Privacy Policy

Interpretation and Definitions

Interpretation

Capitalized words have defined meanings as set out below. These definitions apply whether the terms appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• Company (referred to as "the Company", "We", "Us", or "Our") refers to retirementfigures.com.
• Cookies are small files placed on Your Device by a website, used to store preferences and session information.
• Device means any device that can access the Service, such as a computer, phone, or tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Account means an optional account You may create, using an email address or a supported sign-in (such as Google), to store and sync Your plans. You may also use the Service without an account, in which case Your plan is stored only on Your Device.
• Service refers to the Website and the retirement planning application provided through it.
• Service Provider means any third-party company or individual that processes data on behalf of the Company to facilitate, provide, or support the Service.
• Usage Data refers to data collected automatically through use of the Service or its infrastructure.
• Website refers to retirementfigures.com, accessible at https://retirementfigures.com.
• You means the individual accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

Retirement Figures can be used without an account or with an optional account:

• Without an account, Your planning data - financial account information, income, expenses, and other planning assumptions - is stored only on Your Device (in Your browser's local storage) and is never transmitted to or stored by Us.
• With an account (created using an email address or a supported sign-in such as Google), We store Your account information (such as Your email address and authentication credentials) and Your planning data on Our servers so You can access and sync Your plans across devices. You may optionally enable end-to-end encryption, in which case Your planning data is encrypted on Your Device before it reaches Us and We cannot read it - except for a plan You choose to share with another person, which is stored unencrypted for as long as it is shared (see Security of Your Personal Data below).

In addition, We may collect or receive the following:

• Subscription and billing information - if You subscribe, payment is handled by our payment processor (see below) and We receive limited subscription information (such as status and a customer identifier). An email address You provide at checkout is held by the payment processor.
• Diagnostics and feedback - if an error occurs or You send feedback, We receive technical error details (such as the error, the page or request it occurred on, and Your browser's user-agent string) or the message You submit. These automatic diagnostics do not include Your planning data.
• Support copies of Your plan - if You are troubleshooting with Us, You can choose to export a support copy of Your plan and send it to Us. That file does contain planning data, with names and labels replaced by generic placeholders and, if You choose, every dollar amount scaled by a single factor. It is created and sent only if You choose to send it, and We use it only to investigate the issue You reported.
• Email addresses You give Us for sharing - if You share a plan, We store the email address You enter so We can grant access and send that person one message telling them the plan is waiting. If they do not already have an account, We hold that address as a pending invitation for 14 days, whether or not they ever accept. Please only enter the address of someone who will expect to hear from You. The record of a share, including the address, is kept while the share exists and as history after it is withdrawn, so that You can see who has had access; it is deleted when the plan is deleted or Your account is closed.
• License activation data - to operate the Plus license-key system and discourage sharing, We receive Your license key and a non-identifying installation identifier when Plus is activated on a device.

Optional AI Review: the Service can prepare a copy of Your plan, along with a prompt, for You to paste into a third-party AI assistant (such as Claude or ChatGPT). This happens only if You choose to use the feature; the copying is initiated by You, and any data You paste into a third-party assistant is handled under that provider's terms, not Ours.

Usage Data

Usage Data is collected automatically when using the Service. This includes Your IP address, coarse location derived from it (such as country and city), Your browser's user-agent string, the pages visited, and timestamps. Recent session activity (including Your IP address) is retained only short-term and then automatically deleted; for longer-term unique-visitor statistics We retain only a one-way hashed (non-reversible) form of Your IP address, not the address itself. We do not use browser fingerprinting, advertising identifiers, or cross-site behavioral tracking.

Local Storage and Cookies

Your plan and preferences (such as display settings) are kept in Your browser's local storage on Your Device. If You sign in to an account, We use essential cookies to keep You signed in and to protect against cross-site request forgery; these are not used for advertising or cross-site tracking. Our infrastructure provider (Cloudflare) may set essential security cookies, and our payment processor may set cookies during checkout. None are used for advertising or cross-site tracking.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide and maintain the Service, including monitoring usage and performance.
• To manage Your Account, if You create one, and provide access to features available to You as an account holder, including syncing Your plans across devices.
• To process subscriptions and payments, including managing billing through our payment processor.
• To communicate with You regarding account-related updates, security notices, or service communications when necessary, including by email where applicable.
• To respond to Your requests and provide customer support.
• To improve the Service using aggregated, non-identifying usage data.

Sharing Your Personal Data

We do not sell, rent, or share Your personal data with third parties for marketing or advertising purposes. We may share information in the following limited situations:

• At Your direction, when You share a plan: The Service lets You give another person access to one of Your plans by entering their email address. When You do, We make that plan - all of it - readable by the account You named, for as long as You leave the access in place. You choose whether they can only view it or also change it, and You can remove their access at any time. We do not do this unless You ask Us to, plan by plan and person by person. Sharing also discloses Your email address to the person You share with, and theirs to You, because that is how each side is identified in the Service.
• With Service Providers: We use third-party service providers to help operate and support the Service. These providers may process data on Our behalf for purposes such as payment processing and subscription management, account sign-in, email communications, hosting and cloud storage, security and content delivery, and other operational support. Our current service providers include Stripe (payment processing), Cloudflare (hosting, storage of account and plan data, delivery of the emails We send You such as verification and password-reset messages, cookieless site analytics, security, and content delivery), Namecheap (email hosting for Our support and info mailboxes, which receive and store messages You send to those addresses), Google (used only if You choose to sign in with Google, in which case We receive Your email address and basic profile information to create or access Your account). The in-browser calculation engine is served from Our own infrastructure, so running a projection sends no request to any third party. Service providers are authorized to use Your data only as needed to perform services for Us.
• Business transfers: In connection with a merger, acquisition, sale of assets, financing, or sale of the business, Your personal data may be transferred to the acquiring or successor entity as part of that transaction.
• Legal requirements: We may disclose Your data if required by law or in response to valid legal requests (see Disclosure section below).
• With Your consent: We may share Your information for other purposes if You give Us explicit consent.

Payment Processing

Subscription payments are processed through Stripe Checkout. When You subscribe to a paid plan, You are directed to a Stripe-hosted checkout page to enter Your payment information. We do not directly collect, store, or process payment card details on Our servers. We may receive limited subscription and transaction information from Stripe, such as subscription status, billing dates, and customer identifiers, which We use for account management, billing recordkeeping, and customer support.

Retention of Your Personal Data

If You use the Service without an account, Your plan data lives on Your Device for as long as You keep it in Your browser; We never receive or store it, so there is nothing for Us to retain or delete. If You have an account, We retain Your account information and plans for as long as Your account is active or as needed to provide the Service, and We delete them when You delete Your account, subject to the limited retention described below. Sharing records follow the plan they belong to: withdrawn access is kept as history so You can see who has had it, and both the record and any unaccepted invitation are deleted when the plan is deleted or Your account is closed. The other records We hold (subscription/billing records and any diagnostics or feedback You submit) are retained only as long as necessary for the purposes described here, including legal, accounting, and security needs.

Transfer of Your Personal Data

Your information, including Personal Data, may be processed on servers located outside Your jurisdiction, where data protection laws may differ. Your use of the Service and submission of information constitutes Your agreement to such transfers.

We take reasonable steps to ensure that Your data is treated securely and in accordance with this Privacy Policy.

Delete Your Personal Data

If You use the Service without an account, Your plan data is stored only on Your Device and You are always in control of it: delete it at any time using the "Delete all local data" option in the Service, or by clearing Your browser's storage for this site - no request to Us is needed.

If You have an account, You can delete Your account and the data stored under it using the account management options in the Service, or by contacting Us. For the other records We hold (subscription/billing records, diagnostics, or feedback), You may contact Us to request access, correction, or deletion. We may retain certain information as described in the Retention section above.

Disclosure of Your Personal Data

Business Transfers

If the Company is involved in a merger, acquisition, financing, or sale of assets, Your Personal Data may be among the assets transferred to the acquiring or successor entity. We will make reasonable efforts to notify You before Your data becomes subject to a materially different privacy policy.

Law Enforcement

The Company may be required to disclose Your Personal Data if required by law or in response to valid requests by public authorities.

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us. We use commercially reasonable measures to protect Your data, but no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

Optional End-to-End Encryption

If You have an account, You can optionally turn on end-to-end encryption for Your cloud plans. When it is enabled, Your planning data is encrypted in Your browser using a passphrase that only You know, before it is sent to Us. The passphrase, and the keys derived from it, never leave Your Device, and We store only the encrypted result. As a result, while encryption is enabled, and subject to the one exception described immediately below, We cannot read Your planning data, cannot access it on Your behalf, and cannot disclose its contents to anyone, including in response to a legal request.

Sharing a plan is the one exception. If You share a plan with another person, that plan cannot remain end-to-end encrypted: We would be handing them a file that only You can decrypt, which would be useless to them. So a shared plan is stored in a readable form for as long as it is shared. This means that, for that plan and only that plan, We can read it and could be required to disclose it in response to a valid legal request. Your other plans are unaffected and stay encrypted. If You remove everyone's access, the plan is encrypted again the next time You unlock the Service on a device that holds Your passphrase. The Service warns You of this before You share an encrypted plan.

This encryption passphrase is separate from Your account password. Because only You hold it, there is no way for Us to recover it. If You forget Your encryption passphrase, Your encrypted plans cannot be recovered by Us or by anyone else. A plain (unencrypted) backup file that You export from the Service is the only way to recover Your plan in that case, so We strongly encourage keeping a current export somewhere safe.

Encryption is optional and off by default. Whether or not encryption is enabled, We can still see limited non-content information such as that an account has plans, their number and approximate size, and when they were last changed. Exported backup files are not encrypted, so that they remain portable to other tools; treat them as sensitive and store them securely.

Children's Privacy

The Service is not intended for or offered to anyone under the age of 18, and We do not knowingly collect personal data from anyone under 18. If You are a parent or guardian and believe a minor has provided Us with Personal Data, please contact Us so We can take steps to remove that information.

Links to Other Websites

Our Service may contain links to websites not operated by Us. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

For material changes, We will make reasonable efforts to notify You, such as by posting a notice on the Service. We encourage You to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, contact us at info@retirementfigures.com.