Privacy Policy

CANAV Software · Effective date: August 5, 2026

Planzee ("Planzee", "the app", "we", "us") is a personal-finance calendar published by CANAV Software. This policy explains what personal data we process, why, who we share it with, how long we keep it, and the rights you have — including under the laws of the United States, Canada, Mexico, Brazil and other Latin American countries. It also serves as our privacy notice (aviso de privacidad) for users in Mexico. By using Planzee you acknowledge this policy.

1. Data you provide

• Account: email, name, username, country, gender (optional), and a password (stored only as a secure Argon2 hash). If you sign in with Google, we receive your Google email, name and profile photo — never your Google password.
• Financial planning data you enter: cards (name, bank, last 4 digits, cut-off and due dates — never full card numbers, CVV, PINs or bank credentials), card type and balances you type in, payments, amounts, income, categories and reminder preferences.
• Support: messages or bug reports you send us.

2. Data collected automatically

• Device & diagnostics: device model, OS version, app version, language, IP address and coarse (non-precise) location derived from it, and crash/diagnostic data.
• Advertising (free tier): ads are served by Google AdMob, which may process your device advertising ID (AAID), device info, IP-derived coarse location and ad-interaction data. Where required (EEA/UK and applicable US states) we request consent before any ad loads via Google's User Messaging Platform; you can review or withdraw it from Profile → Privacy options. Paid plans show no ads.
• Push tokens: if you enable push, we store your device's notification token (Firebase Cloud Messaging) to deliver reminders.

3. AI recommendations

If you request an AI recommendation, we send a summary of your own financial planning data (income, upcoming payments, card balances you entered — no account numbers or credentials) to our AI provider DeepSeek to generate suggestions. Only your own data is sent, for that request. We keep the AI's text response and token-usage metadata to provide history and manage limits. This feature is optional — if you never use it, no data is sent to the AI provider.

4. Subscriptions & purchases

Paid plans are sold through the Apple App Store / Google Play and managed via RevenueCat. Those providers process the purchase and payment — we never see or store your card or bank details. We receive only entitlement information (which plan is active and when it renews/expires) to unlock features.

5. Sharing features

If you choose to share a card or calendar with another person, the data you share (and your public profile: name, username, avatar) becomes visible to that person. This happens only at your direction, and you can revoke a share at any time.

6. How we use your data

To provide and secure the service; generate reminders and (if requested) AI recommendations; manage subscriptions and plan limits; send transactional email; show ads on the free tier; and comply with legal obligations. Depending on your region, our legal bases are your consent, performance of our contract with you, our legitimate interests in operating and securing the app, and legal compliance. We do not sell your personal information for money, and we do not share your financial planning data with third parties for their own marketing.

7. Service providers (sub-processors)

We rely on a small set of providers who process data on our behalf under their own terms: Google (Sign-In, AdMob ads, Firebase Cloud Messaging), RevenueCat and the Apple/Google app stores (subscriptions), DeepSeek (AI recommendations), Mailgun (transactional email), and our cloud hosting provider (servers).

8. International data transfers

Our servers and some providers are located outside your country, so your data may be transferred to and processed in the United States, the European Union or elsewhere. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Data retention & deletion

We keep your data while your account is active. You can delete your account and all associated data at any time from Profile → Settings → Delete account, or by following these instructions. Deletion is permanent and completed promptly (within 30 days for email requests). Anonymized or aggregated records, and data we must retain for security, fraud-prevention, accounting or legal reasons, may be kept for a limited period.

10. Security

All traffic uses HTTPS. Passwords are hashed with Argon2id. Sessions use short-lived access tokens with revocable refresh tokens; device credentials are kept in the platform's encrypted storage. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

11. Your privacy rights

Wherever you live, you can access, correct, export, or delete your data, and withdraw consent, using the in-app controls or by contacting us (Section 13). We will not discriminate against you for exercising these rights.

• United States (California — CCPA/CPRA and similar state laws): you have the right to know the categories and specific pieces of personal information we collect, to delete it, to correct it, and to opt out of "sale" or "sharing" for cross-context behavioral advertising. We do not sell your personal information. Ad personalization can be limited through the in-app privacy options and your device settings.
• Canada (PIPEDA): we collect, use and disclose personal information only with your knowledge and consent (except where the law permits otherwise), for the purposes described here; you may access and correct your information and challenge our handling of it.
• Mexico (LFPDPPP): this notice is our aviso de privacidad. You may exercise your ARCO rights (Access, Rectification, Cancellation, Opposition) and limit or revoke your consent by contacting us at the address below.
• Brazil & Latin America (LGPD and local data-protection laws): you may confirm processing, access, correct, anonymize, port or delete your data, obtain information about sharing, and revoke consent. We honor equivalent rights under the data-protection laws of your country (e.g., Argentina, Colombia, Chile, Peru).

12. Children

Planzee is a financial tool intended for adults and is not directed to children under 13 (or the applicable age of digital consent in your region, e.g., under COPPA in the US). We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

13. Contact & how to exercise your rights

CANAV Software — privacy contact: privacy@pablocabrera.dev. To exercise any right above, email us from your account address; we may verify your identity before acting. See also how to delete your data and our Terms of Service.

14. Changes

We may update this policy; material changes will be announced in the app, and the effective date above always reflects the current version.