Privacy Policy

Privacy at a glance

Planuki is local-first. Core planning works without an account, and Planuki uses on-device processing before an external AI fallback. Online processing occurs only when you choose a connected feature or send us a support request.

1. Our approach

Planuki (“Planuki”, “we”, “us”) is a local-first iOS planning app operated by Madhura Infotech (Canada) Inc. Core planning works without an account. Cloud Backup, external AI features, and device permissions are optional. This policy applies to the Planuki app and the planuki.com website.

2. Data stored and processed on your device

By default, plans, tasks, recurring routines, sections, Brain Dump items, energy check-ins, focus-session activity, preferences, reflections, and AI Coach conversation history are stored locally on your device. AI Coach conversations are not included in Planuki Cloud Backup. You can delete individual saved conversations from AI Coach History.

Planuki first uses deterministic planning tools on your device. On supported Apple Intelligence devices, it may then use Apple’s on-device system language model. That model may receive the current message, up to 10 recent AI Coach turns, up to 12 unfinished task titles and scheduling details, up to 12 selected iOS Calendar event titles and scheduling details, and limited context such as current time, energy level, and a referenced or pending task. Under the current implementation, that model context remains on your device.

When you select a photo, Apple Vision performs text recognition on your device. Planuki does not upload the photo to OpenAI. Your own iOS or iCloud device backups are controlled by Apple and your device settings.

3. Account and Cloud Backup

Cloud Backup is free and optional. If you enable it, you sign in using Apple, Google, or email. We then process an account identifier, available profile details such as an email address or display name, connected sign-in methods, and the planner data you choose to back up. We use this information to authenticate you, restore your data, and synchronize it across devices.

Cloud data is transmitted over encrypted connections and scoped to your signed-in account. Planuki’s Supabase primary cloud database is hosted in the United States. If you use Cloud Backup from another country, your account and synchronized planner data are transferred to and stored in the United States. You can sign out or permanently delete the account and associated cloud planner data from inside the app.

Signing out stops cloud sync but does not delete cloud data. Where offered, Keep Tasks leaves your plan visible to anyone who opens Planuki on this device; Clear Tasks removes the account’s local plan, its separately saved recovery copy, and local AI Coach history. Unsynced changes may be lost. This starts fresh onboarding without deleting cloud data or other accounts’ saved plans. Signing in to a different account does not automatically merge another account’s saved plan.

4. AI Coach and automated processing

Local-first processing and permission

AI Coach first uses built-in planning tools on your device. On supported devices, Planuki may then use Apple’s on-device language model. Only when these options cannot complete a request may Planuki use OpenAI as an external AI provider.

Before Planuki sends the first external AI request, the app explains what may be shared and asks for your permission. If you choose Not Now, that request is not sent to OpenAI and Planuki’s local planning features remain available. You can later turn off external AI under Me → Privacy & Your Data → AI & Data Sharing. Future requests then remain local unless you receive the disclosure and give permission again.

Information processed for an external request

When an external fallback is needed and you have allowed it, Planuki sends the request through a Supabase Edge Function before it reaches OpenAI. Depending on the request, the backend may receive your current message; up to six recent AI Coach turns, limited to 700 characters per turn; up to 15 relevant tasks from today or tomorrow, including titles and scheduling details; and limited planning context such as the current date and time, time zone, selected date, energy level, task counts, and a referenced or pending task.

The backend also receives a random installation UUID stored in iOS Keychain, app version, platform, request type, and subscription information used to verify paid access and enforce request limits. If local planning cannot process text recognized from a selected photo, that recognized text may be included; the photo itself is not uploaded.

Information not sent to OpenAI

Planuki does not send OpenAI your entire account, full task history, iOS Calendar event titles or event details, photos, account email, sign-in credentials, payment-card details, raw installation UUID, or raw Apple subscription transaction identifier. Stored notes, Brain Dumps, and reflections are not automatically included unless you place that information in the request being processed.

Protecting personal information

Before sending a request to OpenAI, Planuki removes personal details it can detect. This may not catch everything. Planuki also limits the request to the information needed to help with your message.

Planuki uses a random installation identifier and subscription information to verify access and prevent abuse. OpenAI receives only a one-way hashed safety identifier, not your email, raw installation UUID, or raw Apple transaction identifier. Planuki does not write AI message text, responses, task titles, calendar titles, notes, or reflection text to its rate-limit tables or operational logs.

AI training and provider retention

Planuki sends OpenAI API requests with application storage turned off and does not opt in to share API data for model training. OpenAI states that API data is not used to train or improve its models unless the API customer explicitly opts in.

Under OpenAI’s standard API controls, prompts and responses may be included in abuse-monitoring logs retained for up to 30 days. OpenAI may retain them longer when required by law or when reasonably necessary to protect its services or others from harm. OpenAI may also temporarily retain encrypted prompt-cache data on processing hardware for up to 24 hours. Planuki does not claim Zero Data Retention.

5. Optional device permissions

• Calendar Sync (Premium) — selected calendars are read to show events as protected, read-only blocks and, on supported devices, may provide on-device planning context. Planuki does not edit calendar events, include them in Cloud Backup, or send their titles or details to OpenAI.
• Apple Reminders (Premium) — if you connect Apple Reminders, Planuki asks for permission separately from Calendar. Scheduled reminders from the lists you choose appear in Focus. Checking one off or undoing completion updates its status in Apple Reminders. Editing its title, date, or time in Focus also saves the change to Apple Reminders. The connection is processed on your device, and imported reminders are not included in Planuki Cloud Backup. Apple manages their notifications. You can disconnect the integration in Me → Connections → Apple Reminders.
• Notifications — used to schedule reminders you enable. Notification content is prepared on your device.
• Camera and Photos — requested only when you capture or select an image. Text recognition occurs on-device; only recognized text may be included in an external request when local parsing cannot make a plan.
• Microphone and Speech Recognition— requested when you choose voice input. Apple’s speech services may process audio according to your device settings and Apple’s terms. The resulting text follows the AI flow described above.

You can deny or revoke device permissions in iOS Settings. Doing so disables only the feature that needs that permission.

6. Diagnostics

The Planuki release build does not include a third-party usage analytics SDK. Typed development events are disabled in release builds and are not transmitted or persisted.

Planuki may keep a limited error log on your device. The AI backend also writes minimal operational success or failure logs without message text, AI responses, task titles, notes, reflections, Brain Dump content, or calendar event titles. Apple may separately provide aggregated App Store and diagnostic information according to your Apple privacy settings and Apple’s policies.

7. Purchases

Apple processes subscriptions through your Apple Account. We do not receive your full payment-card details. Planuki processes product, transaction, entitlement, and expiry information needed to show plans, verify paid access, enforce reasonable request limits, restore purchases, and prevent misuse.

8. Service providers and international processing

The primary Cloud Backup database is in the United States. Supabase Edge Functions, OpenAI, Apple, and approved subprocessors may process information in other countries as needed to provide their services. Information processed outside your province or country may be subject to the laws of those locations. We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction with appropriate safeguards.

9. Website and support

When you visit the website, hosting and network services may process standard request information such as IP address, requested page, browser or device information, timestamps, and security logs. This is used to deliver and protect the website, diagnose failures, and prevent abuse—not for targeted advertising. Planuki does not currently use advertising trackers on the website.

When you submit the contact form, we receive your email address, selected topic, message, and your name if provided. You may also provide app version, iOS version, and device model. Resend delivers this information to info@planuki.com so we can respond. Avoid sending sensitive planner content unless it is necessary for support.

10. Retention, export, and deletion

You can export planner data as JSON from Me → Privacy & Your Data. To delete your account and cloud planner data, open Me → Account & Data → Delete Account (under Privacy & Your Data or Planuki Cloud in older versions). Identity verification may be required; verification alone does not sync or merge your tasks. Account deletion also turns off external AI and removes the current installation’s pseudonymous request-limit and subscription-verification records. It does not cancel an App Store subscription. Cancel separately in iOS Settings → your name → Subscriptions.

Where offered, Keep Local Plan retains your plan and AI Coach history without a login; Clear Local Data removes that plan too. Older versions keep local data after account deletion. Anyone who opens Planuki on this device can see data you keep. Other accounts’ separately saved plans are not deleted or merged. If an existing device plan conflicts with keeping your plan, you choose how to handle it before account deletion; nothing is silently overwritten. Combine keeps both local plans; Replace removes the existing device plan identified in the prompt. Clear Local Data leaves an existing guest plan unchanged; otherwise onboarding starts again. You can export a copy before proceeding.

Creating a new account with a previously deleted email does not restore the old account or its cloud data. Data you chose to keep on the device remains local until you choose to add it through the sign-in flow. A different account’s separately saved data is not automatically included.

Cancelling before final confirmation does not delete the account. If the app reports that cloud deletion succeeded but local cleanup is unfinished, follow its retry instructions: the cloud account is already deleted, but local data may remain until cleanup completes. In versions supporting deletion recovery, a private receipt lets the app check a lost response without signing back into the deleted account. While a request is pending, it identifies the account and installation needed to complete deletion. After completion, only an opaque receipt hash and timestamps remain, until the app acknowledges local cleanup or until scheduled cleanup after 90 days. Keep the app installed while recovery is pending; after that recovery window, contact support if the app cannot confirm the outcome. Clearing this device does not erase exports you saved elsewhere, another device’s offline copies, or backups managed by Apple. Manage those copies separately. Support correspondence and any records subject to a legal retention requirement follow the retention rules above; deleting the planner account is not a promise that every record held by every provider vanishes instantly.

Remaining Premium access is verified through Apple and continues while the subscription is valid; Restore Purchases can re-check access. External AI requires fresh consent before use resumes. If you opt in again, Planuki may recreate the pseudonymous service records needed to verify paid access and enforce request limits. This does not restore your deleted cloud account or backup.

You do not need a Planuki account to choose Delete External AI Records under Me → Privacy & Your Data → AI & Data Sharing. That control turns off external AI, removes the current installation’s pseudonymous AI request-limit and subscription-verification records, and replaces its random installation identifier after the deletion is confirmed. It does not delete AI Coach conversations stored on your device. To request review or deletion of other information that cannot be removed in the app, contact us at the address below.

See the Account Deletion page for the current in-app steps.

11. Security

We use technical and organizational safeguards designed to protect information, including encrypted network connections, account-based access controls, server-side entitlement checks, context reduction and redaction, pseudonymous identifiers, and separation of service credentials from the app. No storage or transmission method is completely secure, so we cannot promise absolute security.

12. Children

Planuki is not directed to children under 13 or the equivalent minimum age in their jurisdiction. We do not knowingly collect personal information from children below that age. Contact us if you believe a child has provided personal information.

14. Changes and contact

We may update this policy as Planuki changes. Material changes will be posted here and, where appropriate, communicated in the app. The date above identifies the current version.

Privacy Officer
Madhura Infotech (Canada) Inc.
Email: info@planuki.com

Use this address for privacy questions, access or correction requests, deletion requests that cannot be completed in the app, or complaints about how Planuki handles personal information.