Privacy Policy

1. How Current Stores Your Data

Current can be used in two ways, each with different privacy implications:

Without an account (local only)

If you choose not to sign in, all your data (tasks, schedules, templates, categories, and preferences) is stored exclusively on your device using Apple's on-device storage. None of your schedule data is transmitted to our servers or any third party. Analytics data (see Section 2) is still collected unless you opt out. Subscription services also process an app-generated customer identifier and purchase information without an account.

With an account

If you sign in (via Apple Sign-In, Google Sign-In, or email sign-in), you can use account-based features. Planner cloud sync is optional, requires Current Pro, and only runs when enabled in your settings. Synced planner data is hosted on Supabase (Supabase Inc.), with servers located in West EU. All data is encrypted in transit via TLS and encrypted at rest at the infrastructure level. Your planner content is processed to provide cloud sync. It is not included in usage analytics or used for advertising.

Feedback & ideas is a separate, online-only service for signed-in members. It is available without Current Pro and works even when planner cloud sync is disabled. Feedback is stored on our servers and linked to your account, rather than saved in your local planner.

You can delete your account at any time from within the App (Settings > Account > Delete Account). Upon deletion, your synced planner data and associated feedback data are removed from our servers, subject to the retention details in Section 5.

2. Information We Collect

Information you provide

• Account information: If you sign in, we receive a user identifier and, if you choose to share it, your name and email address. We support Apple Sign-In, Google Sign-In, and email sign-in. We do not receive or store your password for any sign-in method. All authentication is handled through secure token exchange.
• Optional promotional emails: If you separately opt in, we record your verified account email address, account identifier, the time and source of your consent, the wording you were shown, its version, and your language or region setting. This lets us email you about new features, tips and offers from Current and keep a record of your choice. Signing in, buying Current Pro, or acknowledging this policy does not subscribe you. The email checkbox is optional and starts unticked.
• Schedule data: Tasks, schedules, templates, categories, and other content you create in the App. Your entries may contain personal data (such as names, contact details, or appointment information), which we process solely to provide the service. This data is only transmitted for cloud sync when you are signed in, have Current Pro, and enable planner cloud sync.
• Preferences: Your settings and configuration choices (e.g., day start/end times, theme preference, notification settings).
• Feedback and community activity:If you use Feedback & ideas, we store your suggestions, bug reports, general feedback, comments, votes, content reports, blocked-member choices, optional username, and associated timestamps. We link these records to your account to manage ownership, replies, deletion, moderation, and abuse prevention. We also keep review decisions and feedback-specific restrictions where applicable.

What other members can see

Feature suggestions and member comments are reviewed before other members can see them. Approved suggestions, approved comments, team replies, progress statuses, and vote totals can appear on the board. Bug reports and general feedback, including their replies, remain private to their author and the Current team. Content reports and blocked-member choices are not published on the board.

You may choose a public username or appear as "User". Once chosen, your username is fixed for new posts and comments unless moderation removes it. Earlier anonymous contributions stay anonymous. Appearing as "User" hides your name from other members; it does not remove the account link we use to operate the service. The board does not publish your email address, account identifier, or individual voting history. Please avoid including personal or sensitive information in content you submit for public display.

Information collected by the App Store

When you download Current, certain information is transmitted to the Apple App Store (such as your Apple ID, device identifier, and payment information). This data is processed exclusively by Apple and is beyond our control. Please refer to Apple's Privacy Policy for details.

Information collected automatically

• Usage analytics and crash reports: We use PostHog (PostHog Inc., hosted in the EU) to understand feature use, app launches, notification interactions and errors so we can improve Current. Events include an app-generated identifier and general app and device information. When you sign in, usage can be linked to your Current account identifier and email address when available. These analytics do not include your task titles or notes. You can opt out of optional usage analytics in the App's privacy settings. Turning this off does not automatically erase previously captured or queued data.
• Subscription data: RevenueCat (RevenueCat Inc., hosted in the US) processes purchase history, products, trial and entitlement status, transaction identifiers and general app and device information to manage Current Pro. A guest has an app-generated customer identifier. For signed-in accounts, we associate subscription records with your Current account identifier and send your email address and display name when available. Subscription events are also recorded in our backend and analytics service to understand purchases and renewals. This subscription processing is separate from the app usage analytics toggle. We do not receive your payment card details; Apple handles payments. Our enabled RevenueCat integration also sends subscription events and subscriber attributes to PostHog, including person-profile updates. These server-side subscription events can continue independently of the App, including when optional app usage analytics is turned off.
• Device information: Usage and diagnostic events can include device model, operating system, app version, screen dimensions, locale, time zone and network information. Service providers receive an IP address with requests. Our analytics provider estimates your approximate location from your IP address to help us understand app usage. Current does not access your device’s location services. Google sign-in also uses IP information for security. Current does not use an advertising identifier (IDFA). App-generated installation and device identifiers may still be used for analytics and service operation.
• Email delivery: We use Resend to deliver sign-in codes and links and, if you opt in, promotional emails about Current. It processes the recipient email address, message content and delivery metadata in the US. Optional promotional emails are separate from essential sign-in messages and app usage analytics. Unsubscribing from promotions does not stop sign-in emails or essential account and security notices.
• Feedback abuse prevention: Our feedback service processes the requesting IP address and, for signed-in requests, the account identifier to enforce request limits. It converts these identifiers into keyed, pseudonymous values before sending them with temporary request counters to Upstash. We do not send raw member IP addresses, account identifiers, email addresses, usernames, or feedback content to Upstash for these counters.

Information we do NOT collect

• We do not collect your precise location.
• We do not collect your contacts, photos, or microphone/camera data.
• We do not collect health or fitness data.
• We do not read your email or messages.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App
• Sync your planner data across your devices when you enable cloud sync with Current Pro
• Process and manage your subscription
• Understand how the App is used and diagnose errors so we can improve it, including account-linked analytics when signed in
• Send you notifications you have opted into (task reminders, schedule alerts)
• Send news, tips and offers about Current by email, only with your separate consent; you can unsubscribe using the link in each promotional email or contact us at privacy@currentplanner.app
• Respond to your support requests
• Receive and respond to feedback, publish approved suggestions and comments, and communicate progress on ideas
• Moderate contributions, handle content reports and blocking, enforce username rules, and prevent spam and misuse

We use your email address for Current's own promotional emails only if you opt in. We do not use your planner content for marketing, sell your data, share it for other companies' advertising, or track you across other companies' apps or websites.

4. Third-Party Services

We use the following third-party services:

5. Data Retention

• Account data: Retained as long as you have an active account. If you delete your account, your synced data is removed from our live service. Local planner data stays on your device. Account deletion does not cancel an App Store subscription; manage that separately in your Apple account. Analytics and subscription-provider records follow the explanation below. A private encrypted backup made for deployment recovery can contain earlier account content. We retain that copy through deployment and recovery verification, then manually retire it; it is not used for routine app access.
• Feedback data: Contributions are retained while your account exists unless you delete them or the team removes them. Hiding content through moderation or blocking does not delete it. You can delete your own posts and comments in the App. Account deletion removes your feedback profile, posts, comments, votes, reports, block relationships, and account-linked moderation and activity records. A banned username may remain on our prohibited-name list without an attached account identifier so that the name cannot be reused to evade moderation.
• Temporary request counters: Feedback rate-limit counters in Upstash expire within two days. They are not removed immediately when you delete a post or account. The separate board-wide pause setting contains no member identifier.
• Analytics and subscription-provider records: PostHog currently provides a seven-year event query window for our plan. That window does not itself erase older events or identified person profiles. It is not a periodic erasure schedule for those records. Turning off optional app usage analytics does not erase earlier events, queued data or profiles, or stop the separate RevenueCat subscription integration. RevenueCat retains customer and purchase history to provide subscription services until separately removed, subject to its backup, archival and legal obligations. Deleting your Current account does not automatically delete records in either provider. Contact privacy@currentplanner.app to request access or deletion; we must handle those provider records separately. Apple subscriptions and transaction records remain subject to Apple’s own controls and requirements.
• Promotional email records: We keep your consent record while your account exists, including after you unsubscribe, so we can show how permission was obtained. Account deletion removes that account-linked record and ends eligibility for promotional emails. When you unsubscribe, we keep a minimal record of your email address and unsubscribe time for as long as needed to honour that choice, including after account deletion. This suppression record is used to prevent further marketing, not to send it. Reinstalling Current or acknowledging a later policy does not undo an unsubscribe. Email-provider delivery records follow the retention described below.
• Service and email delivery records: Our providers keep request, security and delivery records to operate and protect the service. These may include account identifiers, IP addresses and request or email metadata. Resend’s standard retention for email content and delivery logs is currently 30 days. Account deletion and the app usage analytics setting do not instantly erase provider operational records or recovery backups. Contact us for access or deletion requests concerning these records.
• Local data: Data stored on your device is under your control and can be deleted by removing the App.

6. Your Rights

Regardless of where you are located, you may:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data (via in-app account deletion or by contacting us)
• Withdraw consent for analytics data collection (via the in-app opt-out toggle)
• Unsubscribe from promotional emails and withdraw marketing consent at any time using the unsubscribe link in each promotional email, without signing in, or by contacting privacy@currentplanner.app. This does not affect your access to Current or your subscription. Withdrawal does not affect the lawfulness of processing before you withdrew consent.
• Request a copyof your email-consent and unsubscribe records by contacting us. These records are not included in the App's planner JSON export.
• Request a copyof your account-linked feedback data. The App's JSON export covers planner data and preferences; it does not include feedback, comments, votes, reports, block relationships, or moderation records. Contact us using the address below for a feedback data request.

To exercise any of these rights, contact us at privacy@currentplanner.app.

7. Cross-Border Data Transfers

Your data may be transferred to and processed in regions outside the United Arab Emirates. Specifically:

• Supabase (authentication, optional planner sync, feedback, and email-consent and unsubscribe records): hosted in West EU
• Upstash (feedback abuse-prevention counters): our counter database is hosted in Ireland, EU
• Google (sign-in): hosted in US, only if you sign in with Google
• PostHog (optional app usage analytics and separate subscription analytics): hosted in EU
• RevenueCat (subscriptions and subscription analytics): hosted in US, for guests and signed-in users
• Resend (sign-in and optional promotional email delivery): message content and delivery records are stored in the US, even when email is sent from an EU region

These transfers support the features you use, including optional promotional email delivery if you choose it. Each provider maintains its own data protection standards, and all data is encrypted in transit via TLS.

8. UAE Users

Current is operated by Marjorie Allo, based in the United Arab Emirates. This Privacy Policy is designed to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") and its implementing regulations. Where you use features that involve the processing of your personal data, we rely on your consent or the necessity of processing to provide the service you requested as the lawful basis. You may withdraw your consent at any time by adjusting the relevant settings within the App, using the unsubscribe link in a promotional email, deleting your account, or contacting us at privacy@currentplanner.app.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional provisions apply:

Lawful basis for processing:

• Contract performance:We process your schedule data and account information to provide the account features you request, including optional planner sync and Feedback & ideas. This includes processing contributions, votes, and replies when you choose to use the feedback service.
• Legitimate interest:We process usage analytics and diagnostic reports, which can be linked to your account, to understand how Current is used and improve its reliability. You can opt out of optional usage analytics in the App's privacy settings and contact us to object to this processing or request deletion of earlier records.
• Legitimate interest in service security: We moderate feedback, apply username rules, process content reports and restrictions, and use temporary pseudonymous request counters to protect members and keep the service available. You may object to this processing by contacting us at the address in Section 14.
• Consent: Calendar sync (EventKit) is only enabled with your explicit permission. We send promotional emails about Current only with separate, optional consent. You can withdraw that consent using the unsubscribe link in each promotional email or by contacting us, without affecting your use of the App.
• Legitimate interest in respecting your choices: We retain the minimum consent evidence and unsubscribe records described in Section 5 to demonstrate permission and prevent unwanted marketing.

Additional rights under GDPR: In addition to the rights listed in Section 6, you have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Current is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will promptly delete it.

11. Apple App Tracking Transparency

Current does not track you across other companies' apps and websites. We do not use advertising identifiers (IDFA). We do not perform cross-app tracking.

12. Security

We protect your information through:

• Encryption in transit: All data transmitted between the App and our servers uses TLS (Transport Layer Security).
• Cloud encryption at rest: Data stored on our cloud infrastructure (Supabase) is encrypted at rest at the infrastructure level.
• On-device protection: Data stored locally on your device is protected by iOS Data Protection, which encrypts the file system using your device passcode.
• Secure authentication: Account access is managed through federated sign-in providers (Apple, Google, or email magic link). We never handle or store passwords. Authentication tokens are stored securely in the iOS Keychain.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website or in the App. Reading or acknowledging an updated policy does not grant marketing consent. If a new use of your information requires consent, we will ask for it separately.

14. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at privacy@currentplanner.app