Privacy

Milestone 91™ planner app at milestone91planner.com · Updated October 19, 2026

Milestone 91 is a planner. This page explains what the app stores, why, and how to remove it. In short: your planner is yours. It isn’t sold, shared for advertising, or used for anything except running the app for you.

What the app stores

Your account: your email address and a password (stored only in scrambled form by our sign-in provider), plus your name and, only if you add them, a phone number and mailing address. These are used to run your account, for receipts, and to contact you about your account. You can change them anytime in Settings → Account.
Two-step sign-in (only if you turn it on): a secret key shared with your authenticator app, kept by our sign-in provider and used only to check your 6-digit codes.
Your planner: what you write in the app, such as your goal, milestones, schedule, tasks, notes, habits, and check-ins.
Reminders: the reminder times you choose, and a notification address for each device where you turn reminders on.
Your access: when your free days end, any pass you’ve bought and its dates, and any code you’ve used. Payments are handled by Stripe; the app never sees or stores your card number.
Google Calendar (only if you connect it): a permission token from Google and the email address of the Google account you connected.
Photos of your paper pages (only if you use Copy from paper): each photo is sent to Anthropic, the company that makes Claude, so Claude can read your handwriting. Anthropic doesn’t use them to train its models. If you choose to keep the photos, they’re stored privately in your account (up to 365), where only you can see them, and you can delete them anytime in Notes. If you don’t keep them, they aren’t saved.

Google Calendar

If you connect Google Calendar, you choose a Google calendar for each label you want to sync: a new calendar the app makes for it (for example “M91 · Work”) or one you already have. The app can see the list of your calendars so you can choose, and it can see, add, change, and delete events on the calendars you chose, so they stay in sync with your blocks. Events on calendars you didn’t choose are never read or changed. Events other people invited you to are brought in but never changed from the app.

Several labels can share one Google calendar, such as your main calendar. To keep each block’s label, the app saves a short, hidden label tag on the events it adds; only the app uses it. If you mark a label Private, its events are added as private, so people you share that calendar with see only “Busy.”

Milestone 91’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide calendar sync for you, is not sold, is not used for advertising, and is not read by people except when you ask for help with a problem, for security, or as required by law.

You can disconnect at any time in the app (Settings → Google Calendar → Disconnect) or from your Google Account’s security settings. Disconnecting deletes the stored Google token. Your calendars and events stay in your Google account.

Other calendars (Apple, Outlook, Canvas)

If you add a calendar link in Settings → Calendar, the link is saved with your planner. To show its events, the app’s server fetches the link and sends the events back to your device; the events aren’t stored on the server, and a copy is kept on your device so they show offline. These calendars are view only: nothing in them is changed. Anyone with one of these links can see that calendar, so keep it private. You can remove a link anytime.

Where it’s kept

Your account and planner are stored with Supabase (a database service). The website and reminders run on Cloudflare. Handwriting is read by Anthropic’s Claude. Payments are processed by Stripe under Stripe’s privacy policy. A copy of your planner is also kept on each device you use, so the app works offline. Signing out of a device removes that device’s copy.

How your data is protected

Your planner, your account details, and the Google data you let the app use are treated as sensitive data. Here is how they’re protected:

Encrypted in transit: everything sent between your device, the app’s server, and the services above (Supabase, Cloudflare, Google, Stripe, Anthropic) is encrypted with HTTPS (TLS).
Encrypted at rest: the database and photo storage are encrypted on disk by Supabase (AES-256).
Google Calendar access is locked to the server: the permission token from Google is kept in a server-only table that the website, your browser, and other accounts can’t read. Only the app’s server can use it, with a secret key kept in Cloudflare’s encrypted secret storage. The token is never sent to your device or shown to anyone. Along with it, the app keeps only the email of the Google account you connected and which calendars you chose. Events you sync become blocks in your planner, protected like the rest of your planner.
Only your own data: database rules (row-level security) let each signed-in account read and change only its own rows, and kept photos are in private storage that only your account can open.
Passwords: stored only in scrambled (hashed) form by our sign-in provider, never in plain text. You can turn on two-step sign-in in Settings → Account.
Only what’s needed: the app asks Google only for the calendar access it needs to sync the calendars you choose. Google data is used only to show and sync your calendar in the app. It isn’t sold, used for advertising, sent to Anthropic, or used to develop, improve, or train AI or machine-learning models.
Limited people access: only the app’s developer has administrator access to these systems, protected by strong passwords and two-step sign-in. Your data is looked at only if you ask for help, for security, or when required by law. Secret keys are never put in the app’s code.
Deletion: disconnecting Google Calendar deletes the stored token and revokes the app’s access. Deleting your account removes your data as described below. Deleted data may stay in our database provider’s encrypted backups for a short time before it’s overwritten.
If something goes wrong: if a security problem affects your data, you’ll be told promptly, along with any authorities as required by law.
On your devices: the copy of your planner kept on each device for offline use is protected by your device’s own lock. On a shared device, sign out when you’re done.

No system is perfectly secure, but these protections are reviewed whenever the app changes. To report a security concern, email milestone91planner@gmail.com.

Who can see it

Only you, when signed in. Each account can read and change only its own planner. Your data isn’t sold or shared with advertisers.

Deleting your data

You can delete your account and everything in it yourself, anytime: in the app, go to Settings → Account → Delete my account. You’ll be offered a backup first. Deleting disconnects Google Calendar and removes the app’s access to it, then deletes your planner, saved photos, reminders, any pass or code records, and your sign-in. It can’t be undone. Payment records Stripe must keep for tax and legal reasons stay with Stripe. If you can’t sign in, email milestone91planner@gmail.com from the address you signed up with.

Questions

Email milestone91planner@gmail.com.