Language

Privacy Policy

Last updated: 18 October 2026

Who operates this app

Plan 2026 is a planning and task-management web app operated by Daniel Fitzgerald. The live demo is hosted at plan2026.ca.

Information we collect

When you sign in, we receive basic profile information from your identity provider (such as name, email address, and profile picture).

You may create tasks, plans, attachments, and sharing settings. We store that content in our database so the app can show it to you and to people you share with.

If you connect Google Calendar, we store OAuth tokens needed to create or update the events you ask for. Which Google data we access, and the limits on that data, are described in Google user data below.

How we use information

We use your information only to run the app: sign-in, saving your tasks and plans, sharing plans you authorize, optional calendar event creation, and remembering your language and theme preferences.

We do not sell your personal information. We do not use your task or plan content to train AI models. Further limits on Google user data are in the Google user data section below.

Google user data

Plan 2026 requests Google user data only for the features described here. You can sign in and use tasks and plans without connecting Google Calendar.

What we access for sign-in: basic Google profile information — your name, email address, and profile picture. We use it to create your account, keep you signed in, and show your name in the app. Sign-in does not request Calendar access.

What we access for Calendar: only if you choose Add to Calendar on a task, or connect Google Calendar in Settings, we request the scope https://www.googleapis.com/auth/calendar.events. We use that scope only to create or update the events you ask for (the task title, description, and due date you entered). We do not use it to read or change the rest of your calendar.

How we store and protect it: your Google profile fields are stored on your Plan 2026 account. OAuth tokens Google issues (access token, refresh token, expiry, and granted scopes) are stored on the linked account record in our database. For events we create, we also store the event id and link so a later Add to Calendar updates that event instead of creating a duplicate. Tokens are sent only to Google over HTTPS to perform the action you requested. They are not shown in the app.

We do not sell Google user data. We do not share it with third parties except as needed to provide the feature: with Google, to complete sign-in and the calendar actions you request, and with the hosting and database providers described under Hosting and service providers, which process it only to operate Plan 2026. We do not share Google user data for advertising.

Sign-in providers

You can sign in with Google or Facebook. Each provider’s privacy policy applies to how that provider handles your account data during sign-in.

Facebook sign-in is available. When you sign in with Facebook, we receive only your public_profile (your name and profile picture) and your email address.

We use your name, email address, and profile picture only to sign you in and to display your account in the app. We never post to Facebook, read your friends list, or access any other Facebook data.

You can remove Plan 2026 from your Facebook account at any time in Facebook Settings → Apps and Websites. Removing the app stops future Facebook sign-ins; to also delete the data we store about you, see “How to delete your data” below.

Sharing and public links

When you invite someone to a plan or create a share link, people with that link can view (and in some cases update) the content you shared. Do not share links with anyone you do not trust.

Cookies and local storage

We use session cookies to keep you signed in, and cookies for language and theme preferences. These are required for normal use of the app.

Hosting and service providers

The app is hosted on Vercel. Data is stored in PostgreSQL. File attachments may be stored with Vercel Blob when that feature is enabled. Google provides sign-in and optional Calendar API access.

Data retention

We keep your account data while you use Plan 2026. If you stop using the app, we may retain data until you ask us to delete it or until we no longer need it to operate the service.

How to delete your data

You can request deletion of your Plan 2026 account and the personal data we store about you at any time. You do not need to keep using the app to make this request.

To request deletion, email us at danfour@gmail.com with the subject line “Plan 2026 data deletion request” and include the email address you used to sign in (Google or Facebook). You may also contact us by phone or GitHub using the details in the Contact section below.

When we process a deletion request, we delete your user profile, tasks, plans, plan shares you created, session records, OAuth tokens stored by the app (including Google Calendar access tokens), and file attachments linked to your account from our database and attached storage. Deletion is permanent and cannot be undone.

If you signed in with Facebook, you can also remove Plan 2026 in Facebook Settings → Apps and Websites. Removing the app there stops future Facebook sign-ins. To delete the Plan 2026 data we store, use the email request above. If Facebook sends a data-deletion callback, we delete your Facebook sign-in link (and your whole Plan 2026 account, if Facebook was your only sign-in method). You can then check the result at /privacy/deletion-status with the confirmation code Facebook shows you.

If you only want to remove Google Calendar access but keep your account and tasks, sign in and use Settings to disconnect Google Calendar instead of requesting full account deletion.

Changes

We may update this policy as the app changes. The “Last updated” date at the top will change when we do.

Contact

Plan 2026 is operated by Daniel Fitzgerald (Fredericton, New Brunswick, Canada). To request deletion of your account and stored data, email danfour@gmail.com with the subject “Plan 2026 data deletion request” and the email address you used to sign in (Google or Facebook). You can also reach us by phone or GitHub:

Email a data deletion request

  • Email: danfour@gmail.com
  • Phone: 506-471-3031
  • GitHub: github.com/danfour649

Sign in

People do not read Google user data unless you consent (for example you ask us for help with your account), access is needed for security, or the law requires it.

How to revoke access: in Settings, choose Disconnect Google Calendar to remove the Calendar access stored by the app. You can also revoke Plan 2026 at any time under your Google Account permissions. Until you connect again, Plan 2026 cannot create or update calendar events.

How to delete this data: disconnecting Google Calendar removes the OAuth tokens we store for Calendar. To delete your account, Google profile data, and the other personal data we hold, use How to delete your data below. We aim to complete verified deletion requests within 30 days.

Plan 2026 does not use Google user data, including Calendar data, to develop, improve, or train generalized AI or machine-learning models.

Plan 2026's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We aim to complete verified deletion requests within 30 days and will confirm by email when your data has been removed.