CriaPlanner

Privacy Policy

Last updated: July 2026

The short version: CriaPlanner is a cloud-synced planner, so it works differently from our other apps — it does require an account (email & password, or Google sign-in), and the to-dos, notes, events, and budgets you create are stored on our servers so they can sync across your devices and be shared with people you invite. Everything is encrypted in transit (TLS) and at rest. We never sell your data, and you can request full deletion at any time by emailing support@alpaca-media.com.

Account & authentication

To use CriaPlanner you need an account, created either with an email address and password, or by signing in with Google. Account authentication is handled by Supabase. If you sign up with email and password, your password is hashed and never stored or seen by us in plain text. If you sign in with Google, Google shares your name, email address, and profile picture with us so we can create your account — we don't receive your Google password or any other Google account data.

Data you create

Because CriaPlanner syncs across your devices and lets you share plans with other people, the content you create is stored in our cloud database (hosted on Supabase, synced via PowerSync), not just on your device. This includes:

Your profile: display name, chosen avatar, and colour
To-dos, notes, and calendar events — titles, descriptions, dates, and reminder settings
Plans — shared lists of to-dos/notes/events, and who's a member of each one
Budgets — titles, and every transaction in them: amount, description, date, who paid, and how it's split between members
Names of any "guests" you manually add to a budget who don't use the app themselves

All of this is encrypted in transit between your device and our servers (TLS), and encrypted at rest on Supabase's infrastructure.

Sharing with people you invite

When you share a Plan or Budget, the people you add can see the items, events, or transactions inside it, along with your display name and avatar. If you invite someone by email who doesn't have an account yet, we send their email address to Resend, our email provider, purely to deliver the invite — that address isn't used for anything else.

Push notifications

If you grant notification permission, we store a device push token (linked to your account and platform) so we can deliver reminders for shared Plan items to other members' devices, even when their app isn't open. This token identifies your device for notification delivery only.

Voice dictation

If you use the microphone to dictate a to-do, note, or event, CriaPlanner uses your device's built-in speech recognition (Apple's on iOS, Google's on Android) to convert your speech to text. We do not record or store the audio — only the resulting text is saved, the same as if you'd typed it.

Third-party services

Here's exactly what each service we rely on does:

Supabase — accounts, database & sync

Supabase hosts our database and handles authentication. It stores your account credentials and all the app data described above.

collectsEmail address

collectsHashed password (if used)

collectsAll app content (to-dos, notes, events, budgets)

PowerSync — device sync engine

PowerSync relays changes between your device and our Supabase database in real time, including while you're offline. It handles the same app content described above in transit; it doesn't independently retain a separate copy of your data.

Resend — invite emails

When you invite someone to a Plan or Budget, we use Resend to send the invite email. Resend processes the recipient's email address and the plan/budget name to deliver that one message.

collectsInvitee's email address

RevenueCat — purchase verification

We use RevenueCat to manage the Pro/Duo/Family subscriptions. RevenueCat identifies your purchase using an anonymous ID tied to your account, and verifies receipts through Google Play or the App Store.

collectsAnonymous subscriber ID

collectsPurchase receipt (from Google Play / App Store)

Sentry — crash reporting

We use Sentry to receive reports when the app crashes, so we can find and fix bugs. A crash report may include your device model, OS version, app version, and the error context at the time of the crash. Sentry may also log your IP address temporarily as part of the request. We don't deliberately attach personal information to crash reports.

collectsDevice model & OS version

collectsApp version & crash context

collectsIP address (temporary)

Google Sign-In

If you choose to sign in with Google instead of email/password, Google shares your name, email address, and profile picture with us, per Google's own privacy policy.

Requesting deletion of your data

Because CriaPlanner is account-based, deleting the app from your phone does not delete your account or data — it's stored on our servers so it can sync back if you reinstall. To permanently delete your account and everything in it:

Email support@alpaca-media.com from the address associated with your account, with the subject "Delete my CriaPlanner data".
We'll reply to confirm we've received your request and verify it's really you.
We permanently delete your profile, to-dos, notes, calendar items, budget transactions, push token, and RevenueCat purchase record. If you own a shared Plan or Budget, it's deleted for everyone in it; if you're just a member, you're simply removed and the owner keeps the rest.
You'll get a confirmation email once it's done — typically within 30 days.

Children's privacy

CriaPlanner does not knowingly collect data from children under the age of 13.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. We encourage you to review it occasionally.

Contact

If you have any questions about this privacy policy, or want to exercise your data rights, reach us at support@alpaca-media.com.