Privacy Policy

The short version

Superplanner is built so that most of your data is either on your own device or in a database that holds only your account’s data.

The rest of this policy is the detail behind those statements.

Personal information we collect

Information you provide

• Account data — name and email address, handled by our identity provider when you register or sign in.
• Payment data — when you subscribe, payment is processed by our payment provider. We receive subscription status, plan and transaction records. We never receive or store your full card number.
• Your content — the notes, plans, calendar entries, expense and subscription records, contacts and journal entries you create, along with attachments and the metadata needed to sync and order them.
• Imported data — where you use an import or integration feature, the data that feature reads, such as calendar events over CalDAV, contact records, or bank and card statements you import.
• Support communications — what you send us when you ask for help.

Information collected automatically

• Device and diagnostic data — operating system and version, app version, device model, crash reports and stack traces, and performance traces. Used to fix defects.
• Product usage events — which features are used and how often, plus feature-flag evaluations, captured without person profiles and subject to sampling and a global off switch.
• Server logs — our sync and billing infrastructure logs requests, including IP address and timestamps, for security, abuse prevention and debugging.
• Website font requests — when you load a page on superplanner.ai, the typefaces are requested from Adobe Fonts, so Adobe receives your IP address together with browser and device details. This sets no cookies. See our Cookie Notice.

We do not collect precise geolocation, we do not use advertising identifiers, and we have no third-party ad or marketing-attribution SDKs in the app.

How we use your information

We do not use your content to train general-purpose AI models, and we do not permit our model providers to do so.

AI features

Superplanner uses AI models for exactly three bounded tasks, each triggered by something you do:

• Privacy filter — detects personal information in text and replaces it with placeholders before the text is sent to a model provider. It returns the redacted text and the list of spans it replaced.
• Draft translation — converts a captured web draft into a structured note.
• Subscription extraction — reads subscription and receipt messages you import so your subscription list can populate itself.

For these features, the text is transmitted to AI Runtime, our own platform operated by Grid Heap, and from there to a model provider engaged as our subprocessor — OpenAI, Anthropic, Microsoft, Google, Amazon, Cloudflare or OpenRouter. It is processed to return a result and is not retained by the provider for model training. Our platform enforces a closed list of permitted operations for Superplanner: it cannot invoke models or services outside that list.

AI Runtime selects which provider handles each request, based on factors such as response speed, real-time availability and cost, so the provider is not fixed and may change over time. One of them, OpenRouter, is itself a routing service and may forward a request to a downstream provider not individually named. We contractually require these providers to maintain appropriate data protection safeguards and prohibit them from using your data for generalized AI model training. The current list is on our Subprocessors page.

Local assistant sessions. Superplanner’s in-app assistant runs through a local runtime, and transcripts are stored on your own machine. They are not uploaded to a memory service operated by us, and our analytics never receive their contents.

Credentials for connected services are held in your operating system’s own keystore — the macOS Keychain or the Windows Credential Manager — not in our database.

How we share information

We share personal information only in these situations:

• Service providers (subprocessors) — identity, hosting and sync, payments, email delivery, error reporting, product analytics, web font delivery and AI model providers, each acting on our instructions under contract. The current list is on our Subprocessors page.
• Integrations you initiate — where you connect a calendar, contact source or financial account, data flows to and from that provider under their terms.
• Feature lookups — Journal can fetch weather for a place you reference, and Money fetches currency exchange rates. Rate lookups carry no personal or transaction data.
• Legal and safety — where required by law or valid legal process, or to protect rights, safety and property.
• Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to this policy continuing to apply.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

International transfers

Grid Heap, Inc. is incorporated in Delaware and based in the United States, and we operate on globally distributed infrastructure — so your information may be processed in countries other than your own, including the United States. Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, together with additional safeguards where needed.

Retention

We keep your content for as long as your account is active. When you delete an item it is removed from your synced store, and backups age out on a rolling basis.

When you close your account we delete your content within 30 days, except where we must retain records for tax, accounting, fraud-prevention or legal purposes. Diagnostic and analytics data is retained for no longer than 12 months.

Security

We protect your information with encryption in transit, authenticated and authorised access to sync endpoints, and per-account storage isolation. No system is perfectly secure, but the architecture is deliberately built so that one account’s data is not co-located with another’s.

Your choices

• Access and export — you can read and export your content from within the app.
• Deletion — you can delete individual items, or close your account entirely.
• Diagnostics — you can turn off optional diagnostic and usage reporting in app settings.
• Marketing email — every marketing message has an unsubscribe link. Service and billing messages are not optional while you hold an account.

Your European rights

If you are in the EEA, UK or Switzerland, you have the right to access, correct, delete, restrict and port your personal data, to object to processing carried out on the basis of legitimate interests, and to withdraw consent where processing relies on it. You may also lodge a complaint with your local supervisory authority.

The controller is Grid Heap, Inc., a Delaware corporation, 1111B S Governors Ave Ste 51059, Dover, DE 19904, United States. Contact: legal@gridheap.com.

State privacy rights (United States)

Residents of California, Colorado, Connecticut, Virginia, Delaware and other states with comprehensive privacy laws have rights to know, access, correct, delete and port personal information, and to opt out of targeted advertising, sale and certain profiling.

We do not sell personal information, do not share it for cross-context behavioural advertising, and do not engage in profiling that produces legal or similarly significant effects — so there is nothing to opt out of in those categories. The access, correction, deletion and portability rights are exercised as described in Your choices or by contacting us.

We will not discriminate against you for exercising any of these rights.

Children

Superplanner is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Changes and contact

We will post any updated policy here with a new effective date, and for material changes we will notify you in the app or by email before they take effect. Previous versions remain available on request.

Grid Heap, Inc.
1111B S Governors Ave Ste 51059
Dover, DE 19904, United States
legal@gridheap.com