Privacy, in plain words.

In short

MePlans keeps your plan so that it follows you from device to device. It keeps nothing it does not need for that, shows you no ads, and sells or shares nothing about you.

• Your plan (your scorecards, goals, ways to know, targets, check-ins, Me Dos, Me Actions and the rest) is saved to your account, under an id that is not your name or your email address.
• Your journal (Me Notes) and your private answers stay on your device. They leave it only if you choose to lock them with a code, and then only as text nobody but you can open.
• When you ask MeMind for something, the parts of your plan it needs are sent to Azure OpenAI to produce the answer. The app says so beside the control, every time. Your journal is never sent.
• Your card details go to the payment provider, never to MePlans. MePlans keeps only which plan you are on and until when.
• You can export your whole plan at any time, and you can ask for your plan and your account to be deleted.

Who is responsible

MePlans and WePlans are run by [the legal entity behind MePlans, Emerson] ("MePlans", "we"). Write to the address on the Contact page about anything on this page. This page covers the website at meplans.com and the MePlans app it leads to, on the web, on a phone and as the copy you can download to your computer.

What MePlans keeps, and why

Your account

You sign in with a Microsoft account. Microsoft's sign-in tells MePlans a provider name, an id for you, and your display name. From the id MePlans makes an opaque id of its own (a one-way hash) and keeps your plan under that. MePlans does not keep your email address or your password; it never sees your password. Your display name is shown to you in the app, and to the other members of a WePlans you belong to.

Your plan

Everything you build in the app except the private tier below: your scorecards and their names, questions, areas and colors; your goals with their ways to know and targets; your check-ins; your Me Dos, Me Actions and Motivation; MeMind's proposals and what you decided about them; your points; your settings. It is saved to your account so that the same plan opens in any browser you sign in from. A copy also lives in the browser you use, so the app opens quickly and works while a save is on its way.

The private tier: your journal and your private answers

Me Notes and the answers you mark For My Eyes Only are kept on the device you wrote them on and nowhere else, unless you turn on the choice in Settings to keep them with your saved copy. If you do, they leave your device encrypted (AES-256-GCM) under a key made from a private notes code that only you hold. MePlans stores the locked text and a key id and cannot open it. If you lose the code, nobody can recover those notes for you. They are never scored and never sent to MeMind.

Your plan and your payment

When plans are sold, the payment is handled by the payment provider on its own pages. MePlans receives from it which plan you are on, its status, when the current period ends, whether you have ended it, and a customer id that lets the payment provider find you again. MePlans never receives your card number.

WePlans

A WePlans is a shared document. Every member can see its name, its purpose, its scorecards, its goals, who does what, the invite codes they made, each member's display name, and each member's check-ins on the group's goals and the scores made from them. Your own MePlans is never part of it. A goal of yours that supports a group's goal is a fact of your plan only; the group sees that you support its goal, not the rest of your plan.

The Me Community

If you offer one of your goals to the Me Community, exactly what the offer screen shows is shared with every member: the goal's words, its way to know and its target, and never your check-ins or your scores. Whether your display name appears beside it is a setting of the deployment that the app tells you about when you offer.

What the service writes down about requests

Each request to the service is logged with the time, the method, the address, the status, the time it took and the opaque id of the signed-in person. No names, no plan text, no prompt text and no journal text are logged. These lines are kept for a limited period to keep the service running and find faults, then discarded.

MeMind and the model

MeMind has two parts. Its rules run on your device and in the service, and read your plan to raise proposals; nothing leaves for that. When you ask MeMind a question, ask it to draft a goal or ask for a weekly review, the words you type and the parts of your plan the task needs (your goals, their ways to know, targets and recent scores, never your journal or your private answers) are sent to Azure OpenAI, which produces the answer and returns it. The app says so in a sentence beside each such control and names the provider. MePlans does not use your words to train any model.

MeMind suggests; you decide. No proposal changes your plan until you approve it.

Where it is kept

The service and its database run on Microsoft Azure in the United States. The sign-in is Microsoft's. The copy of your plan in your browser, and your private tier when it is not locked with a code, are on your own device, and the copy you download for your computer runs there without a connection.

Cookies and browser storage

The sign-in sets one cookie, which is how the service knows the request is yours. The website sets none, and there is no analytics or advertising code anywhere on the site or in the app. The app uses the browser's own storage for the copy of your plan, your settings and, if you made one, your private notes code; that storage stays in that browser and is cleared when you clear it.

Who else sees anything

Nobody is sold or given anything about you. The people and companies that handle part of the work, each for that part only, are:

• Microsoft, which runs the sign-in and the cloud the service and the database run on.
• the payment provider, which handles payments.
• Azure OpenAI, which produces MeMind's written answers when you ask for one.
• The members of a WePlans you join, who see what the group's document holds, and the members of the Me Community, who see a goal you offer.

MePlans would disclose information if the law required it, and would tell you if it were allowed to.

How long it is kept

Your plan is kept as long as you have an account. Start over in the app clears your saved plan. Ask at the address on the Contact page and your plan and your account are deleted, and confirmed back to you. A WePlans you leave keeps your check-ins so the group's history still adds up; one that is deleted by its owner is gone for everyone. The payment record stays with the payment provider under its own terms. Request logs are discarded after a limited period.

Your choices and your rights

• See and take your plan: Settings exports the whole of it as one file at any time, and imports it again.
• Correct anything: every word in your plan is yours to change in the app.
• Delete it: Start over in the app, or write to the address on the Contact page to have your plan and your account removed.
• Keep your journal on your device: that is the default, and the choice to lock it with a code and keep it with your saved copy is yours to turn on and off.
• Decline MeMind's model: you need never ask it anything; its proposals from your own numbers need no model at all.
• Residents of California and of other places with privacy laws have rights to know, to access, to correct, to delete and not to be discriminated against for using them, and MePlans does not sell or share personal information as those laws use the words. Write to the address on the Contact page to use any of them; MePlans answers within the time the law gives, and asks for nothing more than it needs to be sure the request is yours. [Emerson: confirm the rights paragraph and whether to name the laws.]

Children

MePlans is for adults. It is not directed at children under [18 or 13, Emerson], and MePlans does not knowingly keep information about them. If you believe a child has an account, write to the address on the Contact page and it is removed.

Changes to this page

When this page changes in a way that matters, we say so in the app or on this site before the change applies, and the date at the top changes. The old text stays available on request. The Terms say the rest.