Hashed passwords
Passwords are hashed with bcrypt before they're stored. Nobody at Planzer.io can read your password.
Your tasks, calendar and notes say a lot about your life. Here is how we protect your account, what we share with other services and how you stay in control of your data.
Found a vulnerability? Email [email protected] and we'll get back to you.
How we protect you
Passwords are hashed with bcrypt before they're stored. Nobody at Planzer.io can read your password.
Sign-in attempts are rate limited, and an account locks for 15 minutes after five wrong passwords in a row.
Use an email and password, or sign in with your Google, Microsoft or Apple account.
Add a second step to email and password sign-in with codes from an authenticator app, plus 10 one-time recovery codes. Google, Microsoft and Apple sign-in use their own two-factor.
Access tokens expire after 15 minutes and refresh tokens rotate. On the web, your session sits in a secure, HttpOnly cookie that page scripts can't read. Changing or resetting your password signs out every other session within seconds.
Sign out of all your devices from Account settings with one click. It takes effect within seconds, also on a lost or stolen device.
See recent sign-ins and account changes in Account settings. We also email you when your password changes or two-factor sign-in is turned off.
On iPhone, iPad and Android, your session is stored in the Keychain or Keystore and stays on that device.
Every connection between the apps and our servers uses HTTPS, and webhooks from Stripe and Slack are signature-checked.
Checkout is hosted by Stripe. Your card details go straight to Stripe and never touch our servers.
Share your plan only if you turn it on. Links use a long random token, show only your first name and today's tasks, and can be reset or switched off any time.
On iPhone and iPad, Planzer.io hides your plan when you swipe between apps, so it doesn't show over your shoulder.
Your data
Your tasks, projects and notes belong to you. Edit or delete any of them whenever you like.
Delete your account in Account settings, and your tasks, projects and attachments are removed right away. If you're on Pro, your subscription is canceled automatically.
Download a copy of your data any time in Account settings: everything as a JSON file, or your tasks as a CSV.
AI features are part of Pro and run on Anthropic's Claude. They only receive what they need: task titles and text, priorities and deadlines, and the meeting notes you paste to turn into tasks.
Nothing is connected until you connect it. Marking tasks done back in your other tools stays off until you switch it on.
Email [email protected] with any security or privacy question, including vulnerability reports.
Subprocessors
Your account and plan are stored on our servers in Frankfurt, Germany. We also use a small set of trusted services, and each one gets only the data it needs for its job: Stripe for payments, Mailnaptic for email, Firebase Cloud Messaging and Apple for push notifications, Gleap for support chat, Google Analytics for usage stats and Anthropic for AI planning on Pro. Zapier gets your name and email only if you say yes on the Zapier page in Planzer, to set up your Zapier account.
Servers in Frankfurt, Germany
Card details handled only by Stripe
Calendars and tools sync only after you connect them
Key services
SubprocessorsStripe
Payments and billing
Anthropic
AI planning with Claude
Mailnaptic
Account emails and product updates
Gleap
Support chat and help center
Start on the free plan with 100 tasks. Upgrade to Pro whenever you're ready.