Privacy Policy
This Privacy Policy explains how PlanySoft ("we", "us", "our") collects, uses, stores, and protects your personal data when you use Lifey — our life planning application — and the associated website at lifey.planysoft.com and planysoft.com. This policy is written to meet the standards of both the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and applies to all users globally. By using Lifey, you agree to the practices described below.
Section 01
Overview
Who we are. PlanySoft is an independent software company developing Lifey, an all-in-one life planning application. For the purposes of data protection law, PlanySoft is the data controller responsible for your personal data.
We are currently in early beta. Our product and infrastructure are growing, and we are committed to handling your data responsibly from day one — not just when we scale.
This policy applies to all users worldwide. Where your local law provides stronger protections than what is described here, those protections apply to you.
Section 02
Data we collect
We collect different categories of data depending on how you interact with us. Here is a complete breakdown:
Data you provide directly
- Email address — when you join the waitlist, create an account, or contact us
- Name or display name — when you create a Lifey account
- Password — stored in hashed form only; we never store plain-text passwords
- App content — tasks, habits, goals, budget entries, and any other data you create inside Lifey
- Support messages — if you contact us for help, we store the content of those messages
Data collected automatically
- Device and browser type — to ensure the app works correctly on your device
- IP address — logged for security purposes (e.g., detecting unusual access)
- Usage data — which features you use, how often, and general interaction patterns (anonymized where possible)
- Error and crash logs — technical logs that help us identify and fix bugs
- Referral source — how you arrived at our site (e.g., from a link or direct)
Data we do not collect
- We do not collect payment data directly — any future payments will be handled by a certified third-party processor
- We do not collect biometric data, government IDs, or sensitive personal categories under GDPR Article 9
- We do not track your activity across other websites or apps
Section 03
How we use your data
We use your data only for the purposes listed below. We do not use it for advertising, profiling, or any purpose unrelated to operating and improving Lifey.
| Purpose | Data used | Why |
|---|---|---|
| Operate the app | Account data, app content | To deliver Lifey's core features |
| Waitlist management | Email address | To notify you when access opens |
| Account security | Email, IP address, login events | To detect and prevent unauthorized access |
| Bug fixing and support | Error logs, support messages | To diagnose problems and help you |
| Product improvement | anonymized usage data | To understand which features work and which don't |
| Legal obligations | Any relevant data | To comply with applicable law when required |
Section 04
Legal basis (GDPR)
Different laws apply depending on where you are located. We comply with all of the following:
EU/EEA users — GDPR (General Data Protection Regulation)
- Contract (Art. 6(1)(b)) — processing your account data and app content is necessary to deliver the service you signed up for
- Legitimate interests (Art. 6(1)(f)) — processing usage data and error logs to improve quality and protect our systems, where this does not override your rights
- Consent (Art. 6(1)(a)) — for optional communications such as product update emails, which you can withdraw at any time
- Legal obligation (Art. 6(1)(©)) — when required by applicable law
California users — CCPA (California Consumer Privacy Act)
If you are a California resident, you have the following additional rights under the CCPA:
- Right to know — you can request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to delete — you can request deletion of personal information we have collected, subject to certain exceptions
- Right to opt out of sale — we do not sell personal information. You do not need to opt out, but you have this right if that ever changes
- Right to non-discrimination — we will not discriminate against you for exercising any CCPA right
- Right to correct — you can request correction of inaccurate personal information we hold about you
All other users
If you are located outside the EU or California, we apply the GDPR standard as our global baseline. You have the right to access, correct, and delete your data by contacting us directly. We treat all users with the same standard of care regardless of jurisdiction.
Section 05
Data sharing and third parties
We do not sell your data. We do not share your personal data with advertisers, data brokers, or any third party for commercial purposes.
We may share data with the following categories of trusted service providers, solely to operate Lifey:
- Hosting and infrastructure providers — to store app data and serve the application (e.g., cloud hosting services)
- Email delivery services — to send transactional emails such as account confirmations and waitlist notifications
- Error monitoring tools — to log crashes and technical issues so we can fix them
- Payment processors — when Premium billing is introduced; we will update this policy with specific providers at that time
Requirements for all third parties
Any third party we work with is required to: process data only on our instructions, apply appropriate security measures, and comply with applicable data protection law. We do not use processors in countries without adequate data protection unless appropriate safeguards (e.g., Standard Contractual Clauses) are in place.
Legal disclosures
We may disclose your data if required to do so by law, court order, or governmental authority — but only to the minimum extent required and only after verifying the legal basis for the request.
Section 06
Cookies and tracking
We use a minimal set of cookies necessary to operate the service. We do not use advertising cookies or third-party tracking pixels.
| Type | Purpose | Can you refuse? |
|---|---|---|
| Session cookies | Keeps you logged in during your session | No — required for the app to function |
| Authentication tokens | Remembers your login across sessions (if you choose "stay logged in") | Yes — only set if you opt in |
| Preference cookies | Stores your UI preferences (theme, language) | Yes — app still works without them |
| Analytics (anonymized) | Aggregated, non-personal usage patterns to understand feature usage | Yes — opt out available in settings |
Most browsers allow you to control cookies through settings. Disabling strictly necessary cookies may affect the functionality of Lifey.
Section 07
Data retention
We keep your data only as long as necessary for the purpose it was collected. The table below outlines our retention periods:
| Data type | Retention period |
|---|---|
| Active account data | Retained while your account is active |
| App content (tasks, habits, goals) | Retained until you delete it or close your account |
| Waitlist email addresses | Until beta launch or until you unsubscribe, whichever comes first |
| Security and access logs | Up to 90 days |
| Support messages | Up to 2 years after issue resolution |
| anonymized usage analytics | Up to 3 years (aggregated, non-personal) |
| Data after account deletion | Deleted within 30 days, except where required by law |
Section 08
Your rights
Depending on your location, you may have the following rights regarding your personal data. We will respond to all valid requests within 30 days.
- Right of access (Art. 15 GDPR) — you can request a copy of the personal data we hold about you
- Right to rectification (Art. 16 GDPR) — you can ask us to correct inaccurate or incomplete data
- Right to erasure (Art. 17 GDPR) — also known as "the right to be forgotten"; you can request deletion of your data where there is no overriding legal basis for us to keep it
- Right to restrict processing (Art. 18 GDPR) — you can ask us to pause processing of your data in certain circumstances
- Right to data portability (Art. 20 GDPR) — you can request your data in a structured, machine-readable format
- Right to object (Art. 21 GDPR) — you can object to processing based on legitimate interests at any time
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting prior lawful processing
-
Right to lodge a complaint —
you have the right to complain to the data protection authority in your country of residence. EU users can find their authority at edpb.europa.eu.
California users may contact the California Privacy Protection Agency.
Section 09
Security
We take reasonable and appropriate technical and organizational measures to protect your personal data against accidental loss, unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encrypted data transmission using HTTPS/TLS for all connections
- Passwords hashed using a strong one-way algorithm (we never store plain-text passwords)
- Access controls limiting who within PlanySoft can access personal data
- Regular review of security practices as the product and team grow
No method of electronic transmission or storage is 100% secure. While we do our best, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at admin@planysoft.com.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify affected users without undue delay, in accordance with GDPR Article 33 and 34.
Section 10
Children's privacy
Lifey is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@planysoft.com and we will delete that data promptly.
Users aged 13–17 may use Lifey, but we encourage parental awareness. In jurisdictions where the minimum age for consent is higher than 13 (e.g., 16 under GDPR Article 8 where applicable), users in those age brackets should obtain parental consent before registering.
Section 11
International data transfers
PlanySoft operates as an independent company and may use service providers located in various countries. When personal data is transferred across borders, we ensure appropriate safeguards are in place depending on the destination:
- EU/EEA transfers: Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions covering the destination country
- US-based services: We use providers that comply with applicable US privacy law and, where relevant, maintain data processing agreements aligned with GDPR requirements
- Other countries: We apply equivalent contractual safeguards and select providers with demonstrated security and privacy standards
You can request information about specific transfer safeguards by contacting us at support@planysoft.com.
Section 12
Changes to this policy
We may update this Privacy Policy from time to time as our product evolves, new features are introduced, or applicable law changes. When we do:
- We will update the "Effective" date at the top of this page
- For material changes, we will notify registered users via email or an in-app notice at least 14 days before the change takes effect
- For minor or clarifying changes, the updated policy will be posted here without individual notice
Continued use of Lifey after the effective date of any change constitutes your acceptance of the updated policy. If you do not agree, you should stop using Lifey and request account deletion.
Section 13
Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please get in touch:
PlanySoft — Data Controller
Company: PlanySoft
Privacy enquiries: support@planysoft.com
Security reports: admin@planysoft.com
General contact: support@planysoft.com
Lifey contact: lifey@planysoft.com
We aim to respond to all data-related requests within 30 days (GDPR standard). California residents will receive a response within 45 days as required by CCPA. If your request is complex, we may extend this and will notify you within the initial window.