• When you forward us an email, screenshot or write-up about a family member's schedule, we keep the original, so you can always see the source a date or event came from.
• We store the info you send about your family members' schedules, which is what lets us show you an organized calendar, to-do list and dashboard to help you keep track of it all.
• We do not sell your information.
• We review how the product is used so we can keep improving it for you, using our own records and analytics services. Analytics see how the app is used — never the content of your family's schedules.
• Six companies process your data on our behalf: Anthropic (reads what you send), Supabase (stores it), Vercel (hosts the app), Resend (delivers mail), Stripe (takes payment; we never see your card number), and Google (our support inbox). All in the United States. This is a standard set of providers for a consumer app like this one.
• We send what you forward to Anthropic or other AI models to be read automatically — this is how we pull out the key schedule info from those long emails, messy screenshots and raw notes you send in.
• This covers the web app, the home-screen app, and any PlanLinx app we publish for iOS or Android.
• You must be 18 or over, and either the parent or legal guardian of any child whose information you enter, or an adult they have authorised to do it — a grandparent or a sitter, say.
• Two emails you can turn off in one tap: a Sunday summary of the week ahead, and, now and then, a note about what's new. Sign-in codes and billing notices are not optional — they are how the account works.
• To get a copy of everything we hold, or to delete your account and everything in it, email us. Both are done within 45 days, by a person.

PlanLinx Privacy Policy

Effective date: 2026-09-12 Operator: PlanLinx is a product of Waveclimb LLC, a Delaware limited liability company ("PlanLinx", "we", "us"). Contact: support@planlinx.com · 1201 Kings Highway, #1002, Fairfield, CT 06824

1. Who we are and who this covers

PlanLinx is a product of Waveclimb LLC, a Delaware limited liability company. This policy covers the PlanLinx web application at planlinx.com, including when it is added to a phone's home screen; any PlanLinx app we publish for iOS, Android or other platforms; and any email you send to a PlanLinx forwarding address. Where an app store imposes its own terms, those apply in addition to this policy.

PlanLinx is offered to people in the United States and is not directed to anyone outside it. If we open to other countries, this policy will say so and we will ask you to accept the updated version first.

2. What we collect

Because you signed up

• Your email address, used to sign you in and to reach you about the service.
• The names you give the people in your family, and any notes you add about their teams, age groups or activities.
• Your timezone, so that "Tuesday at 4pm" means the right moment.

Because you sent it to us

• The content of anything you forward, paste, upload, dictate, or share to PlanLinx from another app (a screenshot of a post, say). For most families this is school and club email. It routinely names children, gives locations and times, and sometimes contains other families' details.
• The original file or message itself, kept so that "View original source" can show you what a schedule was read from.
• Any note you write alongside an upload.

Because the app produced it

• The activities, to-dos, deadlines and locations extracted from what you sent, and which family member each belongs to.
• A record of corrections you make, so the app can show what changed, and which conflict warnings you chose to ignore.
• Which family invited you, if you arrived on a friend's invitation link, so they get their thank-you reads.
• Your alert and email preferences, and if you enable notifications, an anonymous device identifier supplied by your phone's push service.

Because we have to run it

• Usage and cost records: token counts and a dollar figure per family, so we can keep the service inside its limits. These hold no content.
• Server logs kept by our hosting provider in the ordinary course: IP address, browser type, pages requested, and timestamps.
• A record of your acceptance of the terms: which version, when, and the IP address and browser it came from — so we can show what you agreed to.
• When each signed-in adult last opened the app, and your answer to an optional one-question survey if you choose to give one. Both are usage records; neither holds content.

If you subscribe

• Payment information is handled by Stripe. We see your plan and billing status. Stripe holds the card; we never see or store a card number.

If you turn on text reminders

*(Not built yet — pre-disclosed now so turning it on later is not a change to this policy.)*

• Your mobile phone number, only if a plan that offers this is available to you and you choose to turn it on. Used solely to send the reminder texts you asked for. We do not call or message you for anything else with it, and turning the feature off stops it.

What we do not collect

• Advertising identifiers, precise device location, contacts, or anything from your mailbox that you did not forward to us.
• We do not ask for sensitive personal information — no health, biometric, precise-location or similar categories. If something you forward happens to contain such a detail about a family member (an allergy list on a camp form, say), it is treated like every other piece of content: read for the schedule, shown to you, and never used for anything else. A forwarded email is one you sent *to us*, which makes us its intended recipient under California's definition.

3. How we use it

Every purpose, and nothing else.

• To read your schedules — sending what you forward to an AI model, and turning what comes back into activities, to-dos and deadlines.
• To show it to you, filed under the right family member, with the source it came from — and, on plans that include it, to send it to a calendar app you connect (section 6b).
• To sign you in, by sending a one-time code to your email.
• To notify you, if you have turned notifications on, and to send each adult a weekly summary email of the week ahead, which you can turn off in Settings or from the email itself.
• To tell you what is new — now and then, by email, when we add something worth knowing about. Never more than once a month. You can turn these off in Settings, and every one carries a link that does it in one tap.
• To keep the service inside its limits, by recording what each family costs us to process.
• To bill you, if you subscribe: to take payment through Stripe, send the acknowledgment and reminders the law requires, and tell you before a price changes.
• To run the invitation programme: to credit the reads a family earns when a friend they invited sets up, which means remembering which family invited you, and comparing the two email addresses so the same person cannot invite themselves.
• To help you when you ask, and to work out why something failed.
• To improve it — which screens get used, where set-up stalls, and how often the AI's reading needed correcting, using the corrections you make. Occasionally that means re-reading a source with a different AI model to see whether it does better; the result goes nowhere but our own comparison.
• To check that a request about your account came from you before we act on it (section 10).
• To keep it running — hosting, backups, security, and preventing abuse.
• To contact you about the service itself — a problem, a change to these terms, or a reply to something you asked.
• To meet legal obligations and enforce our terms.

We do not use it to build a profile of you or your children for any purpose beyond running the service, to train AI models of our own, or to sell it to anyone. We may use figures that identify nobody — how many families, how many schedules — to describe PlanLinx.

4. Why we are allowed to

The core processing is necessary to provide the service you asked for. You ask us to read a schedule; reading it requires sending it to be read. This is not "consent" in the sense that you could withdraw it and keep using the service — you cannot. The way to stop this processing is to stop sending us things, or to close your account.

Where we rely on our legitimate interests — keeping the service running, preventing abuse, and knowing what each family costs us — we limit it to what is needed and weigh it against your privacy.

Where the law requires consent for something specific, we will ask for it separately and you can decline.

5. Who else sees it

Six companies process data on our behalf. Every one of them is named here, with what it receives and where it operates. We choose providers on commercial terms and hold them to confidentiality and security obligations.

Our domain's DNS is operated by Bluehost, which sees lookups for the domain name and no personal information.

This is an ordinary set of providers. Vercel, Supabase, Resend and Stripe are how many consumer apps built in the last few years are put together; none of them was chosen to reach further into your data than any other app in this space would.

We do not sell your information. In the words California's law uses: we do not sell personal information, and we do not share it for cross-context behavioral advertising, and we have not done either in the preceding twelve months.

When we may disclose it anyway. To comply with law, a subpoena or a court order; to protect the safety of a person; to enforce our terms or protect our rights; or to a successor if PlanLinx is sold or merged, under this policy. Where the law allows, we will tell you before responding to a legal demand for your data.

Within your family. Anyone you invite into your PlanLinx family sees the same schedule. Invite only people who should.

6. Calendars you link yourself

Separate from section 5, because here the data flows in rather than out.

You can link a calendar feed — a school or club's public ICS link — from the Calendars screen. When you do:

• We store the feed's web address, the name you gave it, and which family member it belongs to.
• We fetch that address on a schedule and read the events it contains, the same way your phone's calendar app would. Events found there become activities in your account, marked as coming from that feed.
• The organisation publishing the feed is not told who you are. We request a public address; no account, login or identifier is sent.
• Removing the link removes the upcoming activities it added. Anything already in the past stays in History, and a forwarded email's activity that the feed had replaced comes back.

We do not control what a school or club puts in its own feed, and their handling of your data is governed by their policies, not ours.

Auto-forwarding. If you set your mail provider to forward mail to your PlanLinx address, the provider sends a one-time confirmation message to that address first. We answer it for you, so the rule takes effect without you copying a code. That reply goes only to your provider's confirmation address and contains nothing but the confirmation.

6b. Calendars you subscribe to from PlanLinx

Here the data flows out, and it deserves its own section.

On plans that include it, you can create a calendar link and add it to Google Calendar, Apple Calendar or Android's calendar, so your family's schedule appears there. When you do:

• The link carries your whole family schedule: each activity's name, the family member it belongs to, its date, time, location and note.
• The link is a secret, not a sign-in. Your calendar app fetches it on its own, with nothing but the address — and in Google's case, from Google's own servers. Anyone who has the link can read the schedule. Treat it as you would a house key: share it only with people who should see everything, and if it gets out, reset it from the Calendars screen; the old link stops working at once.
• Once your calendar provider has fetched the schedule, it holds a copy under its own terms and privacy policy, not ours. We do not control how long Google or Apple keep it or what they do with it.
• If your plan no longer includes the feature, the link stays but answers with an empty calendar until it does again.

7. On the AI that reads it

This gets its own section because it is the unusual thing about how PlanLinx works, and hiding it under "third-party service providers" would be a way of not saying it.

What is sent. When you forward an email, upload a photo or a PDF, paste text, or record a voice note, that content is sent to Anthropic's AI — or to another AI model we may use — to be read. In practice that means subject lines, message bodies, attachments, and whatever a screenshot happens to contain, which in this product routinely includes children's names, their schools, their activities, and where they will physically be on a given day.

Can you opt out? No, and we would rather say so than offer a checkbox that does nothing. Having your content read is the entire function of the product. If you do not want that, the honest answer is that PlanLinx is not for you.

The AI can be wrong. It will sometimes misread a time, assign an activity to the wrong child, or miss something. Every activity shows what it was read from so you can check, and everything can be corrected. See the Terms of Service, section 2.

8. Children

The part that matters most here.

Children are not users. PlanLinx is used by parents and guardians, about the children in their care. Children do not have accounts, are never asked for anything, and never interact with the service. Everything held about a child is either something an adult typed in, or something that appeared in a schedule an adult chose to forward.

A child may see their schedule on a shared screen that a parent has signed in to. That is the parent's session; we collect nothing from the child.

You must be 18 or over to hold an account. If we learn that an account holder is under 18, we close the account and delete it.

You must be the parent or legal guardian of any child whose information you enter, or an adult the parent or legal guardian has authorised to do so — a grandparent or a sitter, say. By entering information about a child, you confirm that one of those is true of you.

What this means under the law. The federal Children's Online Privacy Protection Act (COPPA) governs personal information collected online *from* children under 13. It does not govern information a parent provides *about* their child, and PlanLinx collects nothing from children at all. We still treat this information as the most sensitive thing we hold, and we do not use it for marketing, profiling, or anything beyond showing you your own family's schedule.

We do not market to minors, and we will not use information about a child to market anything to anyone.

Removal. A parent can delete a family member and everything attached to them in the app at any time. To remove everything at once, see section 10.

If a child has somehow given us information directly — for example by using a parent's phone — tell us at support@planlinx.com and we will delete it.

9. How long we keep it

10. Your rights and choices

In the app, right now

• See the original of anything, from the activity it was read from.
• Correct anything the extraction got wrong.
• Delete individual activities, to-dos and family members. Removing a source removes everything read from it.
• Stop forwarding, and nothing new arrives.
• Turn notifications off, in the app or on your device.

By asking us — email support@planlinx.com

• A copy of everything we hold about your family, sent to you within 45 days in a common, portable format.
• Correction of anything we hold that is wrong.
• Deletion of your account and everything in it, completed within 45 days, with confirmation when it is done.

If a request is complex we may need longer — up to a further 45 days — and if that happens we will tell you why before the first 45 are up. Most take days rather than weeks.

These are handled by a person rather than a button, and we would rather say that plainly than pretend otherwise. There is no automated export or delete-my-account screen yet. If we grow to where a person cannot keep up, we will build one before that happens, not after.

We will not charge for any of this, we will not ask why, and we will never treat you differently for exercising a right. We will verify that a request comes from the account holder before acting on it. If we decline a request, we will say why, and you may appeal by replying; we will answer the appeal within 60 days and tell you how to contact your state's attorney general if you are still unsatisfied.

11. When a person at PlanLinx can see your content

Rare, and said out loud rather than left to be discovered.

The operator has database access, which means your family's content is technically reachable. In practice it is looked at in three situations only:

• You asked for help with something specific.
• Something broke and the failure cannot be diagnosed any other way.
• Extraction went wrong. When a schedule is read incorrectly, seeing the original is the only way to work out why and stop it happening again.

We do not browse. Access is limited to what the situation needs, and only to the operator.

12. How we review usage, and tracking

We review how the product is used so we can keep improving it for you — which screens get used, where a sign-up stalls, which features nobody touches. We do this with our own records (the usage and cost figures in section 2, and what the app itself stores) and with analytics services, which receive usage information such as screens viewed, features used, device and browser type, and approximate location from your IP address.

Analytics never receive the content of what you send — not the emails, the schedules, the children's names, or anything read from them — and we do not use session recording of any kind. Any analytics provider we use is configured so that it does not track you across other websites or build an advertising profile of you.

"Do Not Track." We do no cross-site tracking, so there is nothing for a browser's Do Not Track signal to switch off, and we treat every request the same. We honor Global Privacy Control signals as an opt-out of any sale or sharing, which today changes nothing because we do neither.

Third parties do not collect information about you across other sites through PlanLinx. Any analytics we use is limited to PlanLinx itself.

13. Cookies

There is no cookie banner because there is nothing to consent to. Every one we set is listed here, none used for advertising and none read by anyone but us:

We may add a cookie later — a new preference worth remembering, say. Anything we add follows the same rules: never for advertising, never to follow you across other websites, and never read by anyone but us. We update this table when we do.

Your browser lets you clear or block cookies. Blocking the first one means you cannot stay signed in.

14. Security

• Sign-in is by a one-time code sent to your email. There is no password to leak or reuse.
• Every family's data is scoped to that family. A request for something belonging to another household is answered as though it does not exist. Row Level Security is switched on in the database, and the server routes that act across a household check your membership before every read and write.
• Data is encrypted in transit, and at rest by our storage providers.
• Access to production data is limited to the operator.

No system is perfectly secure, and we will not claim otherwise.

If there is a breach affecting your information, we will notify you without unreasonable delay and in any case within 30 days of determining it — by email to the address on your account — and tell you what happened, what was affected, and what we are doing about it. Where the law requires, we will also notify the relevant state attorney general.

15. Where your data is held

All processors in section 5 operate in the United States, and your data is stored and processed there. PlanLinx is offered to people in the United States and is not directed to residents of other countries.

16. Your state privacy rights

Several states give residents specific rights over personal information. Some of these laws apply only to businesses above a certain size; we honor the rights they describe for everyone, in every state, because that is simpler and fairer than tracking who lives where.

The categories, for California and states with similar laws

California residents. You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing; to limit use of sensitive personal information; and not to be discriminated against for exercising these rights. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we collect no sensitive personal information, so the opt-out and limit rights have nothing to act on. We do not knowingly sell or share the personal information of anyone under 16. To exercise any right, email support@planlinx.com. You may designate an authorized agent to act for you; we will ask the agent for proof of authority.

Connecticut, Delaware, Virginia, Colorado, Utah, Texas, Oregon, and other states with comprehensive privacy laws. Residents have comparable rights to access, correct, delete, and obtain a portable copy of personal information, and to opt out of targeted advertising, sale, and profiling. We do none of the three. Exercise any right at support@planlinx.com; we respond within 45 days, and you may appeal a refusal as described in section 10.

Delaware residents. This policy is posted to satisfy the Delaware Online Privacy and Protection Act, which requires us to state the categories of information we collect (section 2), the categories of third parties we share it with (section 5), how you can review and request changes (section 10), how we will notify you of changes (section 17), the effective date (top), and how we respond to Do Not Track signals (section 12).

17. Changes to this policy

We will post the updated policy here with a new effective date. If a change materially affects how your information is used, we will ask you to accept it in the app before you carry on, rather than relying on you noticing a new date. We keep prior versions and can provide them on request.

18. Contact

Questions, requests, or anything in this policy:

support@planlinx.com Waveclimb LLC, 1201 Kings Highway, #1002, Fairfield, CT 06824

A person reads these.