Privacy Notice
Version 2026-10-30.1 · Effective 2026-10-30
Operator
Lure Multimedia LLC is responsible for operating Planmerry and the processing described in this notice.
Data and purposes
Account services process your email, name, password hash, sign-in/session records, purchase and activation status, security events and acceptance records to operate and protect access. Security controls may process network identifiers to limit abuse. Acceptance records contain the account, server time, document version, language/context and associated activation reference where applicable. Passwords are not stored as plain text.
Planner and documents
You can choose device-only storage, Google Drive or the Planmerry server. Device-only records stay in this browser and do not synchronize with other family members. For Google Drive or server storage, your browser encrypts planner records before uploading them. Photo and video content remains in account-scoped browser storage on the device where added; remote records contain only opaque references, not media bytes. Clearing browser data may remove these local media copies. Exports to a connected network folder exclude media; device exports may include local photos. File exports are unencrypted unless explicitly labelled encrypted. Autosave runs while the planner tab is open; manual changes must be saved before closing it. The service retains account, connection, revision and membership metadata and encrypted key envelopes; provider access credentials are encrypted with a separate server key. Vault passwords and recovery keys are not sent to the service. Bank PDF recognition remains local; confirmed records may be included in your encrypted vault. Old browser and legacy server copies are retained until explicitly removed. Unencrypted exports and previously saved drafts remain your responsibility.
Optional sharing and external services
Invitations you publish and attached invitation images are stored on the hosting service and accessible to recipients with the link. If enabled, Google address search sends typed address queries to Google; maps and geolocation involve the corresponding browser and Google services. Account email delivery and hosting process data needed to deliver those features. Purchase marketplaces process their checkout information under their own policies. Planmerry does not currently connect bank accounts through Plaid.
Family storage and key recovery
The family owner chooses the common cloud destination. Each member has a separately encrypted private vault; explicitly shared holidays, expenses and payment labels use a separate family key. A personal payment label does not expose its balance or private cashflow. Joint account balances are shared only when selected. Invitation acceptance uses a verified recipient email and access is granted through the inviter’s license. Revocation blocks future shared access and rotates the family key; downloaded copies cannot be erased remotely. Losing both the vault password and recovery key can make encrypted records unrecoverable. Encryption does not protect data in an unlocked compromised browser or hide account and connection metadata.
US state privacy rights
Depending on your residence and whether the applicable law covers our processing, you may request confirmation, access, correction, deletion or a portable copy of personal data, and may opt out of sale, targeted advertising, cross-context behavioral advertising or certain consequential profiling. California residents may have rights to know categories and specific pieces of information, sources, purposes and recipient categories, to limit certain uses of sensitive information, and to use an authorized agent. Comparable rights and appeals may apply under laws in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. This list does not limit rights under other state laws or imply that every statute applies to this service. We do not discriminate for exercising protected rights.
Privacy requests, appeals and opt-out signals
Send requests or appeals to support@planmerry.com with the subject Privacy request or Privacy appeal and identify your account and requested action. Do not send passwords, recovery keys or complete bank/card numbers. We verify identity proportionately, accept authorized agents as required, and respond within applicable statutory deadlines, with legally permitted extensions explained. If a request is denied, we explain why and how to appeal where provided by law; you may also contact your state attorney general or privacy regulator. We do not sell personal information, share it for cross-context behavioral advertising, use targeted advertising or perform profiling for decisions with legal or similarly significant effects. Global Privacy Control does not require you to create an account or pay; our current no-sale/no-targeted-advertising practice applies to all visitors. A future change involving these uses requires updated notice and applicable opt-out and consent controls before processing begins.
Health-related family details
Allergy, dietary, accessibility and other family details may reveal health information. Enter only information you are authorized to manage; do not include diagnoses, medical records or unnecessary sensitive details in public invitations or messages. Washington’s My Health My Data Act, Nevada’s consumer health data law and other state rules can impose obligations beyond general privacy laws, including for small businesses. A general terms checkbox is not consent to sell or independently share consumer health data. We do not sell it, use it for advertising or use geofences to identify visits to health facilities. Any separately regulated collection or sharing must have the legally required notice, lawful basis and separate consent before that feature is enabled. You can request access, deletion or withdrawal of applicable consent through support@planmerry.com; this may affect the requested feature.
Storage and cookies
The app uses essential session cookies for sign-in and security, and browser storage for preferences, planner records, local photos and videos, and your cookie-notice choice. The sign-in cookie is named __Host-myplan_session and is HttpOnly, Secure and SameSite=Lax. Its configured lifetime is 7 days; logging out clears the session cookie. The “Remember this device for 30 days” checkbox is selected by default when unlocking. You can clear it before unlocking, especially on a shared device. When you unlock with this option selected, the browser stores an encrypted vault key and a non-exportable browser wrapping key for up to 30 days; it does not store your vault password or recovery secret. This allows anyone using your signed-in browser to open the vault. Locking the vault or signing out removes remembered access. Without this choice, the vault key stays in page memory. Other browser storage remains until you remove it or the browser clears it. We currently use no advertising or analytics cookies. Dismissing the cookie notice only records that you have seen it; it does not give marketing or optional tracking consent. Essential storage is required for the features you request. Blocking it can prevent sign-in or saving. If optional tracking is introduced, it must remain disabled until any required consent and opt-out controls are available. No advertising consent is bundled into registration. This notice does not authorize new tracking, resale of bank documents or use of personal statements as a public training dataset. Optional new data uses require appropriate notice and permissions.
Retention and choices
Local planner data remains until you delete it or clear browser storage; exported backups remain under your control. Account, purchase, acceptance and security records are retained as needed to provide the service, meet legal obligations and resolve disputes, then deleted or de-identified when no longer needed. Settings supports exports and encrypted cloud backups. Verified cloud saves retain encrypted versions; no automatic retention deletion is currently enabled, so monitor provider storage quota. An expired purchase or family entitlement does not prevent a verified active account from exporting its own existing encrypted vault. For server access, correction, deletion or other applicable privacy rights, email support@planmerry.com; identity verification may be required. Some legally required transaction and consent records may need to be retained.
Data sources, recipients and location
Information comes from you, invited family members, your authorized imports and cloud connections, and technical interactions with the service. Hosting and email providers receive only information needed for the relevant service; connected cloud and map providers process data under their own terms. Family recipients see only information you explicitly share. We may disclose information when legally required or necessary to protect rights and security, subject to applicable law. Service data may be processed in the United States and in countries where your chosen providers operate; privacy protections can differ. We do not use private planner records to train a public AI model.
Children and sensitive information
The service is for adult account holders, not accounts operated by children under 13. An authorized adult can manage family plans; minimize children’s details, allergy data and financial information, especially in shared content. No system guarantees absolute security. Protect devices and backup files.
Operator contact
Planmerry is operated by Lure Multimedia LLC. For support, questions about this notice, or requests to access, correct or delete personal data, email support@planmerry.com.
You can save or print this page for your records. Download this version of all documents
Your account