Tiếng Việt · English · 简体中文 · العربية

Privacy Policy

Last updated: 07/10/2026. This version is for the trial period and will be reviewed again before the service opens to the public.

This page is an automatic translation of the Vietnamese original and has not been reviewed by a lawyer. If the two versions differ, the Vietnamese version applies.

Planhit is a personal timeline app. This page explains what data we process when you use the app, and your rights over that data.

1. Data we process

When you are not signed in: your events, tags and settings stay only in your browser (IndexedDB and localStorage). We do not receive them.
When you sign in with Google: we receive your account identifier, e-mail address and display name from Google (the openid, email and profile scopes). This data is used only to sign you in and recognize your account (“Limited Use”): it is not used for advertising, not sold, and not shared with any third party other than the processors named below.
Once you are signed in: your events (name, time, notes, tags, color, result) and the tags you create are stored on the server so you can use them on several devices.
Telegram notifications (optional, only if you turn them on): if you add a Telegram chat, we store the Chat ID you enter, your browser's time zone, the app language (so messages are sent in that language) and your notification settings. For the events you turn reminders on for, we send to that chat the event name (unless you choose to hide it) and its time; notes and tags are never sent. The first message to a chat is always a notice that “this Telegram chat was just added by …” with your e-mail address partly masked. You are responsible for entering your own Chat ID correctly: a wrong one could let someone else receive your event names.
Usage statistics (on by default, you can turn them off): we use Google Analytics 4 to count how the app is used: pages viewed, type of device and browser, country, and a few actions such as creating an event, backing up or signing in (only recorded as an action that happened, with a count or whether you are signed in). The content of your events, notes, tag names, e-mail and name are never sent, and the page address that is sent carries no parameters. This data is not fully anonymous: Google sets a _ga cookie holding a random identifier that recognizes your browser (kept for up to 14 months) and receives your device's IP address. This identifier is not linked to your Planhit account. We turn off Google's advertising features and do not use this data for advertising. You can turn statistics off at any time in the “⋯” menu; once off, the app does not load Google's code and sends nothing to Google.

2. Where it is stored and who processes it

Account data is stored and processed by Supabase (the database and sign-in provider). Usage statistics (unless you turn them off) are processed by Google (Google Analytics). If you turn on notifications, the reminder content is sent through Telegram (Telegram FZ-LLC); Telegram messages with a bot are not end-to-end encrypted, and Telegram stores them under its own policy. The servers of these parties are located abroad, so your data is transferred out of Vietnam. Data is not end-to-end encrypted: the system can read its content, so do not put confidential information in your notes.

3. The copy on your device

After you sign in, the app keeps a read-only copy on your device so it opens quickly and can be viewed offline. The copy is kept for at most 30 days, and 7 days if the sign-in session has expired.
Signing out on purpose deletes this copy, the form drafts and the remembered e-mail address in that browser (in every tab).
When the session is ended from the server side (you sign out of all other devices, or delete the account), the copy and the remembered e-mail address on those other devices are deleted as soon as the device reconnects.
Closing the tab does not sign you out and does not revoke the session. On a shared computer, sign out when you are done.

4. How long data is kept

Data	Kept for
Active events, tags	Until you delete them or delete your account
Usage statistics (Google Analytics): data per browser and the `_ga` cookie	Up to 14 months. Aggregated figures that do not identify anyone (for example the number of views per day) may be kept longer.
Chat ID and Telegram notification settings	Until you disconnect Telegram (in the app, or by typing `/stop` to the bot) or delete your account
Schedule and history of notification deliveries	At most 30 days after delivery
Messages already sent to Telegram	They stay in your chat on Telegram; we cannot take back a message that was sent. You delete them yourself in Telegram.
Events you deleted (trash)	At most 30 days, then deleted for good, or as soon as you empty the trash
The system's backups (encrypted; they may still hold data you deleted earlier, but when a backup is restored, deleted accounts are not brought back)	At most 30 days

5. Your rights

Export your data: “⋯” menu → “Back up”.
Delete: you can delete single events, or delete your whole account and its data in the app. We handle deletion requests sent by e-mail within 20 days.
Stop Telegram notifications: “⋯” menu → “Telegram notifications” → “Disconnect Telegram”, or type /stop to the bot (this removes the chat from every account that added it).
Turn off statistics: “⋯” menu → turn off “Usage statistics (Google Analytics)”. The app stops sending data (in every open tab) and deletes the _ga cookie right away. Statistics sent earlier are not linked to your account, so deleting your account cannot delete them; they expire on their own according to the retention period in section 4.
Access, correct, withdraw other consents: contact us at the address in section 7.

6. Security

Each account can read and write only its own data (access control at the database level). Connections use HTTPS. If an incident affects personal data, we will notify you within the period required by law (72 hours).

7. Contact

For any privacy request: [contact e-mail address — must be updated before release].