Effective: October 1, 2026
The short version. Your household's information lives in a database of its own, on a server in the United States. We do not sell it and we do not share it. We can technically read it, because the service has to calculate from it, and we only do so to run the service or to help you when you ask.
MyPlann is operated from the United States. For anything in this policy, write to info@myplann.com.
If you sign up for early access or send feedback through www.myplann.com, we collect your email address, anything you write, and basic request details such as IP address and browser. We also measure traffic with Google Analytics, which processes visit data, including IP address, on Google's infrastructure. We do not upload your household information there.
The marketing site, www.myplann.com, uses three kinds of cookies. Google Analytics sets cookies whose names begin with "_ga" so we can count visits and see which pages are read; they carry no household information. The home page sets one cookie of its own, "mp_ab", which remembers which version of the page you were shown. And, like most websites, it uses a session cookie that lasts only while your browser is open.
The MyPlann application, login.myplann.com, uses only the cookies it needs to sign you in: a session cookie; your household key, kept for a year so the sign-in page can fill it in for you; and, if you tick "keep me signed in", sign-in cookies that last 30 days, or until you sign out on that device. The application has no analytics or advertising cookies.
You can block or delete cookies in your browser's settings, and you can turn off Google Analytics on every site with Google's opt-out add-on. The marketing site works without cookies. The application needs its session cookie to sign you in; without the others, you type your household key each time.
Inside MyPlann, we hold what you enter, because the service cannot calculate anything without it:
This is the most sensitive information MyPlann holds, so it is worth being exact.
We collect it for one purpose: to count how many days of critical medicine your household has, so the service can tell you when that is the thing that would run out first. We do not use it for anything else, and it is never shared.
We ask for as little as the count needs. The readiness profile asks whether anyone depends on a critical medicine and how many days of it you keep, in ranges such as 30, 60 or 90 days. We do not ask for medication names or doses, and we do not collect your pharmacy, your prescriber's name or your prescription number.
MyPlann is not a medical record, is not covered by HIPAA, and is not a substitute for one. Please do not use it to store clinical notes or anything you would not want to lose.
Yes, technically, and we would rather say so plainly than imply otherwise. Any service that calculates on your data can read it; only end-to-end encrypted products can honestly say they cannot, and they cannot do anything useful with the contents. MyPlann calculates your readiness from your inventory, so the server can read it.
What we do about that:
To run the service and produce your estimates; to send you service messages such as your welcome email or a password reset; to answer you when you contact us; and to keep the service secure. With your consent, to send occasional product or preparedness email, which you can stop at any time. We do not sell your information, and we do not use it for advertising.
We send email through Brevo, our email delivery service. Brevo records whether each email is delivered and opened and which of its links are clicked; to do that, links in our emails pass through Brevo on their way to our site.
We may publish anonymous aggregates, for example the average number of days of water households keep. These never identify a household and are never derived in a way that could single one out.
On a privately managed server in the United States, in a database belonging to your household alone. The connection between your browser and the service is encrypted with HTTPS.
The databases are backed up on a regular schedule, and a copy is held off-site on systems the operator controls, so that a failure does not lose your household's work. Backups are kept on a rolling basis and a deleted household disappears from them as that cycle turns.
Passwords are stored as salted, stretched hashes and are never recoverable. Repeated failed sign-ins lock an account temporarily. Traffic is encrypted in transit. Two-factor authentication is not available yet; it is planned, and we will tell account holders when it arrives. No service is perfectly secure, and we will not pretend otherwise.
We keep your household's information for as long as your account exists. If you ask us to delete it, we delete the whole database. Sign-in logs are kept for a limited period for security. Signup and feedback records from the marketing site are kept while they are useful, and unsubscribe records are kept so we can honour them.
You can ask us to delete your data, or unsubscribe from email, at any time. Email info@myplann.com and we will action it promptly. Deleting your household destroys its database and it cannot be recovered afterwards.
MyPlann is for adults. Accounts are not offered to under-18s, and the marketing site is not directed at children. You may record children as members of your household, including details such as their daily needs; that information is entered by the adult who holds the account, and it is treated like the rest of your household's data.
If we make a meaningful change we will update the effective date and email account holders. We will not make a change that reduces the protection of information already collected without telling you first.
Questions or concerns? Email info@myplann.com.