PlanyFI

Privacy Policy

Last updated: July 12, 2026

The short version: you type your numbers in yourself — PlanyFI never connects to your bank and never holds a login, account number, or credential for any financial institution. That's a permanent design decision, not a missing feature. Your data is encrypted at rest, never sold, and you can erase it yourself, instantly, from inside the app.

1. Information We Collect

Account information. When you create an account, our authentication provider (Clerk) collects your name, email address, and — if you sign in with Google — your Google account identifier.

Financial planning data you enter. The budgets, income, expenses, account balances, holdings (ticker symbols and quantities), scenario events, goals, and the optional birth date used for age-based projections. All of it is manually entered by you.

Product usage and errors. We use PostHog for usage analytics and Sentry for error reporting so we can fix problems. Neither receives the financial values you enter.

Feedback. Anything you send through the in-app feedback form.

2. What We Never Collect

PlanyFI has no bank syncing, no aggregator (such as Plaid), and no connection to any financial institution. We never ask for, receive, or store bank logins, credentials, account numbers, routing numbers, or Social Security numbers. Manual entry is a core value proposition of the product and will not change.

3. How We Use Your Information

Your data is used to run the product: computing your projections, saving your plan, and sending service communications about your account. We do not sell your data, share it with advertisers, or use it for any purpose beyond operating and improving PlanyFI.

4. Where Your Data Lives and How It's Protected

Your data is stored in the United States on Railway, our hosting provider. The database is encrypted at rest (ChaCha20-Poly1305) and all traffic is encrypted in transit (TLS). Daily backups are encrypted with AES-256-GCM before leaving the server and stored on Cloudflare R2, where they are retained for 30 days.

Server logs never contain your financial values or the contents of your requests. Access to production systems is limited to the operator of PlanyFI and used only for support, debugging, and maintenance.

5. Service Providers

Each provider receives only what it needs to do its job:

  • Clerk — accounts, sign-in, and billing (your name, email, and subscription status).
  • Railway — application hosting (runs the servers your data lives on).
  • Cloudflare — encrypted backup storage, and a relay for stock quotes (it sees ticker symbols being looked up, never who looked them up).
  • Sentry — error reports (stack traces, not your financial values).
  • PostHog — product analytics (which features are used, not the numbers you enter).
  • Resend — email delivery (relays feedback you submit to us; service emails).

6. Data Retention

Free accounts become read-only 30 days after their first save; your data is kept, not deleted, and reading it stays free forever. Premium accounts persist indefinitely. If you use "Start from Scratch" in the app, your plan data is deleted immediately; copies in encrypted backups age out within 30 days.

7. Your Rights

You can delete all of your plan data yourself, instantly, with "Start from Scratch" in your profile. To delete your entire account (including your email and sign-in), or to request a copy of your data, email hello@planyfi.app — we process requests within 30 days. Premium accounts can export their data as CSV at any time.

8. Cookies

The app uses cookies required for sign-in (Clerk sessions) and PostHog analytics. This marketing site uses cookieless Vercel Analytics. There are no advertising trackers on either.

9. Children

PlanyFI is not directed at children under 13, and we do not knowingly collect their data.

10. Changes to This Policy

We may update this policy as the product evolves. Material changes will be announced via email or in the app before they take effect.

11. Contact

Questions? Email hello@planyfi.app.