Privacy Policy

Last updated: March 2026

Simple Weekly Planner ("we", "us", or "our") operates simpleweeklyplanner.com and the Simple Weekly Planner mobile app. This policy explains what information we collect, why we collect it, and how you can control it.

1. Information You Provide

Account

When you register, we collect your email address and a hashed password. Your password is never stored in plain text. Your email is used only to identify your account and to send transactional messages you request (such as password resets).

Tasks

The core content of your planner — task titles, descriptions, scheduled dates and times, completion status, priority levels, estimated durations, and recurrence settings — is stored securely and associated with your account. This data is never shared with any third party and is only accessible when you are logged in.

Account Preferences

Optional settings you configure — such as your timezone and preferred week start day — are stored with your account to personalise your calendar view.

API Keys

If you generate an API key to access your planner data programmatically, the key is stored as a one-way hash (SHA-256). The original key value is shown only once and cannot be retrieved. Key metadata (creation date, last used date, expiry) is stored to allow you to manage active keys.

2. Information Collected Automatically

Server Logs

Our servers log each request with your IP address, the URL path requested, and a timestamp. These logs are used exclusively for security monitoring and diagnosing errors. Logs are retained for 30 days and are not used for profiling or marketing.

Analytics

We use Umami, a privacy-focused, open-source analytics tool hosted on our own infrastructure. Umami collects anonymous page view data (pages visited, referrer, browser type, device type) to help us understand how the application is used. Umami does not use cookies, does not track you across sites, and does not collect any personally identifiable information. No data is sent to third-party analytics services.

Session Cookie

When you log in, we set a single session cookie in your browser to keep you authenticated. This cookie is:

Scoped to simpleweeklyplanner.com only
Marked HttpOnly (not readable by JavaScript)
Transmitted over HTTPS only
Valid for up to 30 days with sliding renewal while you are active

No advertising cookies or third-party tracking cookies are used.

3. How We Use Your Data

To provide the planner service — storing, retrieving, and displaying your tasks and categories.
To authenticate you securely on each visit.
To send transactional emails you explicitly request (password reset, email confirmation).
To diagnose errors and improve the reliability of the service.
To understand aggregate usage patterns via anonymous analytics.

We do not use your data for advertising, profiling, or any purpose beyond operating the service.

4. Third-Party Services

We use the following external service providers. Each receives only the minimum data necessary to perform their function:

Provider	Purpose	Data received
Amazon Web Services (SES)	Transactional email delivery	Your email address and the message content (e.g. password reset link)
Google Fonts	Typeface (DM Sans) loaded in the web interface	Your IP address and browser headers, per Google's standard font CDN behaviour

Your task data, category data, and planner content are never shared with any third party.

5. Data Security

All traffic is encrypted in transit using HTTPS/TLS.
Passwords are hashed using ASP.NET Core Identity's default PBKDF2 algorithm before storage.
API keys are stored as SHA-256 hashes; the plaintext key is never retained.
All database queries are scoped to the authenticated user — you cannot access another user's data.
The application is hosted on infrastructure we control; your data is not stored on shared multi-tenant databases.

6. Data Retention

Account and planner data — retained while your account is active. Accounts that have not been logged into for 6 months are considered inactive and will be permanently deleted, along with all associated tasks, categories, and preferences. We will send a warning email to your registered address before deletion.
Server logs — retained for 30 days, then automatically purged.
Analytics data — anonymous aggregate data with no retention limit; contains no personal information.

7. Your Rights and Controls

Access and correction

All of your planner data is visible and editable directly within the application at any time.

Account deletion

You can permanently delete your account and all associated data (tasks, categories, preferences, API keys) from your account settings:

Delete my account and all data

Deletion is immediate and irreversible. Server logs referencing your IP address will be purged within 30 days on their normal schedule.

API key revocation

Any API keys you have generated can be revoked from your account settings at any time, immediately preventing further access.

8. Children's Privacy

Simple Weekly Planner is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has registered, please contact us and we will delete the account.

9. Changes to This Policy

We may update this policy as the application evolves. The "last updated" date at the top of this page will reflect any changes. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

Questions or requests regarding your data? Contact us at:
[email protected]