Privacy notice
In short: your plan figures never leave your device. Simple mode needs no account. Advanced mode (an invite-only beta) uses an email sign-in; the account holds only your email address, a marketing choice and an access flag. Optional feedback sends only what you type. There are no analytics, adverts or tracking.
1. Who we are and how to contact us
UK Retirement Planner is a free planning calculator run by its independent developer (GitHub: aggallim), who is the controller of the personal data described here.
For anything about your data, email .
You can also send a privacy or data request through the feedback form (choose "Privacy or data request" and include an email address so we can reply). Those requests are handled by the developer personally, not sorted by the AI assistant described in section 4.
2. What stays on your device
Everything you enter into the planner (ages, balances, contributions, spending, names) is saved in your browser's local storage on your device. It is never uploaded to us or anyone else. Export creates a file on your device; what you do with it is up to you. To remove your plan from a device, use Reset. Signing out doesn't clear it.
3. If you create an account
Accounts exist only to unlock Advanced mode, which is an invite-only beta: only invited addresses can create an account, and no email is sent to any other address. When you ask for a sign-in link we hold:
- your email address;
- whether you want product news and offers by email (unticked unless you tick it), when you chose, and which wording you saw;
- whether your account has Advanced access;
- the technical records Supabase keeps to run sign-in (sign-in times, and session tokens, which are also stored in your browser so you stay signed in).
Your plan figures are never stored in the account. Lawful basis: providing the service you asked for (contract) for sign-in and access; your consent for marketing emails. A marketing choice only counts once you've confirmed the address by opening the sign-in link. We record the time of each change to your choice, and the wording you saw, as evidence of consent. We don't send marketing emails yet; when we do, every one will include a one-click unsubscribe link, and you can change your choice at any time in the account panel (⚙ Data → Account).
4. If you send feedback
The feedback form sends only what you type: the kind of feedback, your message, any steps or example figures, an optional email address, and the app version. It passes through a small Cloudflare Worker and is stored as an issue in a private GitHub repository. An AI assistant (Anthropic's Claude) reads new issues once a day to sort and summarise them; it is instructed never to repeat email addresses. Please don't include names, account numbers or exact balances. To limit abuse, the Worker counts submissions per network address for one hour, storing only a keyed hash of the address, never the address itself. Lawful basis: our legitimate interest in improving the app and replying to you.
5. Sharing your plan with an AI assistant
"Share with your AI assistant" builds text from your plan, with names removed, for you to copy into an assistant of your choice. It still includes your figures and ages. Nothing is sent by us: you choose whether to paste it, and the assistant's own privacy terms apply. The optional MCP server runs the same calculations for an assistant you connect; it keeps no plan data, and Cloudflare, which runs it, sees ordinary request information such as network addresses.
6. Who processes data for us, and where
| Provider | What for | Data | Where |
|---|---|---|---|
| GitHub Pages (GitHub, Microsoft) | Hosting the site | Network address and browser details in server logs | US and worldwide |
| Supabase | Accounts and sign-in emails | Email address, account details above, network address | London (UK) for account data |
| Cloudflare | Feedback relay and MCP server | Feedback text, network address in transit | US and worldwide |
| GitHub (Microsoft) | Storing feedback (private repository) | Feedback text and optional email | US |
| Anthropic | AI sorting of feedback | Feedback text and optional email | US |
Fonts and all the app's code are served from this site; nothing loads from Google or other third parties. Where data goes to the US, transfers rely on the UK–US data bridge or the UK's International Data Transfer Addendum to standard contractual clauses, as offered by each provider. We don't sell or share personal data for advertising.
7. How long we keep it
- Plan figures: on your device until you reset, clear your browser data or uninstall.
- Accounts: until you delete yours (⚙ Data → Account → Delete my account) or ask us to. Your marketing-choice history goes with it. Accounts with no sign-in for 24 months are removed after a warning email. Sign-ups whose link is never opened are removed automatically after 7 days.
- Feedback: the issue's text, including any email address, is removed 12 months after it is closed, or sooner if you ask.
- Abuse counters: one hour for the per-address count, two days for the daily total.
- Marketing opt-outs: if you unsubscribe, or delete an account after opting in, we keep just your email address on a do-not-email list so we never contact you by mistake.
8. Your rights and how to use them
You can ask to see the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or take a copy. You can withdraw marketing consent at any time. Use the contact route in section 1; we'll reply within one month. To delete your account, use ⚙ Data → Account → Delete my account, or send a privacy request from the email address on the account. To stop marketing emails, use the unsubscribe link in any of them or untick the box in the account panel. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
9. Local storage on your device
The app uses your browser's local storage, not cookies. Every item supports something you asked for, so no consent banner is needed:
| Item | Why |
|---|---|
ukRetirementPlanner.v1 | Your plan |
ukRetirementPlanner.theme, .mode | Light/dark theme and Simple/Advanced choice |
ukRetirementPlanner.dismissedWarnings.v1 | Warnings you've dismissed |
ukRetirementPlanner.sections.v1 | Which input sections you've collapsed |
ukRetirementPlanner.lastExported | Date of your last export, for the backup reminder |
ukRetirementPlanner.quickStartDone | That you've seen the quick start |
ukRetirementPlanner.session.v1, .pkce.v1 | Keeping you signed in, and finishing sign-in (only if you use an account) |
The app is also saved in your browser's cache so it works offline.
10. Children
The planner is meant for adults planning their retirement. It isn't aimed at children, and accounts are for adults only.
11. Changes to this notice
We'll update this page when what we do changes, and note it in the app's "What's new". This is a planning tool, not financial advice.