Privacy Policy
Effective October 9, 2026
BluePhoenix Planner (“the app”, “we”, “us”) is a personal planner available at bluephoenixplanner.com, operated by BluePhoenix Spiritual Alchemy (Sarah L. Harris), based in California, USA. This policy explains what information the app collects, how it’s used, and the choices you have. Questions? Email hello@bluephoenixplanner.com.
The short version
- Your planner is private. Only you can see your information, except anything you choose to share with a gratitude circle.
- We don’t sell your data, show ads, or share your information with anyone for their own use.
- Google Calendar access is optional and read-only, and is used only to show your events to you.
- Documents you upload to find dates are read on your device and never sent to us.
- You can delete your account, and everything in it, at any time.
Information we collect
Your account
Your email address and password. Passwords are never stored in readable form; they are securely hashed by our sign-in provider.
What you put in your planner
Events, priorities, reminders, to-dos, notes, gratitude and accomplishment entries, your theme and settings, and records of dates you imported (so an import can be undone).
Google Calendar (only if you connect it)
If you choose to connect Google Calendar, we receive:
- the email address of the Google account you connect, so you can see which account is connected;
- events from your primary Google Calendar, and from any calendars shared with you that you choose to add, from about 3 months in the past to 12 months ahead: each event’s title, date and time, location, description, and reminder settings (so the planner can remind you at the times you chose in Google);
- access keys from Google that let the app refresh those events. These are stored only on our server and are never sent to your browser.
The access we request is read-only
(calendar.events.readonly). The app cannot create, change,
or delete anything in your Google Calendar.
Calendars you add by link (only if you add one)
If you add a calendar by its subscription link (for example from Apple iCloud, Outlook, or a school), our server stores the link and uses it to read that calendar’s events: each event’s title, date and time, location, and description, from about 3 months in the past to 12 months ahead. The link is kept on our server and is never shown in the app again. Removing the calendar deletes the link and its imported events.
Gratitude circles (only if you start or join one)
Circles are small, private, invite-only groups. If you join one, its members can see the display name you choose for circles, anything you share there, and your reactions. They never see your email address, your planner, or anything you haven’t shared. Shared posts are a copy: changing your planner later doesn’t change them.
Notifications (only if you turn them on)
If you turn on notifications on a device, we store that device’s push address and encryption keys, a short label like “iPhone · Safari,” your reminder choices, and your time zone. Reminders are delivered through your browser’s push service (Apple, Google, or Mozilla, depending on your device); they’re encrypted, so the push service can’t read them. A notification shows the event’s name, time, and place, or for gratitude circles, a member’s display name, the circle’s name, and the start of what they shared, unless you turn off “Show names, event details, and what was shared” in Settings. Circle notifications can be turned off separately from event reminders. Signing out turns notifications off on that device.
Messages you send us
When you contact us from the app's Help & Contact page, we keep your message and your account's email address so we can reply. If you report a post in a circle, we also keep a copy of that post and the display name it was shared under, so we can review it. Messages are emailed to us through our email provider and are deleted along with your account.
Documents you upload to find dates
When you upload a PDF or photo on the Upload page, it is read entirely on your own device to find dates. The file is never sent to us or stored. If you choose the “Use your own AI” option, you use your own AI service (such as Claude, ChatGPT, or Gemini) under that service’s own privacy policy; we only receive the text you paste back into the app.
How we use your information
Only to provide the app’s features to you: showing your planner and calendar, saving your changes, sending account emails (like confirming your email or resetting your password), and keeping the app secure. We do not use your information for advertising, and we do not use it to train artificial intelligence models.
Google user data
BluePhoenix Planner’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- Google Calendar data is used only to show your own events to you inside the app.
- It is not sold, not used for advertising, and not transferred to anyone else, except to the service providers listed below that store and run the app for us, or if required by law.
- No person reads your Google data unless you ask us to for support, it’s needed for security (such as investigating abuse), or it’s required by law.
Who helps us run the app
We use a few service providers, who process data only to run the app for us:
- Supabase: secure database and sign-in (stores your account and planner).
- Cloudflare: hosts the website and handles our domain’s email forwarding.
- Resend: sends account emails such as sign-up confirmations and password resets, and delivers messages you send us from the app.
- Google: only if you connect Google Calendar.
How your information is protected
- All connections use encryption (HTTPS).
- Database rules ensure each person can only ever read and change their own information.
- Google access keys are kept on our server, where browsers can’t read them.
- On shared computers you’re signed out automatically after 30 minutes of inactivity or when you close the app.
Information kept on your device
If you choose “Keep my planner on this device,” a copy of your planner is saved on that device so it opens quickly and works offline, and you stay signed in there. You can turn this off in Settings, and signing out always erases it.
Keeping and deleting your information
- We keep your information while your account is open.
- Disconnect Google Calendar (Settings → Connected Calendars) at any time. This deletes the imported events and our access keys, and asks Google to cancel our access. You can also remove access at myaccount.google.com/permissions.
- Remove a calendar you added by link (Settings → Apple, Outlook & other calendars) at any time. This deletes the link and the events it imported.
- Stop sharing or leave a circle at any time. Leaving a circle (or being removed from it) deletes everything you shared there and your reactions there. The person who looks after a circle can also remove posts in it.
- Delete your account (Settings → Delete my account) at any time. This permanently deletes your account and everything in it, including any Google Calendar connection and everything you shared in circles. Copies in our providers’ routine backups are removed as those backups expire, typically within 30 days.
- You can also email us to ask what information we hold about you or to delete it.
Your California privacy rights
If you live in California, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined under California law. To make a request, email us.
Children
The app is not intended for children under 13, and we don’t knowingly collect information from them.
Changes to this policy
If we change this policy, we’ll update the date above. For significant changes, we’ll let you know in the app or by email.
Contact
BluePhoenix Spiritual Alchemy (Sarah L. Harris), California, USA · hello@bluephoenixplanner.com