Privacy Policy

Version 2.3. Effective 11 October 2026.

Retire Plan is a product of Group Space, LLC, a California limited liability company, 4744 Telephone Rd. Ste 3 #225, Ventura, CA 93003. This policy covers retire-plan.app, my.retire-plan.app and go.retire-plan.app.

What we store for an account

Your email address.
A hash of your password. We do not store the password itself.
Your acceptance of the terms: which version you accepted, when, the IP address it came from, and the browser you used. We keep this so we can show what you agreed to.
Purchase records from Stripe: the transaction id, the amount, and whether the payment succeeded. If you used a creator's discount code, the purchase record also says which code, as "Creator codes" below explains.
The plans you save. Plans are encrypted in transit and at rest.
The reports you build. Each is a PDF file, encrypted the same way as plans. We keep your last five. A report is deleted when you delete it or your account.

Demo mode

You can open the planner without an account and work through a sample plan. Demo mode stores nothing. Nothing you change there reaches our server, and nothing is kept when you close the tab.

Payment

Payments run through Stripe. You type your card details into Stripe's own form, and we do not see your card number. Stripe tells us the result of the payment and gives us its transaction id. For a purchase made with a creator's code, Stripe also gives us a few details about the card, listed under "Creator codes". Stripe's privacy policy covers what Stripe does with your details.

Creator codes

Some creators we work with share a code that gives a discount on a first purchase. When you buy with one, we record which code you used, which creator it credits, what you paid, and the commission we owe the creator.

With that purchase we also keep these details from Stripe:

The card fingerprint. This is a code Stripe makes so that the same card number can be recognised without showing it. It is not your card number, and your card number cannot be worked out from it.
The card type: credit, debit or prepaid.
The country the card comes from.
The email address on your account at the time of the purchase.

We use these only to check for misuse of a code: the same card on more than one purchase made with a code, a creator buying with their own code, a prepaid card, or a purchase from outside the countries we sell to. A purchase the check flags is looked at by a person. The check does not block a purchase or change what you get. It only decides whether the creator is paid a commission on that sale.

The creator is not told your name, your email address or anything in your plans.

We keep the card fingerprint, card type, card country and email address with the purchase for two years, then delete them. The record of the code, the creator and the commission is kept as long as the purchase record, because tax rules require it.

Cookies

One session cookie, set when you sign in. It keeps you signed in and does nothing else.
Cloudflare Turnstile runs on the sign-up and password-reset forms to keep bots out. It may set a cookie of its own. Cloudflare's privacy policy covers that.
No advertising cookies, and no analytics cookies.

Where your data is kept

Our server is in the United States. All user data is kept on an encrypted volume. Backups run nightly, are encrypted, and are kept for up to six months. Older backups are deleted as they age out.

Server logs

The web server keeps standard access logs: IP address, page requested, time. We use them to keep the service running and to spot abuse. We do not analyse them for anything else.

Fonts

The pages load two typefaces from Google Fonts. Like any web request, that sends your IP address to Google. Google's privacy policy covers that request.

Instagram, and go.retire-plan.app

We post on Instagram as @retireplanapp. Posts end with a keyword, and if you comment it, our automation sends you one private reply with a link to the matching page on go.retire-plan.app.

To do that we receive the comment from Instagram: the comment text, its id, and the username that posted it.
We record the comment id, so that the same comment does not get a second reply. That id is the only thing we keep.
We do not read your other comments or messages, follow you, or keep your username.
go.retire-plan.app is static pages, with the same server logs and no cookies of ours.
Instagram's privacy policy covers everything that happens on Instagram itself.

If you are one of our creators

If you share a Retire Plan code, we keep your name, your handle, your email address, your code, and a record of the commissions we owe you and the payouts we have sent.

Payouts go through Stripe Connect. You set up your payout account with Stripe, and Stripe collects your identity, bank and tax details. We receive your Stripe account id and whether that account can take payouts. We do not see your bank details. If you are in the US, Stripe sends you a 1099-NEC tax form on our behalf when the law requires one. Stripe's privacy policy covers what Stripe does with your details.

We keep your commission and payout records as long as we need them to pay you, to handle refunds and disputes on sales made with your code, and to meet tax rules.

Your rights

Export. Download any plan as a file from the planner, whenever you want.
Delete. Delete a plan, or your whole account, from the account page. Deleting the account removes your email address, your password hash, your acceptance record and your plans from the live database straight away. Copies inside backups age out within six months. We keep the record of the purchase itself, because tax rules require it. If you bought with a creator's code, the details under "Creator codes" stay with that record for the time given there.
Ask. Write to support@retire-plan.app with any question about your data, or to ask for a copy of what we hold on you.

Children

The product is for adults. It is not aimed at anyone under 18, and we do not seek accounts from them.

Changes to this policy

When this policy changes in a way that affects you, we raise the version number at the top and set a new effective date. If you have an account, we ask you to accept the new version the next time you sign in.

Contact

support@retire-plan.app, or message @retireplanapp on Instagram.