Privacy Policy

Nicgot AB — Org. no. 556794-9127 — Sweden, is the data controller for the processing of your personal data. You can reach us via our contact form.

2.1 Information you provide

• Email address
• Profile information you choose to add (name, profile photo)
• Planning data: meals, dishes, ingredients, activities, to-dos and shopping-list items
• Family information you enter (names and photos of family members, kids schedule)
• Notes, links and files you attach to meals or activities

2.2 Local mode (no account)

If you use OurPlanza without an account, everything you enter is stored only in your browser's local storage on your own device and is never sent to us.

2.3 Automatically collected information

• Device information (e.g. device type, operating system)
• Log data (sign-in times, use of features)
• IP address (for security and technical operation)

We process your personal data to:

• Create and administer your account
• Sync your plan across your devices
• Share your plan with the family members you invite
• Send service emails you request or enable (invites, planning reminders, replies to your messages)
• Provide and improve the service
• Maintain security and prevent abuse

We never use your personal data to sell to third parties.

For users within the EU, we process personal data based on:

• Contract (to provide the service)
• Legitimate interest (for security and improvement of the service)
• Consent (where required — you can withdraw consent at any time)

We:

• Never sell personal data
• Never share personal data with third parties for marketing purposes

We may share data with:

• Technical service providers (e.g. hosting, cloud services, email delivery)
• Authorities when required by law

All providers are bound by agreements that protect your data.

OurPlanza's database and files are stored on servers within the EU (primarily Frankfurt, Germany) with our cloud provider. Some subprocessors (e.g. for email delivery or error reporting) may be established outside the EU/EEA. When personal data is transferred to such countries we ensure the transfer complies with applicable data protection legislation, for example through:

• The European Commission's Standard Contractual Clauses (SCC)
• The EU–US Data Privacy Framework where applicable
• Other approved safeguard mechanisms

We store your personal data as long as:

• Your account is active
• It is required to provide the service
• It is required by law

When your account is deleted, your data is removed or anonymized within a reasonable time, unless a legal obligation requires continued storage. Data in local mode is deleted by clearing your browser's site data.

Depending on your jurisdiction, you may have the right to:

• Access your data
• Request rectification of inaccurate data
• Request erasure
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw consent

For users in the EU, rights under the GDPR apply. To exercise your rights, contact us via our contact form.

We take technical and organizational measures to protect your data against unauthorized access, loss, misuse and unauthorized alteration:

• In transit: all traffic between your device and our servers is encrypted with HTTPS/TLS
• At rest: the database, backups and files are encrypted at storage level (AES-256)
• Passwords are never stored in plain text, only as salted hashes with our authentication provider
• Every row in the database is protected by Row-Level Security (RLS), ensuring you can only read and change your own data — and what you share with your family
• Daily encrypted backups are handled by our cloud provider
• Only a very limited number of administrators have technical access to the production environment, and only for operations, support and troubleshooting

In the event of a personal data breach likely to result in a risk to your rights, we will inform the supervisory authority within 72 hours and affected users without undue delay, in accordance with GDPR articles 33–34. No digital service can, however, guarantee complete security.

OurPlanza is a planning tool used by parents and guardians. Adults may register children's first names and schedules for planning purposes. We do not knowingly collect personal data directly from children under 13.

OurPlanza uses cookies and similar technologies (such as local storage) for:

• Sign-in functionality
• Security
• Remembering your preferences
• Usage analytics (optional)

The first time you visit OurPlanza you can choose between "Only necessary" and "Accept all". You can change your choice at any time via the Cookies button on the right edge of the page.

We may update this Privacy Policy. In the event of significant changes, users are informed by email or in the service.

If you have questions about this policy or how we process your data, contact us via our contact form. Users within the EU have the right to lodge a complaint with the relevant data protection supervisory authority (in Sweden: Integritetsskyddsmyndigheten, IMY).