Privacy policy

What we collect

• Account: your email address, an optional name, your language and time zone. Passwords are stored only as a salted hash, never in readable form.
• Sign in with Google or Apple: we receive your email address and name from them, never your Google or Apple password.
• Your planks: when you planked and for how long, optional notes, whether it was timed or logged afterwards, plus your badges and challenge progress.
• Videos: if the video feature is switched on for you, a video you record while planking. It is stored privately and shown only to the groups you are in.
• Groups: which groups you belong to, the name you use there, the activity feed and high fives.
• Notifications: your browser or phone's push address (a web push subscription or an Apple device token) and your reminder time.
• Technical data: IP address and browser or device details in short-lived server logs, used for security and to prevent abuse. Sign-in attempts are logged for 3 days.
• Before you sign up: if you time a plank on our website and join the waiting list, we keep that plank together with your email address so it is waiting in your account.

How we use it

• To run Planker: record your planks, show your progress and share them with the groups you choose.
• To send what you would expect: invitations, waiting-list messages, group activity emails (you can mute any group) and your daily reminder.
• To keep the service safe and working.

We do not sell your data. There is no advertising in Planker and no advertising or tracking cookies.

Who can see your data

• Members of a group you join see your display name, your planks, badges and videos shared in that group.
• The person who runs a group (its owner) can also see members' email addresses and weekly totals on the group dashboard.
• Nobody else. Planker has no public profiles and no public feed.

Service providers

We use Cloudflare to host the app and store data (databases and video storage), to send email and for the bot check on the waiting-list form. If you choose to sign in with Google or Apple, those companies handle that sign-in. Notifications are delivered through Apple's, Google's or your browser's push service. These providers process data only to provide their service to us.

Cookies and storage on your device

• A sign-in cookie that keeps you signed in for 30 days.
• A language cookie if you pick a language.
• A cookie that holds a plank you timed before signing up (1 year, or until it is claimed).
• Local storage in your browser to make pages load faster and remember settings.

None of these are used for advertising or tracking across sites.

How long we keep it and how to delete it

We keep your data while your account exists. To delete your account, write to support@planker.app from the address on your account. We then delete your account, planks, videos, group posts and notification settings, and remove you from groups. We act on requests within 30 days.

Your rights

You can ask us for a copy of your data, to correct it, to delete it or to stop certain uses. If you are in the EU, UK or a similar region you also have the right to complain to your data protection authority. Write to support@planker.app.

Children

Planker is not meant for children under 16, and we do not knowingly collect data from them. If you think a child has an account, tell us and we will delete it.

Security and transfers

Data is encrypted in transit, passwords are hashed, and access is limited to what is needed to run the service. Our providers operate worldwide, so your data may be processed outside your country under appropriate safeguards.

Changes

If we change this policy in a meaningful way we will say so in the app or by email, and update the date above.