Privacy Policy

Passion Planner (“the app”, “we”) is a personal digital day-planner that lets you plan your day, time-block your hours, keep them in two-way sync with your Google Calendar, attach files from your computer to tasks via your own Google Drive, and take notes. This policy explains what data we handle and why. Questions: shrivasshivansh@gmail.com.

We only collect what the planner needs to work:

• Google account basics — your name, email address, and profile picture, used to sign you in and show who you are.
• Google Calendar data — we read your calendar list and events to display your schedule, and we create or update events for the time-blocks you make in the planner. We do not read events to do anything else.
• Google Drive files you attach — when you attach a file to a task, it is uploaded to your own Google Drive using the minimal drive.filepermission, which only lets the app access files it created. We store only the file's name, type, size, and a link to it — the file itself lives in your Drive. If a task is synced to Google Calendar, its attachments are also linked on that calendar event.
• Planner content you enter — your daily focus, goals, tasks, subtasks, comments, journal reflections, moods, notes, and free-space writing.
• Authentication tokens — Google access and refresh tokens, stored so we can keep your calendar and attachments working without asking you to sign in repeatedly.

Your data is used solely to provide the planner's features to you: signing you in, displaying your schedule, two-way syncing your time-blocks with Google Calendar, and saving your plans and reflections. We do not use it for advertising, profiling, or any unrelated purpose.

Passion Planner's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, Google Calendar and Google Drive data is used only to provide and improve the user-facing planner features you interact with. It is never sold, never used for advertising, never used to train generalized AI models, and never transferred to others except as needed to provide the service or as required by law.

Some features (such as breaking a task into subtasks or suggesting a plan for your day) use large-language-model providers to generate suggestions. These run only when you use the feature, and we send the minimum needed to do the job: the task you're working on, and short, distilled summaries of your planning patterns. We do not send your raw journal entries, note bodies, calendar event titles, attendees, or attachment contents to AI providers. AI providers process this data to generate the response you requested; we do not use your data to train models. Suggestions are always yours to accept, edit, or dismiss.

Planner content and tokens are stored in a Postgres database hosted on Neon, and the app runs on Vercel. These providers process data on our behalf to operate the service. Google Calendar data itself remains in your Google account, and attached files remain in your own Google Drive; we only cache the minimum needed to render, sync, and link.

We do not sell your data and do not share it with third parties for their own use. Data is shared only with Google (to perform the calendar sync and Drive uploads you requested), with AI providers (only the minimal data described in “AI features”, only when you use those features), and with our infrastructure providers (Neon, Vercel) acting strictly as processors.

We keep your data while your account exists. You can permanently delete your account and all associated data at any time from Settings → Delete account; this immediately removes your planner content, cached calendar data, attachment links, and stored tokens from our database. Files previously uploaded to your Google Drive remain in your Drive under your control. You can also revoke the app's access from your Google account permissions. To request deletion by email, contact shrivasshivansh@gmail.com.

Access to your data is scoped to your account, data is transmitted over HTTPS, and tokens are stored server-side. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

For any questions about this policy or your data, email shrivasshivansh@gmail.com.