Legal
Privacy Policy
Last updated: August 5, 2026
Privacy at a glance
Planuki is local-first. Core planning works without an account, and Planuki uses on-device processing before an external AI fallback. Online processing occurs only when you choose a connected feature or send us a support request.
| Feature | What is processed | Where | Your control |
|---|---|---|---|
| Core planning | Tasks, routines, reflections, and preferences | Your device | Use offline; delete locally |
| On-device AI | Your request and limited recent planning context | Your device, on supported Apple devices | Available without external AI |
| External AI fallback | A reduced, redacted request and relevant context | Supabase and OpenAI | Ask first; turn off or delete service records in the app |
| Cloud Backup | Account details and backed-up planner data | Supabase, primary database in the United States | Optional; disable or delete |
1. Our approach
Planuki (“Planuki”, “we”, “us”) is a local-first iOS planning app operated by Madhura Infotech (Canada) Inc. Core planning works without an account. Cloud Backup, external AI features, and device permissions are optional. This policy applies to the Planuki app and the planuki.com website.
2. Data stored and processed on your device
By default, plans, tasks, recurring routines, sections, Brain Dump items, energy check-ins, focus-session activity, preferences, reflections, and AI Coach conversation history are stored locally on your device. AI Coach conversations are not included in Planuki Cloud Backup. You can delete individual saved conversations from AI Coach History.
Planuki first uses deterministic planning tools on your device. On supported Apple Intelligence devices, it may then use Apple’s on-device system language model. That model may receive the current message, up to 10 recent AI Coach turns, up to 12 unfinished task titles and scheduling details, up to 12 selected iOS Calendar event titles and scheduling details, and limited context such as current time, energy level, and a referenced or pending task. Under the current implementation, that model context remains on your device.
When you select a photo, Apple Vision performs text recognition on your device. Planuki does not upload the photo to OpenAI. Your own iOS or iCloud device backups are controlled by Apple and your device settings.
3. Account and Cloud Backup
Cloud Backup is free and optional. If you enable it, you sign in using Apple, Google, or email. We then process an account identifier, available profile details such as an email address or display name, connected sign-in methods, and the planner data you choose to back up. We use this information to authenticate you, restore your data, and synchronize it across devices.
Cloud data is transmitted over encrypted connections and scoped to your signed-in account. Planuki’s Supabase primary cloud database is hosted in the United States. If you use Cloud Backup from another country, your account and synchronized planner data are transferred to and stored in the United States. You can sign out, delete only the cloud backup, or permanently delete the account and associated cloud planner data from inside the app.
4. AI Coach and automated processing
Local-first processing and permission
AI Coach first uses built-in planning tools on your device. On supported devices, Planuki may then use Apple’s on-device language model. Only when these options cannot complete a request may Planuki use OpenAI as an external AI provider.
Before Planuki sends the first external AI request, the app explains what may be shared and asks for your permission. If you choose Not Now, that request is not sent to OpenAI and Planuki’s local planning features remain available. You can later turn off external AI under Me → Privacy & Your Data → AI & Data Sharing. Future requests then remain local unless you receive the disclosure and give permission again.
Information processed for an external request
When an external fallback is needed and you have allowed it, Planuki sends the request through a Supabase Edge Function before it reaches OpenAI. Depending on the request, the backend may receive your current message; up to six recent AI Coach turns, limited to 700 characters per turn; up to 15 relevant tasks from today or tomorrow, including titles and scheduling details; and limited planning context such as the current date and time, time zone, selected date, energy level, task counts, and a referenced or pending task.
The backend also receives a random installation UUID stored in iOS Keychain, app version, platform, request type, and subscription information used to verify paid access and enforce request limits. If local planning cannot process text recognized from a selected photo, that recognized text may be included; the photo itself is not uploaded.
Information not sent to OpenAI
Planuki does not send OpenAI your entire account, full task history, iOS Calendar event titles or event details, photos, account email, sign-in credentials, payment-card details, raw installation UUID, or raw Apple subscription transaction identifier. Stored notes, Brain Dumps, and reflections are not automatically included unless you place that information in the request being processed.
Data minimization and redaction
Before an external request reaches OpenAI, Planuki reduces it to the context needed for that turn. Our backend attempts to replace recognized email addresses, phone numbers, payment-card numbers, U.S. Social Security numbers, web addresses, and street addresses with placeholders. Automated redaction may not identify every type or format of personal information, so avoid entering sensitive information that is not needed for your planning request.
Planuki uses a random installation identifier and subscription information to verify access and prevent abuse. OpenAI receives only a one-way hashed safety identifier, not your email, raw installation UUID, or raw Apple transaction identifier. Planuki does not write AI message text, responses, task titles, calendar titles, notes, or reflection text to its rate-limit tables or operational logs.
AI training and provider retention
Planuki sends OpenAI API requests with application storage turned off and does not opt in to share API data for model training. OpenAI states that API data is not used to train or improve its models unless the API customer explicitly opts in.
Under OpenAI’s standard API controls, prompts and responses may be included in abuse-monitoring logs retained for up to 30 days. OpenAI may retain them longer when required by law or when reasonably necessary to protect its services or others from harm. OpenAI may also temporarily retain encrypted prompt-cache data on processing hardware for up to 24 hours. Planuki does not claim Zero Data Retention.
5. Optional device permissions
- Calendar — selected calendars are read to show events as protected, read-only blocks and, on supported devices, may provide on-device planning context. Planuki does not edit calendar events, include them in Cloud Backup, or send their titles or details to OpenAI.
- Notifications — used to schedule reminders you enable. Notification content is prepared on your device.
- Camera and Photos — requested only when you capture or select an image. Text recognition occurs on-device; only recognized text may be included in an external request when local parsing cannot make a plan.
- Microphone and Speech Recognition— requested when you choose voice input. Apple’s speech services may process audio according to your device settings and Apple’s terms. The resulting text follows the AI flow described above.
You can deny or revoke device permissions in iOS Settings. Doing so disables only the feature that needs that permission.
6. Diagnostics
The Planuki release build does not include a third-party usage analytics SDK. Typed development events are disabled in release builds and are not transmitted or persisted.
Planuki may keep a limited error log on your device. The AI backend also writes minimal operational success or failure logs without message text, AI responses, task titles, notes, reflections, Brain Dump content, or calendar event titles. Apple may separately provide aggregated App Store and diagnostic information according to your Apple privacy settings and Apple’s policies.
7. Purchases
Apple processes subscriptions through your Apple Account. We do not receive your full payment-card details. Planuki processes product, transaction, entitlement, and expiry information needed to show plans, verify paid access, enforce reasonable request limits, restore purchases, and prevent misuse.
8. Service providers and international processing
| Provider | Purpose | Relevant data |
|---|---|---|
| Apple | On-device language model, device services, App Store subscriptions, and optional sign-in | On-device AI context; subscription identifiers and status |
| Optional Google sign-in | Account identifier and available profile details | |
| Supabase | Authentication, Cloud Backup, database, Edge Functions, AI routing, entitlement verification, and rate limiting | Account and cloud data when enabled; external request in transit; pseudonymous entitlement and request-count records |
| OpenAI | Last-resort AI Coach language understanding and response generation | Reduced, redacted request content and hashed safety identifier |
| Vercel and Resend | Website hosting and contact-message delivery | Standard request and security data; support contact details and message |
The primary Cloud Backup database is in the United States. Supabase Edge Functions, OpenAI, Apple, and approved subprocessors may process information in other countries as needed to provide their services. Information processed outside your province or country may be subject to the laws of those locations. We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction with appropriate safeguards.
9. Website and support
When you visit the website, hosting and network services may process standard request information such as IP address, requested page, browser or device information, timestamps, and security logs. This is used to deliver and protect the website, diagnose failures, and prevent abuse—not for targeted advertising. Planuki does not currently use advertising trackers on the website.
When you submit the contact form, we receive your email address, selected topic, message, and your name if provided. You may also provide app version, iOS version, and device model. Resend delivers this information to info@planuki.com so we can respond. Avoid sending sensitive planner content unless it is necessary for support.
10. Retention, export, and deletion
| Category | Retention rule |
|---|---|
| Local planner data and AI Coach history | Remains on-device until you delete the item or conversation, delete local app data, or remove the app. Apple device backups are controlled by your settings and Apple’s practices. |
| Account and Cloud Backup | Remains while the account and Cloud Backup exist. In-app deletion removes active account and cloud planner records; encrypted provider backups may remain until overwritten or where law requires retention. |
| External request content in Planuki systems | Processed in transit to provide the response. The AI service does not write message text, responses, task titles, or calendar titles to Planuki’s database or operational logs. |
| OpenAI API content | Abuse-monitoring logs may be retained up to 30 days, with possible longer legal or safety retention. Encrypted prompt cache data may be retained up to 24 hours. |
| AI request-count records | Daily quota rows retain only the 30 UTC dates needed for the rolling 30-day limit. Burst-window rows are deleted after 24 hours. |
| AI entitlement records | Active records remain while needed to verify paid access. Inactive or expired verification rows are deleted 30 days after verification or expiry. |
| Support correspondence | Kept while the request is active and afterward as needed for follow-up, security, legal, and recordkeeping purposes. |
Me → Privacy & Your Data lets you export planner data as JSON, delete Cloud Backup while keeping local data, or delete your account and associated cloud planner data. Account deletion also turns off external AI and removes the current installation’s pseudonymous request-limit and subscription-verification records. It does not cancel an App Store subscription or delete planner data and AI Coach conversations stored only on your device.
You do not need a Planuki account to choose Delete External AI Records under Me → Privacy & Your Data → AI & Data Sharing. That control turns off external AI, removes the current installation’s pseudonymous AI request-limit and subscription-verification records, and replaces its random installation identifier after the deletion is confirmed. It does not delete AI Coach conversations stored on your device. To request review or deletion of other information that cannot be removed in the app, contact us at the address below.
See the Account Deletion page for the current in-app steps.
11. Security
We use technical and organizational safeguards designed to protect information, including encrypted network connections, account-based access controls, server-side entitlement checks, context reduction and redaction, pseudonymous identifiers, and separation of service credentials from the app. No storage or transmission method is completely secure, so we cannot promise absolute security.
12. Children
Planuki is not directed to children under 13 or the equivalent minimum age in their jurisdiction. We do not knowingly collect personal information from children below that age. Contact us if you believe a child has provided personal information.
13. Your choices and privacy rights
You can decline external AI and continue using Planuki’s local planning features. You can later turn off external AI or delete the current installation’s pseudonymous AI service records under Me → Privacy & Your Data → AI & Data Sharing. You can also delete saved AI Coach conversations from AI Coach History, revoke device permissions in iOS Settings, or turn off Cloud Backup. Turning off external AI prevents future external requests unless you give permission again; it does not erase information already processed under the retention rules above.
Depending on where you live, you may have rights to access, correct, export, object to or withdraw consent for certain processing, or delete personal information we hold. Most planner data can be exported or deleted in the app. Contact us for a request that cannot be completed there. We may need to verify your identity before fulfilling it.
14. Changes and contact
We may update this policy as Planuki changes. Material changes will be posted here and, where appropriate, communicated in the app. The date above identifies the current version.
Privacy Officer
Madhura Infotech (Canada) Inc.
Email: info@planuki.com
Use this address for privacy questions, access or correction requests, deletion requests that cannot be completed in the app, or complaints about how Planuki handles personal information.