Privacy policy

Updated October 31, 2026

Plando is an app for tasks, notes and reminders on Android and Windows. This page says in plain words what data it collects, why, who it shares it with, how long it keeps it and how to delete it.

Who is responsible

Plando is made by Vadym Sainiuk, Ukraine (“we”). For any question about your data, write to plando.support@gmail.com.

What we keep

So that your cards are the same on your phone and your PC, they are kept on a server. This is what’s there:

• Account: your email and, if you sign in with Google, your name and profile photo. There are no passwords: you sign in with a code sent to your email or with Google.
• Cards: title, details, reminder time and repeat, area, status, dates and time zone, and what you wrote down word for word: the typed text or the transcript of your voice.
• Where a card came from: for text selected on a PC, the app’s name, the window or page title and the page’s address; for messages forwarded in Telegram, the names of their authors.
• Attachments: photos, files and voice notes you added to a card or sent to the bot. They sit in private storage that only your account can reach.
• Parsing settings: time zone, language, default reminder time and the names of your areas.
• Devices: for each phone, its Firebase Cloud Messaging token and platform, to wake the app for syncing.
• Telegram, if you linked the bot: your Telegram id, chat, username and first name. New messages to the bot stay on the server until they are processed; their text is then erased, and the records go after 2 days.
• Error reports: platform, app version, the kind of error and where in the code it happened (up to 4,000 characters). They hold no text from your cards, and user names are removed from file paths. At most 20 reports a day from one device.
• Access you gave Claude or ChatGPT: which app got access and when.

Plando has no analytics, no ads and no third-party trackers.

Voice

• Recording starts when you hold the button or the key, tap the bubble, or when the phone hears «Окей, Пландо».
• The phone recognizes «Окей, Пландо» by itself, offline, and sends nothing anywhere before it. So as not to cut off the start of the phrase, the phone keeps the last 3 seconds of sound in memory and, once it hears the words, sends 2 seconds before them along with the phrase. If it heard the words by mistake, those seconds go to recognition too, and the server discards the recording when it doesn’t find «Пландо» in it.
• Recordings with no speech are not sent.
• OpenAI recognizes the sound. Our server doesn’t keep audio, and the file on the device is deleted once it has been parsed. The exception: if the AI couldn’t parse a recording, Plando keeps it as a voice note so the thought isn’t lost; the file then sits in your storage as an attachment.
• The transcript is kept in the card as what you wrote down.

Who we share data with

Only with the services Plando can’t work without, and only what they need:

• Supabase (the server and database, in Frankfurt, Germany): everything described above.
• Microsoft (OneDrive): the encrypted daily backups of the cards. The key to them is kept separately, so Microsoft can’t read them. Microsoft doesn’t guarantee the region where OneDrive keeps files, so they may be outside the EU.
• OpenAI (USA), to turn your thought into a card: typed or forwarded text (up to 6,000 characters), author and file names from forwarded messages, sound for recognition, your time zone and area names. When you ask something in “Ask”, OpenAI gets up to 150 cards related to the question. Each request carries a one-way hash of your account id so OpenAI can spot abuse. Photos and files are never sent to OpenAI. OpenAI doesn’t store the responses (store: false), and under its rules API data isn’t used to train models; OpenAI may keep the requests for up to 30 days to protect against abuse.
• Google: Google sign-in, if you chose it, and Firebase Cloud Messaging. FCM messages carry none of your data, only a “sync now” signal.
• Resend sends the email with your sign-in code.
• Telegram, if you write to the bot: messages pass through Telegram under its own rules. Chats with bots aren’t end-to-end encrypted.
• Claude or ChatGPT, only if you connected them to Plando yourself. They see your tasks, notes and shopping items (not deleted ones), including attachment names but not the files. They can create and change cards but not delete them. To disconnect: Settings → Account → “Claude and ChatGPT”.
• Cloudflare serves this website.

We don’t sell data or pass it to advertisers.

How long we keep it

• Your account, cards and settings: until you delete your account.
• A deleted card disappears from all your devices at once, and from the server after 30 days.
• Attachments of a deleted card are erased after 30 days, and files no card lists any more, the next day.
• Error reports: 90 days.
• Messages to the bot: up to 2 days after they are processed.
• Cards are backed up daily. The backups are encrypted, kept in the developer’s Microsoft OneDrive, and each is kept for 30 days. Backups hold no files.
• If an account is blocked for abusing the AI, we keep a hash of its email (not the email itself) so the block can’t be dodged by signing up again. It stays after the account is deleted.

What stays on your device

Cards, attachments and settings are also kept on the device itself, which is why Plando works offline. There is also a technical log that may hold the beginnings of transcripts (up to 300 characters); it is never sent anywhere. When you sign out or delete your account, the cards, attachments, drafts and log on the device are erased.

Your rights

• See and correct: your data is your cards, and you can see and change them in the app.
• Delete: your account and all its data, in the app or by email. How: see Delete your account.
• Get a copy or ask: write to plando.support@gmail.com, and we’ll answer within 30 days.
• If you are in the EU or the UK, you can also complain to your country’s data protection authority.

Children

Plando is meant for people aged 13 and over, and 16 and over in the European Union. We don’t knowingly collect data from younger children.

Changes

If this policy changes, we’ll update this page and the date at the top, and tell you in the app about important changes.