Privacy policy

This policy explains what Squirrel Watch keeps when you use the Planner for People apps and their connector at https://pfp-connector-151446722284.us-west1.run.app, why we keep it, and how you can turn it off or have it deleted.

The short version

• Your planner lives on your own devices. Nothing reaches our server unless you turn on the "Claude connector" switch in the app.
• While the switch is on, the connector keeps a copy of your planner records so the assistant you connected can answer you.
• We do not sell your data. There are no ads, no profiling, and no analytics or trackers.
• Your conversation with the assistant is not stored.
• You can switch the connector off at any time, and you can ask us to delete everything.

What the apps keep on your devices

Planner for People runs on iPhone, Mac and Apple Watch. Your projects, tasks, plans, check-ins and meals are stored on your device.

If you use more than one device, the apps sync between them through the private database in your own iCloud account (Apple CloudKit). This sync is separate from the connector.

App locks and writing plan blocks to your calendar stay on the device.

What the connector stores, and when

The connector stores nothing until you turn on the "Claude connector" switch in the app's Settings. While it is on, it stores the following.

Your planner records

• Projects and tasks.
• Day plans and their blocks.
• Check-ins, including energy, mood and any notes you write.
• Ledger and evidence entries.
• Inbox items.
• Recipes, planned meals, and food entries with calories.
• Grocery lists.
• Meal and planner settings.
• Hand-off notes for your assistant.

While the switch is on, deleting something in the app empties the connector's copy of that item too. A small marker that it was deleted remains.

Account data

• If you use Sign in with Apple (it is optional): a hashed form of the identifier Apple gives us. The app asks Apple for no name and no email.
• A record for each linked device: the device's name, when it was added and when it was last seen.
• Whether your account is currently linked to an assistant.

Server logs

Google Cloud records basic details of each request to the connector: the time, the path, the assistant's client id, its redirect addresses and the network address the request came from. Google Cloud keeps these logs for its default period of 30 days (see Google Cloud's logging limits).

The connector's own logs record only the kind of request and its path, never your records, codes or tokens.

What is not stored

• Your conversation with the assistant. The connector only processes the details of each tool call it is asked to make.
• Access or refresh tokens. They are sealed and self-contained, so the server does not need to keep them.
• Payment details. There are no payments.
• Apple Health data.
• Your name or email address. The app never asks Apple for them. The name of your device (see Account data above) is stored as it is, and it may contain your first name if you named the device that way.

Why we store it

Only to answer the assistant you connected (Claude, ChatGPT, Grok or another MCP client) when it calls a tool in your own conversation. We do not use your records for anything else.

Where it is stored

On Google Cloud, using Cloud Run and Firestore, in the us-west1 region (Oregon, United States).

Who else sees it

• We do not sell your data. There is no advertising, no profiling, and no analytics or trackers.
• Google Cloud hosts the connector and processes data for us.
• The server fetches Apple's public sign-in keys to check Sign in with Apple. Nothing about you is sent to Apple when it does.
• The assistant provider you connected receives the results of the tools it calls, inside your conversation, under that provider's own policy.

Security

The connector is reached only over https, which encrypts your data on its way to and from it. Google Cloud encrypts it at rest.

Your records are not hidden from us by encryption: Squirrel Watch could technically read them on the server. We promise not to.

The tokens that let your assistant reach your planner are sealed by the server and never stored.

Your choices: turning it off and deleting

• Turn off the "Claude connector" switch in the app. Your assistant's access ends at once, because its tokens stop working. The stored copy is kept, so turning the switch back on just works.
• Signing out in the app does not delete the stored copy.
• To delete your account and all its records, write to the support address below. We complete deletion within 30 days.
• A way to delete everything yourself is planned.

Health-like information

Food, calorie, mood and energy entries are notes you write about yourself. They are not health records from a doctor or clinic.

If a security breach ever affected this information, we would tell the people affected.

Children

Planner for People is not for children under 13.

Changes

If this policy changes, the "Last updated" date at the bottom of this page changes too.

Contact

Support email: coming soon

You can also visit the Squirrel Watch support page.

Last updated 2026-10-23