Privacy Policy

Planwell is a personal life tracking app for iPhone, built and operated by Sumletter. For anything in this policy, including access and deletion requests, write to ai@sumletter.com. For people in the EEA and the UK, Sumletter is the data controller for the data described here.

Your account. Your email address, a password (stored hashed by our auth provider, never in plain text, and never visible to us), and an optional display name.

The things you track. Whatever you put into the mini apps you switch on: weight, sleep, mood, water, meals and recipes, workouts, habits and streaks, countdowns, checklists, watchlist, books, job applications, house listings, trips, subscriptions, expenses, and any custom metrics you create, together with the notes and dates attached to them. You choose which mini apps exist for you, and you can turn any of them off at any time.

Apple Health, only if you allow it. Steps, walking and running distance, and sleep analysis. We read these, we never write anything back to Apple Health. Read the Apple Health section for what happens to them afterwards.

Voice and photos. If you dictate an entry, we record that audio and send it away to be turned into text. If you attach a photo (a menu, a receipt, a recipe, a diet plan), the image is sent to the AI so it can read it. Neither the audio nor the photo is stored on our servers.

Analytics and crash reports. Which screens and features you use, errors the app hits, and crash diagnostics from iOS, along with your user ID, email address and display name so we can tell whether a bug is hitting one person or everyone. These are product and reliability events. They are not used for advertising and are not shared with ad networks.

Purchases. If you subscribe, Apple handles the payment. We only learn whether your subscription is active. We never see your card details.

We do not collect your location, your contacts, or your device identifiers for advertising, and the app does not ask to track you across other companies' apps and websites.

To run the app and give you the features you asked for (performance of our contract with you). To keep the service working and fix what breaks, using analytics and crash reports (our legitimate interest in a product that does not fall over). To answer your questions in the AI assistant (your request, and our contract with you). Apple Health access and microphone access run on your explicit consent, given through the iOS permission prompt, and you can withdraw either one at any time in iOS Settings.

We do not use your data to train any AI model, ours or anyone else's.

The assistant is useful because it can see what you have tracked. So when you send it a message, we send Anthropic (the company behind Claude) your message plus the slice of your data that is relevant to it: recent entries from the mini apps you have enabled, including any steps, distance and sleep synced from Apple Health, plus any photo you attached. The same applies to the quick add bar, where the AI reads what you typed, dictated or photographed and turns it into an entry.

Anthropic processes this to produce the reply and hands it back. Anthropic does not use it to train their models. Your chat history itself is kept on your phone, not on our servers.

The assistant is not a doctor, a dietitian, a lawyer, or a financial adviser, and it is sometimes wrong. Do not treat what it says as professional advice.

If you grant Health access, Planwell reads your steps, your walking and running distance, and your sleep analysis, and saves a daily summary of them into your Planwell account so your dashboard, your sleep log and the AI assistant can use them. That means this health data leaves your device and is stored with the rest of your account data, and is included in the context sent to Anthropic when you use the assistant.

Health data is never used for advertising or marketing, never used for data mining beyond showing you your own numbers, never sold, and never shared with anyone other than the processors listed below who are working on our behalf to run the app. Planwell does not write anything back into Apple Health.

You can revoke Health access at any time in iOS Settings, under Privacy and Security, Health, Planwell. That stops any new data from coming in. To remove what was already synced, ask us to delete your data.

We keep this list short on purpose. These companies process data on our instructions, to run the app. None of them may use it for their own purposes.

• Supabase

  Ireland, EU

  Hosts your account and every entry you make, and runs our server side functions. Access is enforced per row, so a request signed in as you can only ever read your rows.

• Anthropic

  United States

  Runs the AI assistant, quick add, and the extraction that reads your photos. Receives your message plus the relevant slice of your tracked data. Does not train on it.

• ElevenLabs

  United States

  Turns your voice recordings into text when you dictate. Receives the audio, returns the transcript.

• PostHog

  Germany, EU

  Product analytics, error and crash reporting, including your user ID, email address and display name. No advertising, no ad network sharing.

• Apple

  Per Apple's own policy

  App Store distribution and subscription payments. Apple tells us whether your subscription is active.

• TMDB, OMDb, Open Library, Firecrawl

  United States and EU

  Look up public metadata: a film or show you added, a book you are reading, or a job posting or house listing whose link you pasted. They receive that title or that link, not your account or anything else you track.

Some of these are outside the EEA and the UK. Where that is the case, the transfer relies on the provider's standard contractual clauses or an equivalent safeguard.

We may also disclose data if the law genuinely requires it, or to protect someone's safety. If Planwell is ever sold or merged, your data would move with it, and we would tell you before that happens.

Planwell also has a web app that uses the same account and the same data. Sign in there and you see the same entries. This policy covers both.

Data is encrypted in transit and encrypted at rest by our hosting provider, and every table is protected by row level security so one account cannot read another. No system is perfect, and we are a small team, so we would rather say that plainly than promise you something unbreakable.

We keep your data for as long as your account exists. When you ask us to delete it, we remove your account and your entries within 30 days, and encrypted backup copies age out on the normal backup rotation after that. Analytics and crash events are kept for up to 12 months.

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask for it in a portable format, or object to us processing it. Email ai@sumletter.com from the address on your account and we will handle it within 30 days, free of charge.

If you are in the EEA or the UK, you also have the right to complain to your local data protection authority. If you are in California, we do not sell or share your personal information as those terms are defined under the CCPA, and we do not discriminate against you for exercising your rights.

Email ai@sumletter.comfrom your account's email address, say you want your account deleted, and we will remove your account and everything stored under it within 30 days. There is no hoop to jump through and we will not try to talk you out of it.

Planwell is not built for or directed at children under 13, and we do not knowingly collect their data. If you believe a child has an account, email ai@sumletter.com and we will delete it.

If we change something meaningful, we will update the date at the top and, for anything significant, tell you in the app. Carrying on using Planwell after that means the updated policy applies.

Questions, requests, or anything in this policy that reads wrong to you: ai@sumletter.com. A real person answers.