Private Vault Processing Terms

These Private Vault Processing Terms (Vault Terms) supplement the Planique Terms and Conditions. They apply when an account holder activates a Planique private-vault module or asks Planique to process private content using a supported vault function.

In these Vault Terms, you means the adult Planique account holder who gives the instruction. Planique means Cropol Labs d.o.o.. These terms use instructing user rather than assuming that a household user is legally a controller under data-protection law.

What these terms mean for you

• You choose what to store and which supported actions Planique performs.
• Planique uses your vault content only to provide the personal or household features you request.
• Planique does not use vault content for advertising, profiling, research, commercial datasets or AI training.
• Only your authenticated account can access your vault.
• Cancelling a subscription does not delete vault content; deleting a record, module or account does.

1. Why do these terms apply?

The private vault lets you organise information solely for your personal or household purposes. Planique processes this content on your instructions and does not select an independent purpose for it.

If the law treats you as a controller and Planique as your processor, these Vault Terms document the matters required by GDPR Article 28 or the corresponding law. If that classification does not apply, these terms still limit how we use your content and record your instructions.

Role allocation depends on actual product behavior and applicable law. These Vault Terms cannot turn Planique into a processor for an operation in which it independently determines a new purpose.

2. Subject matter and duration

The subject matter is the storage and handling within your account of private content entered or selected by you in Planique. Processing begins when you activate or use the relevant function and continues until the content, module or account is deleted, subject to the retention and deletion periods we publish and any limited legal restriction.

Subscription cancellation alone does not end the instruction or delete the content while your account remains open.

3. Nature and purpose of processing

On your instructions, Planique may:

• receive and store records and files;
• organise, index, search and display them to your authenticated account;
• create requested totals, repeated items, schedules, reminders, Calendar and Dashboard views, and temporary copies needed to provide them;
• calculate separately activated cycle estimates using the method explained in the Optional Cycle Estimates notice;
• provide correction, export and deletion functions;
• protect availability, confidentiality, integrity and resilience;
• create encrypted disaster-recovery backups; and
• erase records, calculated information and applicable live app copies when you use a supported deletion instruction.

The purpose is only to provide the personal or household planner function you request. Planique does not independently use private content for service-wide analytics or product research.

4. Types of content and people

Content may include identifiers and custom labels; contact and household information; schedules and location descriptions; communications and free text; files and images; financial records; work contacts and activities; shopping, meals and loyalty information; and health, cycle, medication, insurance, reproductive and other sensitive information.

People described may include you, family members, dependants, friends, personal contacts, household members, clinicians, service providers, colleagues, pets' owners/caregivers and other people whom you choose to mention for a legitimate personal or household reason.

You should use a custom label, initials or another less identifying description where a legal name is unnecessary. Pseudonymous content remains personal and sensitive where a person can still be identified.

5. How do you give instructions?

Your instructions are expressed through:

• accepting these Vault Terms and making the household-use declaration;
• activating a module or optional calculation;
• creating, editing, scheduling, viewing, searching or deleting a record;
• configuring a reminder or other supported function;
• requesting an export; and
• deactivating a module or deleting the account.

Planique will process private content only under these instructions, these Vault Terms and binding law. We will tell you where an instruction cannot be followed because it is unlawful, unsafe, technically unsupported or conflicts with a binding obligation, unless law prohibits notice.

6. Your responsibilities

You decide what to enter and whose information a record represents. You agree to:

• use the vault only for personal or household organisation;
• enter only information you have an appropriate reason to keep;
• minimise unnecessary identity and sensitive details;
• respect the privacy, confidentiality and rights of every represented person;
• when creating every Health profile, choose either “This profile is about me” or “I confirm that I have this person's permission or appropriate legal authority to manage this information”;
• stop adding or updating information and delete a Health profile if the permission or authority you rely on ends;
• use available correction and deletion controls where information is no longer appropriate;
• protect your account and device; and
• cooperate proportionately if a credible privacy, misuse or legal concern is raised.

Planique does not routinely verify that you have parental responsibility, guardianship, a power of attorney or another person's consent. A relationship label is not proof of authority. These Vault Terms do not transfer another person's rights to you or make unlawful processing permissible.

7. Prohibited instructions and uses

You must not use the private vault for:

• professional healthcare delivery or clinic/patient management;
• employer monitoring or employment decisions;
• insurance, credit or eligibility decisions;
• professional or commercial caregiving records;
• surveillance, stalking, harassment or unlawful monitoring;
• advertising or marketing profiling;
• research datasets or commercial benchmarking;
• selling, licensing or brokering personal information;
• public/community publishing or sharing between Planique accounts; or
• any unlawful, fraudulent or rights-infringing purpose.

Planique may refuse an instruction, temporarily restrict affected processing, require deletion, delete or suspend an account where reasonably necessary to address credible misuse or comply with law.

8. Planique's content-use restrictions

Planique must not independently use private-vault content for:

• advertising, behavioural targeting or marketing segmentation;
• cross-user analysis, benchmarking or product analytics based on entered content;
• research, sale, licensing or commercial datasets;
• AI or model training;
• medical, insurance, employment, credit or other risk scoring;
• professional care or institutional record management; or
• disclosure or combination unrelated to your requested function.

If Planique proposes a new use, we must assess our privacy role and legal basis, complete any required sensitive-data, impact, provider and transparency review, notify you, and obtain any legally required choice before that use begins.

Planique may process operational information that does not include user-entered content for its own platform purposes, such as whether a supported function succeeded.

9. Confidentiality and access

Private content is available only to your authenticated account. There is no account-to-account profile sharing, clinician access, professional caregiver account or institutional portal.

Personnel do not receive routine vault access. Exceptional access must be necessary for a documented support, security, legal, rights or misuse matter; authorized under the applicable role and legal basis; limited to the minimum scope; logged where appropriate; and removed when no longer required. People authorized to process personal information are bound by confidentiality.

10. Security

Planique uses measures appropriate to the risk, including authentication, access controls designed to ensure only the account holder can access the vault, restricted staff and provider access, data and file separation, encryption in transit and at rest, generic remote notifications, limited diagnostic information, deletion controls and security testing.

No service can guarantee absolute security. Planique maintains incident response duties under applicable law and relevant provider contracts.

11. Subprocessors

Supabase provides the infrastructure that processes private-vault content. No other listed provider may intentionally receive vault content.

You give general authorization for Planique to use the disclosed subprocessors necessary to provide the vault, subject to applicable law. We will provide appropriate notice of a material new content subprocessor. Where law grants an objection right, you may object on reasonable data-protection grounds by contacting support. Alternatively, you can write to us at planique.planner@gmail.com. If no reasonable alternative is available, we may need to stop the affected feature or allow account termination and export rather than use an unapproved provider.

Planique requires a content subprocessor to provide confidentiality, security, deletion, incident, rights-assistance and transfer protections appropriate to its function. Planique remains responsible for its own obligations and for subprocessor obligations to the extent required by applicable law.

12. International processing

The production database uses an EU region. Provider support, remote access and subprocessors may nevertheless involve other countries. Where transfer restrictions apply, Planique will use the verified adequacy, Data Privacy Framework, Standard Contractual Clauses and supplementary measures or another lawful mechanism stated in the provider disclosure.

13. Assistance with rights and legal duties

Planique provides record editing, export and deletion controls and a privacy request process. If a request concerns someone represented in a vault, Planique will not confirm that a profile exists until identity, entitlement, confidentiality and competing rights have been assessed.

Where Planique acts as processor, it will provide reasonable assistance with applicable rights, security, incident, DPIA and regulator duties, taking into account the nature of processing and information available. Where Planique has an independent legal/controller duty, it may act under that duty rather than an ordinary vault instruction and will limit access to what is necessary.

14. Deletion, return and restoration

You may use supported controls to delete records, profiles, a module or the account. Deactivation of Health deletes all information saved in Health, including cycle history and estimates. Turning off cycle estimates deletes the estimated dates and related reminders, but not your period history.

Deleted content is removed from live app systems as part of the requested deletion. Residual encrypted database backup copies are designed to expire within seven days and are not used for ordinary processing. If a backup is restored, applicable deletion instructions must be reapplied.

At the end of the service, Planique will delete or make available for return the private content as required by the agreed functionality and applicable law, unless a binding law requires a limited copy to be retained.

15. How does Planique demonstrate compliance?

Planique keeps records of provider reviews, security controls, processing boundaries, deletion tests and relevant legal actions. If applicable law grants an audit right, it will be satisfied first through current independent or documentary evidence where reasonable. Any additional inspection must protect other users, security and provider confidentiality and must not provide access to another person's vault.

16. Priority and changes

For private-content instructions, these Vault Terms control over inconsistent general wording in the Terms. The Privacy Notice governs transparency and does not itself expand the instructions.

Material changes to these Vault Terms or the content-subprocessor chain will be versioned and presented as required before continued affected processing. You may deactivate the affected module or delete the account if you do not accept a required new instruction contract.

17. Contact

Service operator: Cropol Labs d.o.o. Legal correspondence address: Ulica sv. Ane 30A, 31000 Osijek, Croatia

Please contact support if you have any questions or concerns not already addressed in these Private Vault Processing Terms. Alternatively, you can write to us at planique.planner@gmail.com.

If Planique changes how it handles private-vault content, we will update the relevant terms and notices.