Information for People Represented in a Private Vault

Effective date: 21 August 2026

1. Why you may be reading this

Planique is a private life-organisation service operated by Cropol Labs d.o.o., Ulica sv. Ane 30A, 31000 Osijek, Croatia, company number 030322161.

An adult Planique account holder may create a private Health profile concerning themselves or someone they personally care for, such as a family member, dependant or friend. You may believe that an account holder has included information about you even though you do not have a Planique account.

This public information explains how Planique approaches that situation. It does not confirm that an account, profile or record about you exists. It supplements the Privacy Notice, Health Module Notice and Household-use Declaration.

2. How private Health profiles work

The account holder controls their Health private vault and decides whether to create a profile, what optional label to use, what information to enter, which supported reminders or calculations to request, and when to edit, export or delete the information.

Before creating each profile, the account holder must select exactly one of the following statements:

• This profile is about me; or
• I confirm that I have this person's permission or appropriate legal authority to manage this information.

Planique records the selected basis, the applicable Household-use Declaration release, the language shown, the time and limited app metadata in an immutable profile-authorization event. Planique does not routinely ask the represented person to register or require the account holder to upload identity, guardianship, authority or consent documents. The event records what the account holder declared; it does not prove identity, relationship, permission, guardianship, legal authority or consent.

The account holder must use Health only for lawful personal or household organisation, enter only necessary information and respect other people's privacy and rights. Professional healthcare, employment, insurance, credit, commercial caregiving, surveillance, stalking, harassment, advertising, research, sale and other unlawful uses are prohibited. If permission or authority ends, the account holder must stop adding or updating information and delete the profile.

3. What information may be involved and where it comes from

Depending on what the account holder chooses to enter or request, information may include:

• a custom profile label, emoji and optional physical characteristics;
• conditions, medical history, symptoms, allergies, measurements, tests and procedures;
• clinicians, appointments, visit notes, insurance and emergency contacts;
• medications, prescriptions, dosage, schedules, occurrences and adherence;
• reproductive, menstrual-cycle, pregnancy, fertility, sexual-activity and related test or note information;
• user-entered Health notes; and
• requested reminders, schedules, summaries, Calendar views and optional cycle estimates created from the account holder's records and settings.

The source is normally the adult account holder. Planique may create only the limited schedules, reminders, views and calculations that the account holder requests. Planique does not currently obtain private Health profile content from another Planique account, a clinician, insurer, employer, wearable, medical device, advertising network, data broker or public source.

4. Why and in what role Planique handles the information

For ordinary private-vault content, Planique's current assessment is that Cropol Labs generally processes the content only under the account holder's personal or household instructions to provide the requested storage, organisation, display, search, export, reminder, calculation and deletion functions. Planique does not choose an independent medical, advertising, employment, insurance, credit, research, profiling or commercial purpose for that content.

The precise legal role and legal basis can depend on the processing operation and applicable law. Cropol Labs determines the necessary purposes and means for account administration, security, legal compliance, privacy requests, credible misuse, incidents and legal claims, and may have independent controller or regulated-business duties for those operations.

Planique does not make a solely automated decision about a represented person that produces legal or similarly significant effects. Optional cycle estimates are requested calendar calculations and are not medical advice, diagnosis, a fertility guarantee or contraception.

5. Who can receive or access the information

The account holder can access, edit, export and delete content in their own Health private vault. An export can be sent by the account holder to a destination they select through their device; the selected recipient's practices apply after the account holder sends it.

Supabase provides Planique's database, authentication, file-storage and server- function infrastructure and processes private-vault content only as needed to provide and protect the requested service. Planique does not intentionally send Health content to notification providers, app stores, RevenueCat, Vercel, Resend, advertising services or diagnostics providers. Remote notifications contain generic text and opaque identifiers, not profile labels or Health details.

Planique personnel do not routinely access private-vault content. Exceptional access must be necessary, authorised, logged and limited to a documented support, security, legal, rights or misuse matter. Information may also be preserved or disclosed where a valid binding law or order requires it after Planique assesses authority, jurisdiction, scope and available protections.

The production database uses an EU region. Provider support, remote access and subprocessors may nevertheless involve other countries. Where transfer rules apply, Planique uses the transfer mechanism and safeguards described in the Privacy Notice and applicable provider terms.

6. Retention and deletion

Private Health content normally remains while the relevant profile and Health vault remain active, unless the account holder deletes it sooner. Deleting a profile removes that profile's Health content and requested derivatives from active systems. Deactivating Health deletes every Health profile, source record, derived estimate, reminder and related Calendar projection from active systems. Residual encrypted database backups are designed to expire within seven days, and deletion instructions are reapplied if a backup is restored.

If you contact Planique, temporary identity or authority evidence is kept only as long as necessary for verification and case handling and normally no later than 30 days after verification or case closure. A minimized request record, decision and delivery evidence may be kept for three years after closure. A documented legal hold or binding law may require a different period.

7. If you have a concern or want to exercise a right

Please contact support or write to planique.planner@gmail.com. Initially provide only:

• your name or another way to communicate with you;
• a general description of the concern;
• whether there is an urgent safety risk; and
• the right or outcome you want Planique to consider.

Do not initially send Health records, a passport, birth certificate, guardianship order or other identity or authority documents through the contact form or ordinary email. The contact form accepts no attachments. Planique will first assess whether proportionate additional information is necessary and, if so, arrange a controlled transfer route.

Planique will not confirm whether a matching profile or account exists or identify the account holder until identity, entitlement, confidentiality, safety and competing rights have been assessed. Where justified, Planique may temporarily restrict affected content while investigating and may maintain, correct, restrict, require deletion, delete or suspend access to affected content. Planique will explain the outcome and available complaint route to the extent lawfully and safely possible.

Depending on applicable law and Planique's role, you may have rights to information, access, correction, deletion, restriction, objection, portability, withdrawal of consent or complaint. A right may be limited where confirming or disclosing information would adversely affect another person's rights, reveal protected information, undermine security or conflict with binding law.

If the GDPR applies, you may complain to the competent EEA supervisory authority. Planique's Croatian authority is the Croatian Personal Data Protection Agency (AZOP). Canadian and US residents may contact the privacy, consumer-protection or Attorney General authority with jurisdiction over them.

8. Contact

Service operator: Cropol Labs d.o.o.

Privacy Officer: Chief Executive Officer

Privacy email: planique.planner@gmail.com

Legal correspondence address: Ulica sv. Ane 30A, 31000 Osijek, Croatia