Last updated: [DATE]

Who this is

Yonder ([LEGAL ENTITY NAME]) operates yonderplanner.com. For anything about this policy or your data, contact us at hello@yonderplanner.com.

What we collect

When you create a Yonder account, we collect and store:

• Your email address, used to sign you in.
• Your household’s planner data - family name, selected regions, and the events you add (titles, dates, and categories).
• Basic usage metadata - things like login and view counts - used only to understand how the product is used, never the content of your events.

Payment is handled entirely by Stripe. We never see or store your card details - only Stripe does.

How we store and protect it

• All data is transmitted over encrypted connections (HTTPS/TLS).
• All data is encrypted at rest in our database provider’s infrastructure.
• Your household’s data is only ever readable by your own account through the app - every other household is walled off at the database level, not just hidden in the interface.
• Administrative access to the underlying database is restricted to those of us operating Yonder, and is used only for support, security, and legal compliance - never to browse customer data out of curiosity, and never shared with or sold to anyone else.

To be transparent about the limits of this: your event data is not end-to-end encrypted, meaning it is technically readable by us as the operator of the underlying database (in the same way it would be for almost any hosted app you use). It is not readable by other customers, by anyone without legitimate database access, or by anyone intercepting your connection to the site.

Who else sees it

• Stripe - processes payment. See Stripe’s own privacy policy.
• PostHog - product analytics. We only ever send metadata (e.g. that an event was added, its category, and whether it repeats) - never event titles, dates, or any other personal content.
• [EMAIL PROVIDER] - delivers sign-in and account emails.

We do not sell your data, and we do not share it with anyone else.

How long we keep it

We keep your data for as long as your subscription is active. If your subscription lapses or is cancelled, your access is paused immediately, but your data is kept for 90 days in case you resubscribe. After 90 days it is permanently deleted and cannot be recovered.

Your rights

Under the Privacy Act 2020 (NZ), you have the right to access and correct the personal information we hold about you. Contact hello@yonderplanner.com to request access, a correction, or deletion of your data at any time.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated date at the top of the page.

← Back to Yonder