Privacy notice

Controller

Binoron, LLC
1111B S Governors Ave # 47095
Dover, DE 19904
United States

Data we process

• Your email address and account details used to sign you in.
• Family membership, projects, tasks, comments, links, budgets and expenses.
• Files and project images you choose to upload.
• Notification information when you choose to enable notifications.
• Subscription and payment-status details if you purchase a paid plan.
• Limited security and service logs needed to protect and operate Big Little Plans.

Why we use this data

We use data to provide the planning service you request, keep it secure, respond to support requests, meet legal obligations and prevent misuse. Device notifications are optional and require permission on your device. Task-related email reminders are sent only when you have enabled that feature.

Service providers and international transfers

Big Little Plans uses Vercel to host the app, Supabase for sign-in, project data and private file storage, Stripe for subscriptions and payments, and Resend for optional task reminder emails. For a reminder email, Resend receives the recipient address and necessary content such as display name, task title, due date and app link. If you choose optional Google or Apple sign-in, those providers also process the information needed for that service. Providers may process data outside your country under their contractual transfer protections.

Retention and deletion

Your family projects are kept while the account is active. You can export your data or request account deletion in settings. A family owner must transfer ownership or delete the shared family space before removing the owner account. Payment records may be kept when tax, accounting or dispute rules require it; security logs are kept only for a limited period.

Your rights

Depending on where you live, you may request access, correction, export, deletion, restriction or objection, and may complain to a competent supervisory authority. You can withdraw consent for future processing.

Children and family data

Big Little Plans is intended for adults organizing family projects. Children should not create accounts independently, and adults should avoid adding unnecessary sensitive information about children.

Security

Project access is granted separately. Only people explicitly invited to a project can see its tasks and private files, and an invitation does not unlock other projects. Stripe handles payment-card details for paid plans; Big Little Plans does not store them. No internet service can promise absolute security.

Optional offline storage

When you enable offline use, this device stores a copy of selected projects, tasks and unsent changes encrypted with your own password. Sign-in credentials and private file-download links are not included. We do not know this password and cannot reset it. After seven days you cannot make new offline changes, but can still read and send existing changes. When you reconnect, we check project access and changes made by other people.

A disconnected device cannot yet learn that project access has been revoked. Lock or remove offline storage on shared devices. Signing out removes the local copy on this device. Do not remove it before pending changes have been sent. The app cache holds only the generic offline interface and public images, not private project pages.

Backup and restore

Exported backups may contain private project information and files. Store them securely and share them only with authorized people. Restoring creates new project copies and leaves existing projects unchanged. Sign-in credentials, payment status, invitation links and previous access rights are not restored. You need to invite collaborators again.

Optional usage and speed measurements

You can enable optional measurements on this device in settings. They are off by default. We collect only broad speed ranges and counts of core actions, such as creating a project or completing a task. Grouped results contain no account IDs, names, task content, project identifiers or full page addresses. There are no advertising cookies or additional analytics provider. Turning this off stops future optional reports.

To prevent abuse, we briefly keep account-linked rate counters and random report identifiers. They expire after 47 hours; grouped results after 29 days and 23 hours. The next successful hourly cleanup removes expired entries. Operational outages may delay deletion.

Technical error reports

To keep the service reliable, we record only broad error types and app areas, without error-message text, names, task content or private links. The same short retention and cleanup periods apply to these reports. If operator email alerts are enabled, Resend receives only these technical categories and counts and the operator email address. A complete outage can prevent recording or delivery.