Privacy Policy

Last updated: December 2024

Introduction

Plannr ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial planning platform.

We understand that trusting an app with your financial data is a significant decision. That's why security and privacy are built into everything we do. Our business model is subscription-based, not data monetization - we make money from providing you value, not from selling your information.

Information We Collect

Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Profile Information: Optional details like phone number and preferences
  • Financial Goals: Goals you set within the platform (e.g., home deposit, retirement)
  • Manual Entries: Any financial data you manually enter, such as budgets, transactions, or account balances
  • Communications: Messages you send to our support team

Information from Open Banking

When you connect your bank accounts via Open Banking (powered by Basiq), we receive:

  • Account balances and account details
  • Transaction history (description, amount, date, merchant)
  • Account type and institution information

Important: Open Banking uses read-only OAuth access. We can never move money, make payments, or modify your bank accounts. We never see or store your bank passwords.

Automatically Collected Information

  • Device Information: Browser type, operating system, device type
  • Usage Data: Pages visited, features used, time spent on the platform
  • Log Data: IP address, access times, error logs

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our financial planning services
  • Sync and display your financial accounts and transactions
  • Categorize transactions using AI and provide spending insights
  • Track your progress towards financial goals
  • Generate personalized recommendations and insights
  • Send you service-related notifications and updates
  • Respond to your support requests and inquiries
  • Detect and prevent fraud, security issues, and abuse
  • Comply with legal obligations

AI and Data Processing

Plannr uses artificial intelligence to provide features like:

  • Automatic transaction categorization
  • Merchant recognition and enrichment
  • Spending pattern analysis
  • Personalized financial recommendations
  • Document parsing from uploaded receipts

Our AI processes your data securely and does not use your personal financial information to train general AI models. Your data is used only to provide services to you.

Data Sharing and Disclosure

We do not sell your personal or financial data to third parties.

We may share your information only in the following circumstances:

  • Service Providers: With trusted partners who help us operate our platform (e.g., Basiq for Open Banking, cloud hosting providers). These providers are contractually bound to protect your data.
  • With Your Consent: When you explicitly authorize sharing, such as inviting collaborators to your plan.
  • Legal Requirements: When required by law, court order, or government request.
  • Safety: To protect the rights, safety, and property of Plannr, our users, or the public.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

Data Security

We implement enterprise-grade security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Authentication: Secure session-based authentication with optional two-factor authentication
  • Password Security: Passwords are hashed using bcrypt with salting
  • Access Controls: Role-based access with audit logging
  • Infrastructure: Hosted on enterprise cloud providers with SOC 2 compliance
  • Monitoring: Real-time security monitoring and intrusion detection
  • Regular Audits: Periodic security assessments and penetration testing

Data Residency

Your data is stored in Australia by default. We use Australian data centers to ensure your financial information remains within Australian jurisdiction and complies with local data protection requirements.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. When you delete your account:

  • Your personal data is permanently deleted within 30 days
  • Backups are purged within 90 days
  • We may retain anonymized, aggregated data for analytics purposes
  • Some data may be retained longer if required by law

Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of your personal data
  • Export: Download your data in common formats (CSV, JSON)
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Restriction: Limit how we process your data
  • Disconnection: Revoke Open Banking connections at any time
  • Withdraw Consent: Opt out of optional data processing

To exercise these rights, contact us at hello@plannr.com or use the settings within your account.

Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and security
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how you use the platform (opt-in only)

You can control cookie preferences through your browser settings.

Children's Privacy

Plannr is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use of Plannr after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Plannr
Email: hello@plannr.com
Melbourne, Australia

Australian Privacy Principles

Plannr complies with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). For more information about your privacy rights under Australian law, visit the Office of the Australian Information Commissioner.