you learn of such an account, write to us and we will remove it.

13. Changes to this policy

We may update this policy when the service changes. The date at the top shows the version in force. If a change is significant, we will let you know by email or in the app before it takes effect.