Privacy & your data
Privacy Policy
You choose what to send to PlanHarbor. This page explains what happens to that information and how to ask us for help.
PlanHarbor is operated by Henan Binary Digital Technology Co., Ltd. (“we”, “us”). This policy covers the PlanHarbor website and mobile apps. Contact binarydigitaltechnology@gmail.com about privacy, support or deletion.
Information we process
- Account details: your email address, display name, account identifier and authentication information. Our authentication provider manages password verification and sign-in sessions.
- Space information: space names, purpose, time zone, receiving address, memberships and invitations. Family or school spaces may include optional school and children’s names supplied by an adult.
- Messages you send: forwarded or pasted email text, subjects, sender and recipient addresses, receiving metadata, supported attached-email text, and attachment names and processing status.
- Plans and edits: activities, dates, places, follow-ups, assignments, completion status and corrections you or other space members save.
- Technical and support information: sign-in and request records, IP addresses and error information processed by our infrastructure providers, and messages you send to our support address.
PlanHarbor does not connect to your entire personal mailbox. A space’s address receives messages; it is not a separate email login and cannot send replies. Anyone who knows that address can send to it.
How we use information
We use this information to create and secure accounts, receive messages, organize draft plans, display and synchronize your spaces, manage invitations, resolve errors and answer support or privacy requests. The current app does not display advertising or use an advertising SDK.
Pasted email text is organized using basic rules in the app. Forwarded messages are processed using DeepSeek, a third-party AI service, only after the space owner explicitly enables AI processing. In Settings → Space settings → This space’s email, the owner can review what is shared and allow or turn off processing. Permission covers queued and future forwarded messages in that space. When permission is off, new AI requests are paused; requests already sent may finish. Queued receiving records may remain until processing resumes or the space/account is deleted, subject to the receiving provider’s retention. Pasted emails and existing plans remain usable without DeepSeek. We record the permission choice, disclosure version, account and time for each space. AI input can include email text, supported attached-email text, attachment names, the space’s purpose and time zone, optional children’s names, and relevant activity summaries from that space. Review important details against the original message.
The receiving service receives original attachments. PlanHarbor extracts text from supported attached emails (.eml). It does not separately parse PDF, image or office-document contents. Other files can be embedded in an .eml processed by the receiving pipeline. The app keeps extracted text and attachment metadata, rather than offering a raw-attachment download service.
Who can see your spaces
Members can access the emails, plans and details of the space they join. Membership in one space does not grant access to your other spaces. Check the receiving address and membership before forwarding a message. Only send information you are entitled to share with that space and the services described below.
Service providers and international processing
- Supabase: authentication, application database and backend processing. Supabase privacy information.
- Resend: receiving forwarded emails and sending account and invitation messages. Resend privacy information.
- DeepSeek: AI organization of forwarded text and the limited space context described above. This is server-side processing; users do not need a DeepSeek account.
- Cloudflare: website hosting and delivery. Cloudflare privacy information.
- Google Gmail: handling messages sent to our public support address. Google privacy information.
Our company operates in China and uses international cloud services. Information may be processed outside the country where you live, including in China for AI processing. The protections and retention practices of those services can differ from those in your country. Contact us for information about the services handling your request.
We may also disclose information where necessary to comply with applicable legal obligations, respond to valid legal requests or address abuse and security incidents. We do not sell your personal information or use it for targeted advertising.
Device storage and security
PlanHarbor uses local device or browser storage to keep your sign-in session, interface language and app preferences. App and website connections to our backend use HTTPS. This is not end-to-end encryption: the backend and relevant providers process the content to deliver the service.
The current Android app does not request access to your contacts, SMS, device location, camera or microphone. Information of that kind could still be included in a message you choose to forward. Avoid sending unnecessary sensitive information.
Retention and deletion
We keep live account and space data while it is needed to provide your account and saved spaces, until it is removed through the applicable deletion process. We do not currently promise automatic deletion of all email content after a fixed number of days.
Self-service account deletion removes your account, and the spaces you own alone with their emails, plans, settings and receiving records, from the live application database. Receiving addresses for deleted spaces stop working. In shared spaces you joined, your membership and task assignments are removed, while shared content remains available to the other members. Owners of spaces with other members must transfer ownership before self-service account deletion.
Deleting live app data does not instantly erase service-provider copies, operational logs, historical backups or copies in your original mailbox. The current setup does not provide a verified single retention period for all provider records. For a deletion request, we review the affected provider records, request deletion where available, and explain any records still retained, the reason and the applicable period when confirmed. We will not represent a request as fully completed while a material provider-deletion step is unresolved.
Support messages are used to resolve your request and document its handling. Ask us to remove support correspondence when it is no longer needed. If a legal or security reason requires us to retain specific information, we will explain the scope and reason where we are permitted to do so.
See Delete your PlanHarbor account for the deletion paths, verification and shared-space details.
Your choices and requests
You can review and correct saved plans, remove email items, manage space membership, leave a space or request account deletion. Depending on where you live, you may also have rights to access, obtain a copy of, correct, delete, restrict or object to processing of your personal information, withdraw consent where relevant, or complain to your local data-protection authority.
Send a request to binarydigitaltechnology@gmail.com, preferably from your registered email address. We may verify your control of the account before disclosing or changing information. Do not send passwords, recovery codes, identity documents or private email contents in an initial request.
We will respond within 7 calendar days. After identity verification, we will complete the request within 30 calendar days or explain the reason for a delay and the next steps. This service target does not limit a shorter period or other rights required by applicable law.
Adults and children’s information
PlanHarbor is intended for adults aged 18 and over. Children should not create accounts. Adult users may provide limited information about children when managing a family or school space and should only do so when they are authorized to share it. Contact us if you believe a child has created an account or information about a child has been shared improperly.
Changes and contact
We may update this policy as our service changes. The effective date above identifies the current version. Material changes will be communicated through the website or app where appropriate.
Henan Binary Digital Technology Co., Ltd.
Support and privacy: binarydigitaltechnology@gmail.com