Privacy Policy

Last updated: [EFFECTIVE DATE]
PrivacyTerms of Service
Draft for review. This is a working draft, not legal advice. It should be reviewed by a qualified attorney and completed with the bracketed details before it goes live.

WyPlan ([LEGAL ENTITY NAME], "WyPlan," "we," "us") helps you turn a savings goal into a contribution plan and stay on track. This policy explains what we collect, why, and the choices you have. WyPlan is a planning and accountability tool — you enter your own amounts. We never connect to your bank, access your financial accounts, or move money on your behalf.

1. Information we collect

Information you give us

  • Account: your name and email address, and a password (stored only as a secure hash — we never see it in plain text).
  • Your plans: the goals you create, the amounts and schedules you set, the contributions you log, and your reminder preferences.
  • Communications: messages you send us for support.

Information we collect automatically

  • Technical data: basic server logs such as IP address, browser type, and timestamps, used for security and reliability.
  • Product analytics: limited, privacy-respecting usage events to understand how features are used [via ANALYTICS PROVIDER, or "we do not use third-party analytics"].

We do not collect bank credentials or transaction data, and we do not buy personal information about you from data brokers. Payment card details for any future paid plan would be handled by our payment processor [PROCESSOR], not stored by us.

2. How we use your information

  • To provide WyPlan — build your schedule, track progress, and show your plan.
  • To send the reminders and transactional emails that are core to the service (verification, password resets, contribution nudges).
  • To keep WyPlan secure, prevent abuse, and debug problems.
  • To improve the product and, where you've opted in, send occasional product updates.

We do not sell your personal information, and we do not use your plans or amounts for advertising.

3. Legal bases

Where applicable law (such as the GDPR) requires a legal basis, we rely on: performance of our contract with you (to provide the service), your consent (for optional emails or analytics), and our legitimate interests (security and product improvement). [Confirm with counsel for your jurisdictions.]

4. How we share information

We share personal data only with service providers who help us run WyPlan, under contract and only as needed:

  • Email delivery: [Resend / email provider], to send verification, reset, and reminder emails.
  • Hosting & infrastructure: [hosting provider], where our application and database run.
  • [Analytics / error monitoring providers, if any.]

We may also disclose information if required by law, or to protect the rights, safety, and security of WyPlan and its users. If WyPlan is ever involved in a merger or acquisition, we'll notify you before your information becomes subject to a different policy.

5. Cookies

We use a small number of cookies that are strictly necessary to keep you signed in and keep the service secure. [If analytics cookies are used, describe them and any consent mechanism here.]

6. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal data and your plans, except where we must retain limited records to comply with legal obligations or resolve disputes. [Specify retention periods with counsel.]

7. Your rights and choices

  • Access & export: you can view your data in the app and request an export.
  • Correction: you can edit your account and plans at any time.
  • Deletion: you can delete your account from Settings, which removes your data as described above.
  • Email preferences: you can manage reminder settings in the app and unsubscribe from non-essential emails.

Depending on where you live, you may have additional rights (for example, under the GDPR or CCPA). To exercise any right, contact us at [CONTACT EMAIL].

8. Security

We protect your information with encryption in transit, hashed passwords, and access controls. No system is perfectly secure, but we work to safeguard your data and will notify you and regulators of a breach where required by law.

9. Children

WyPlan is not intended for anyone under [16 / 18], and we do not knowingly collect information from them.

10. International transfers

We operate from [COUNTRY/REGION]. If you access WyPlan from elsewhere, your information may be processed where we and our providers operate. [Add transfer safeguards, e.g. SCCs, if serving the EU/UK.]

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email or in the app before they take effect.

12. Contact

Questions? Reach us at [CONTACT EMAIL].