Privacy Policy

Last updated: July 28, 2026

Plandeline (“we,” “us”) builds apps that store your data in your own Google Drive, not ours. This page explains what we collect, where it lives, and what control you have over it.

What we collect

When you sign in with Google, we receive:

• Your email address and display name, from your Google account.
• A Google OAuth refresh token, used to access Google Drive and Sheets on your behalf. This token is scoped to files Plandeline creates (drive.file) and a private app-data folder (drive.appdata). It cannot see or touch the rest of your Drive.

We do not sell, rent, or trade your personal information to anyone, for any purpose. We do not use analytics, advertising, or tracking scripts of any kind. We don’t know what foods you log, what your data says, or how you use the app beyond what’s needed to keep you signed in.

Where your data lives

Everything you enter into a Plandeline app (foods logged, reactions, notes, and so on) is written directly to a Google Sheet in your own Google Drive. We never copy that data to our own database, because we don’t have one. You own the Sheet; you can open it, export it, back it up, share it, or delete it independently of Plandeline at any time.

What we store on our servers

Our authentication server (a Cloudflare Worker) stores only what’s needed to keep you signed in: your Google refresh token, email, and display name, associated with an opaque session id in an encrypted key-value store. That session id is set as an httpOnly cookie in your browser and expires automatically after 90 days of inactivity. Access tokens minted from your refresh token are held in memory in the app and are never written to disk, localStorage, or any cookie.

If you don’t sign back in within 90 days, that session record is deleted automatically. If you ask us to delete it sooner (see “Your control over your data” below), we do so within 30 days. If Plandeline ever shuts down, we will delete all remaining session records from our servers as part of winding down. The data in your own Google Drive is unaffected, since it was never ours to hold.

Separately, we keep one small, permanent record per account: your email address, display name, and the date you first signed up. Unlike the session above, this record doesn’t expire automatically; we keep it for as long as you have a Plandeline account, so we have a way to support you if you contact us and so we know who has an account at all. See “Email communications” below for the one additional thing this record is used for.

Email communications

When you create a Plandeline account, we ask whether you’d like occasional emails about new features and product updates. This is opt-in, not automatic. If you don’t respond or say no, we won’t email you. You can turn it on or off at any time from Account → Email updates in the app. We never sell, rent, or share your email address, and we don’t use it for anything beyond what’s described on this page.

Separately, if we ever make a material change to this Privacy Policy or our Terms of Service, we’ll email every account holder about it. This applies regardless of your marketing-email preference, since it’s an account notice rather than marketing.

Cookies

Plandeline sets one cookie, used only to keep you signed in. It’s httpOnly (invisible to page JavaScript), sent only over HTTPS, and expires after 90 days of inactivity. We don’t use any other cookies, and we don’t use cookies for advertising or for tracking you across other sites.

Third parties

We rely on two infrastructure providers to run Plandeline: Google (sign-in and Drive/Sheets storage) and Cloudflare (hosting our authentication server and session storage). Neither is used for advertising or analytics on our behalf. Their handling of your data is governed by their own privacy policies.

Your control over your data

• Revoke Plandeline’s access at any time from your Google Account permissions page.
• Delete or edit the underlying Google Sheet directly in Google Drive, same as any other file.
• Turn marketing emails on or off anytime from Account → Email updates in the app.
• Request deletion of your session record and your permanent account record (email, display name, marketing preference) from our servers by emailing support@plandeline.com; we’ll delete both within 30 days of your request.

Children’s privacy

Plandeline accounts are for adults only. You must be at least 18 years old to sign in and hold an account. If you’re a parent or caregiver using First Foods Tracker to log your child’s food and reaction history, you are the account holder. We don’t collect your child’s name, birthdate, or any other identifying information about them beyond whatever you choose to type into your own Google Sheet, and, as described above under “Where your data lives,” that information is written directly to your Drive and never touches our servers. We have no visibility into it at all.

Data breach notification

If a security incident compromises your personal information, we will notify affected users without undue delay, consistent with applicable law.

Changes to this policy

If this policy changes, we’ll update the date at the top of this page and, for material changes, add a visible notice here describing what changed and email every account holder about it (regardless of your marketing-email preference; see “Email communications” above). Continued use of Plandeline after a change means you accept the updated policy.

Governing law

This policy, and any dispute related to Plandeline, is governed by the laws of the State of Wisconsin, without regard to its conflict-of-law principles.

Contact

Questions about this policy or your data? Email support@plandeline.com.