Privacy & Terms, in plain sight.

This Privacy Policy explains how Framora ("we", "us", "our") collects, uses, and protects personal data when you use the Plan31 web application (the "Service") at plan31.framorase.com.

01Who we are

Framora operates Plan31. For the purposes of UK GDPR, EU GDPR, and the California Consumer Privacy Act (CCPA), Framora is the data controller for personal data processed through the Service.

• Contact for privacy queries: privacy@framorase.com

02Scope

This policy covers personal data we collect through:

• The Plan31 web app
• Account sign-up and authentication (Google Sign-In)
• Subscription billing (Stripe-hosted Checkout and Customer Portal)
• Invitation emails (sent via Resend)
• Any direct correspondence you have with us

It does not cover third-party services you reach via links from the Service. Those have their own privacy policies.

03Data we collect

3.1 Data you provide directly

3.2 Data collected automatically

3.3 Data we receive from third parties

3.4 Data we do not collect

• We do not connect to your bank accounts. We have no Plaid, TrueLayer, Open Banking, or Salt Edge integration. All amounts you see in the app are amounts you typed in yourself.
• We do not collect sensitive special-category data (health, race, religion, etc.).
• For free-tier accounts, the Marketing, Ads & Analytics toggle in settings is on by default: these accounts may see ads and have product-usage events sent to an analytics provider unless they switch the toggle off (see Section 4.1). Paid-tier accounts never load advertising or analytics SDKs.
• We do not train any AI or machine-learning model on your data — your account data, budget data, or usage data — under any Plan, whether the toggle is on or off.

04How we use your data

We use your personal data only to run Plan31 and to meet our legal obligations. In practice, that means we use it to:

• Provide the Service — display your budgets, sync data with collaborators you've invited, and calculate contribution splits
• Send invitation emails when you invite someone to a shared budget
• Handle billing — process subscription payments (via Stripe) and manage your plan
• Keep the Service secure — detect abuse, debug errors, and protect accounts
• Meet our legal, tax, and accounting obligations
• Support you — respond to your requests and let you know about important changes to the Service or this policy

Where the law asks us to identify a legal basis for this, we rely on performing our contract with you, our legitimate interest in running a secure and continually improving Service, your consent where we specifically ask for it, and compliance with our legal obligations.

We do not use your budget data (incomes, expenses, notes, sub-items, carry-over amounts) for marketing, advertising, machine-learning model training, or any purpose unrelated to operating the Service — for any user on any Plan.

Account contact data (email, display name) of free-tier users who have not opted out may additionally be used as described in Section 4.1.

4.1 Free-tier marketing and advertising (on by default)

If you are on the free Plan, the Marketing, Ads & Analytics toggle in your account settings is on by default, and while it is on we may additionally:

• (a) Send you marketing emails about new Plan31 features, paid-tier offers, and other products operated by Framora that are similar to the Service.
• (b) Display third-party advertising within the Service. When enabled, this will load an advertising SDK that may set cookies and process your IP address, device identifiers, and approximate location to serve and measure ads.
• (c) Collect product analytics about how you use the Service — for example, which pages you visit, how long you spend, and how often you return. This helps us improve the product. We use a cookieless analytics provider that relies on a short-lived, daily-rotated hash of your IP and user-agent to distinguish visitors without persistent tracking. We do not include the contents of any expense, income, note, or other budget data in analytics events.

This toggle is on by default. You can switch it off at any time in your account settings to stop all of these uses.

This does not allow us to:

• Sell your personal data to third parties
• Share the contents of your budgets (incomes, expense names, amounts, notes) with advertisers, analytics providers, or anyone else
• Train machine-learning or AI models on your personal data, your account data, or your budget data — for any user, on any Plan, whether the toggle is on or off
• Send marketing emails from third parties on their behalf

05Who we share your data with

We share personal data only with the categories of recipient below, and only the minimum needed for each purpose.

5.1 Other users you explicitly authorise

When you invite a collaborator and they accept, they can see the budget months you have shared with them, including expense descriptions, amounts, contributors, and the email address of whoever added each item. Collaborators see your display name and email address.

You control this entirely:

• Sharing defaults to off (no months shared) until you opt in
• You can switch between "share all months" and "share selected months only" at any time
• You can remove a collaborator at any time

5.2 Service providers (sub-processors)

We rely on the following third parties to operate the Service. Each is contractually bound to process data only on our instructions.

We do not sell personal data, share it for cross-context behavioural advertising, or transfer it to advertising networks. We do not engage in profiling or automated decision-making that produces legal or similarly significant effects.

5.3 Legal and safety

We may disclose personal data when we believe in good faith that it is necessary to:

• Comply with a lawful court order, subpoena, or government request
• Investigate or prevent fraud, security incidents, or abuse of the Service
• Enforce our Terms of Service
• Protect the rights, safety, or property of Framora, our users, or the public

5.4 Business transfers

If Framora is acquired, merges, or sells assets, personal data may transfer to the successor. You will be notified by email or an in-app banner before any such transfer that changes how your data is handled.

06International data transfers

We and our service providers may process your data in the United States, the European Union, and the United Kingdom. When we transfer personal data internationally, we use the safeguards required by law to keep it protected.

07Data retention

We keep your personal data only for as long as we need it:

• Account and budget data stays while your account is active. If you ask us to delete your account, we remove it from our active systems shortly afterwards, and it ages out of our encrypted backups over time.
• Billing and tax records are kept for as long as tax and accounting law requires.
• Server logs and support correspondence are kept for a limited period and then deleted or anonymised.
• Shared-budget copies. If you are removed from a budget someone shared with you, you may be offered a one-time option to keep a copy of the months you had access to. A copy you choose to keep is stored encrypted under your own key and retained in your account until you delete it. Conversely, data you shared with a collaborator may be retained by them in this way after you remove them — removing a collaborator stops their future access but cannot retract a copy they have already kept.

If you stop using Plan31 without deleting your account, we may close long-dormant accounts after an extended period of inactivity — we'll email you first.

08Your rights

8.1 Rights under UK GDPR and EU GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure ("right to be forgotten") — ask us to delete your data, subject to legal retention rules above
• Restriction — ask us to pause certain processing while you contest accuracy or object
• Portability — request your data in a machine-readable format (we provide JSON export on request)
• Object — object to processing based on legitimate interests
• Withdraw consent — where we rely on consent, withdraw it at any time (this does not affect prior lawful processing)
• Not be subject to automated decision-making — we don't do this anyway

To exercise these rights, email privacy@framorase.com with the email address associated with your account. We respond within one month (extendable by two further months for complex requests).

You also have the right to complain to your local data protection authority, though we'd appreciate the chance to resolve any concern with you first.

8.2 Rights under the California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect, the purposes, and the categories of recipients (all disclosed in this policy)
• Access specific pieces of personal information we hold about you
• Delete your personal information, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of "sale" or "sharing" of personal information for cross-context behavioural advertising — we do not sell or share personal information for these purposes, so there is nothing to opt out of
• Limit use of sensitive personal information — we do not collect sensitive personal information
• Non-discrimination for exercising your rights

To exercise these rights, email privacy@framorase.com. We verify requests using your account email address; for deletion of an account we may require additional confirmation. You may designate an authorised agent.

8.3 Rights under other US state privacy laws

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have substantially similar rights. Contact us at privacy@framorase.com to exercise them.

09Security

We protect your data with industry-standard measures:

• TLS encryption for all data in transit
• Encryption at rest on our database and Stripe systems
• Password-less authentication via Google Sign-In — we never see or store your Google password
• Database-level access rules that prevent users from reading other users' data unless explicitly authorised through the sharing system
• Server-side computation of sensitive aggregates (monthly totals, contribution shares) so the values cannot be tampered with client-side
• Principle of least privilege for staff access — Framora team members do not access your budget data as part of normal operations
• Regular dependency updates to patch known vulnerabilities

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities.

9.1 End-to-end encryption of your budget data

In addition to the platform-level measures above, your budget data is encrypted on your device before it is sent to our servers. This protects the contents of every month you create — incomes, expense descriptions and amounts, notes, sub-items, carry-over figures, and the calculated totals.

• Encrypted contents. The full contents of each monthly budget are encrypted with AES-256-GCM before they leave your device. Our database, our backups, and the cache stored in your browser hold ciphertext only. The key that unlocks your data is held on your device — we never see or store it.
• Sharing. When you share a budget with a household collaborator, only they gain the ability to decrypt the months you've shared, on their own device.
• What stays unencrypted. Operational metadata that does not reveal budget contents — your account profile (email, display name), billing records (held by Stripe), which months exist and when each was last updated, and your sharing configuration (who you have invited and which months are shared).

Recovery — your choice at setup. Because the key is held by your device, what happens if you lose access to it depends on the recovery mode you choose when you first set up encryption:

• Standard recovery. Plan31 keeps a protected backup of your key that is never used in normal operations. If you lose access, our support team can help recover your data. This means Plan31 retains the technical ability to decrypt your data in a recovery situation.
• Strict mode. No backup of your key is kept. If you lose access, your data cannot be recovered by anyone, including Plan31 and its parent company, Framora.

You can switch modes at any time from your account settings.

What this means for you. A breach of our database or backups exposes only ciphertext, and Plan31 staff cannot read your budget contents in normal operations. We deliberately do not describe this as "zero-knowledge": under Standard recovery a protected key backup exists, and encryption protects your data at rest — it does not protect a device that you or a collaborator have already unlocked.

10Cookies and similar technologies

Plan31 uses the following client-side storage:

Paid-tier accounts load no third-party advertising cookies, cross-site tracking pixels, or behavioural analytics SDKs. For free-tier accounts these are governed by the Marketing, Ads & Analytics toggle, which is on by default and can be switched off at any time (see Section 4.1).

For free-tier users who have not switched off the Marketing, Ads & Analytics toggle (on by default; see Section 4.1), the Service additionally loads Vercel Analytics (provided by Vercel Inc.). It sets no first- or third-party cookies. It distinguishes visitors using a short-lived hash of IP + user-agent that rotates daily and cannot be linked across days.

Advertising cookies (if and when an ad SDK is activated for free-tier users with the toggle on) will be disclosed here before activation.

11Changes to this policy

We may update this policy from time to time. When we do, we will:

• Update the "Last updated" date at the top
• For material changes (new data uses, new sub-processors processing sensitive data, expanded sharing), notify you by email at least 30 days before they take effect

Your continued use of the Service after a non-material change takes effect constitutes acceptance of the updated policy.

12How to contact us

These Terms of Service ("Terms") govern your use of the Plan31 web application (the "Service") operated by Framora ("Framora", "we", "us", "our") at plan31.framorase.com. By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

01Acceptance of these Terms

By creating an account, signing in, or otherwise using the Service, you confirm that:

• You have read and accept these Terms and our Privacy Policy
• You have the legal capacity to enter into these Terms (or a parent or guardian agrees to them on your behalf)
• If you are using the Service on behalf of an organisation, you have authority to bind that organisation, and "you" in these Terms refers to that organisation

The Service is available to users of any age. We do not verify, monitor, or restrict users based on age, and we have no obligation to do so. It is your responsibility — or that of your parent or guardian — to ensure you are permitted to use the Service under any laws that apply to you. If you are a parent or guardian and a minor uses the Service under your supervision, you accept these Terms on their behalf and are responsible for their use.

02The Service

Plan31 is a monthly budget tracker. It lets you record income and expenses you enter manually, organise them by month, share specific months with collaborators you invite, and split contributions between household members.

The Service does NOT:

• Connect to your bank accounts
• Provide financial, investment, tax, accounting, or legal advice
• Move money, hold funds, process transactions, or act as a payment institution
• Guarantee the accuracy of any calculation — the numbers shown reflect the numbers you have entered

All decisions you make based on data shown in the Service are your own responsibility.

03Your account

3.1 Sign-up

You sign in using Google Sign-In. We collect the account information described in our Privacy Policy.

3.2 One account per person

Each account is for an individual human. You may not share account credentials, sell or transfer your account, or create accounts in bulk.

3.3 Account security

You are responsible for keeping your Google account credentials secure. Notify us at help@framorase.com as soon as you suspect unauthorised access.

3.4 Accurate information

You agree to provide accurate information when prompted and to keep it up to date.

04Subscription plans, billing, and cancellation

4.1 Plans

The Service is offered in a free tier and paid subscription tiers ("Plans"). The current Plans, their prices, included features, and seat allowances are shown in the Service at sign-up and in the in-app Plan modal. We may change the line-up of Plans, pricing, and features from time to time — see Section 4.6.

4.2 Billing

Paid Plans are billed by Stripe on a recurring monthly basis in the currency shown at checkout. By starting a paid Plan you authorise us (via Stripe) to charge your payment method automatically at each renewal until you cancel.

4.3 Renewals

Subscriptions renew automatically at the end of each billing period. You may turn off auto-renewal or cancel at any time via the in-app billing portal (Stripe Customer Portal).

4.4 Cancellation

You may cancel at any time. Cancellation takes effect at the end of the current billing period — you keep access to paid features until that date, and you will not be billed again unless you re-subscribe.

4.5 Refunds

Paid subscription fees are non-refundable except where required by law (for example, your statutory right of withdrawal under UK / EU consumer protection law within 14 days of subscribing, provided you have not yet substantially used the paid features). If you believe you are entitled to a refund, email help@framorase.com within 30 days of the charge.

By starting your paid subscription and using paid features before the 14-day withdrawal period ends, you expressly request that we begin performing the service immediately and acknowledge that your right of withdrawal is lost once the service has been fully performed within the period.

4.6 Price changes

We may change subscription prices. We will give you at least 30 days' notice by email before any price increase takes effect on your renewal. You may cancel before the new price applies.

4.7 Family / multi-user Plans

Family-tier Plans include seats for additional collaborators. The Plan owner is the billable party. Collaborators inherit the owner's Plan benefits for as long as the owner's subscription is active and they remain an accepted collaborator. If the owner downgrades or cancels, collaborator access may be removed; see the in-app Plan modal for current behaviour.

4.8 Free trials

Where offered, a free trial is available once per person/account. To start a trial we capture a payment method up front, and the Plan automatically converts to a paid subscription at the trial's end unless you cancel before then. You are eligible for a free trial only if you have never previously had paid access to the Service — this includes having held any paid Plan and having accepted a seat on another user's shared Plan. Trial eligibility, once used or lost, is not restored by cancelling, declining, or leaving a Plan.

4.9 One Plan at a time; joining a shared Plan

You may hold only one Plan at a time. If you accept an invitation to join another user's shared Plan while you have your own paid subscription, accepting will cancel your subscription as part of joining: an active paid Plan is cancelled at the end of your current billing period (you keep your own paid features until then, the remainder is non-refundable per Section 4.5, and you join the shared Plan immediately), and a Plan still in its free trial is cancelled immediately. You confirm this in-app before joining. A Plan owner who still has their own collaborators must remove them before they can join another Plan.

4.10 Taxes

Prices shown exclude applicable taxes (VAT, sales tax) unless stated otherwise. We collect taxes where required.

05Acceptable use

You agree not to:

• Use the Service for any unlawful purpose or in breach of any applicable law
• Upload, store, or transmit content that is unlawful, defamatory, harassing, infringing, fraudulent, or otherwise objectionable
• Invite anyone as a collaborator without their consent
• Use the Service to launder money, evade taxes, finance terrorism, or commit fraud
• Reverse-engineer, decompile, or attempt to extract source code from the Service (except where this restriction is prohibited by law)
• Use automated means (bots, scrapers, scripts) to access, query, or interact with the Service except via interfaces we expressly provide for that purpose
• Probe, scan, or test the vulnerability of the Service, or breach any security or authentication measure, without our prior written permission (see our security disclosure contact at help@framorase.com)
• Use the Service to send spam, phishing, or unsolicited commercial communications
• Impersonate any person or entity, or misrepresent your affiliation with anyone
• Resell, sublicense, or commercially exploit the Service or access to it

We may suspend or terminate access (with or without notice, depending on severity) if we reasonably believe you have breached this section.

06Your content

6.1 Ownership

You retain all rights to the budget data, expense descriptions, notes, and other content you enter into the Service ("Your Content"). Framora claims no ownership of Your Content.

6.2 Licence to operate the Service

To provide the Service, you grant Framora a worldwide, non-exclusive, royalty-free licence to host, store, transmit, and display Your Content solely as needed to operate the Service and provide it to you (and to any collaborator you authorise).

This licence ends when you delete Your Content or close your account, except where we are required to retain copies for legal or backup purposes (see Privacy Policy, Section 7).

6.3 Responsibility for Your Content

You are solely responsible for Your Content and the accuracy of what you enter. We do not pre-screen or actively monitor Your Content. We may, but are not required to, remove content that violates these Terms.

6.4 Backups

You are responsible for maintaining your own copies of Your Content if continuity matters to you. While we operate reasonable backups, we do not guarantee that lost data can be recovered.

07Sharing and collaborators

The Service includes optional features for sharing budgets with other users you invite.

• You are responsible for choosing whom you invite
• You should only enter another person's email address if you have a reasonable basis to believe they would expect to be invited
• Once you share a month with a collaborator, they may view the budget data within that month, including any expense descriptions, amounts, and notes
• Removing a collaborator stops their access going forward. As part of removal, the Service offers that collaborator a one-time option to keep a copy of the budget data they had access to, stored encrypted under their own key in their account until they delete it. We cannot retract a copy once it has been kept, nor any copy a collaborator made on their own device. By sharing a budget you accept that a collaborator may retain such a copy after you remove them.

If you receive an invitation you did not expect, decline it from the invite page, or contact help@framorase.com.

08Service availability and changes

8.1 "As is" availability

The Service is provided "as is" and "as available". We do not guarantee uninterrupted, error-free, or secure operation. Scheduled maintenance, downtime of underlying infrastructure (our hosting and database providers, and Stripe), and bugs may temporarily affect the Service.

8.2 Changes to the Service

We may modify, add, or remove features at any time. For material reductions in functionality of a paid Plan, we will give reasonable notice and, where appropriate, prorated refunds.

8.3 Discontinuation

If we decide to discontinue the Service, we will give at least 60 days' notice by email and provide a way to export Your Content before shutdown.

09Disclaimers

To the maximum extent permitted by law:

• The Service is provided without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, or that the Service will be uninterrupted, error-free, or secure
• Framora makes no representation that the Service is appropriate or available in any particular jurisdiction
• Nothing in the Service constitutes financial, investment, tax, accounting, or legal advice. You should consult a qualified professional before acting on financial decisions.

Some jurisdictions do not allow exclusion of certain warranties; in those jurisdictions, the exclusions in this section apply only to the maximum extent permitted.

10Limitation of liability

To the maximum extent permitted by law:

• Framora, its directors, employees, and suppliers shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, data, goodwill, or business opportunities, arising out of or related to your use of the Service
• Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any liability that cannot be excluded under applicable law (including under UK Consumer Rights Act 2015 to the extent you are a consumer)

If you are a consumer in the UK or EU, your statutory rights are not affected by these Terms.

11Indemnification

You agree to indemnify and hold Framora harmless from any claims, damages, losses, or expenses (including reasonable legal fees) arising out of:

• Your breach of these Terms
• Your violation of any law or third-party right
• Your Content
• Your use of the Service in a way that causes harm to a third party

This section does not apply if and to the extent that such indemnification would be unenforceable against you as a consumer under applicable law.

12Termination

12.1 Termination by you

You may stop using the Service and delete your account at any time. To request full deletion, follow the in-app account deletion flow or email privacy@framorase.com.

12.2 Termination by us

We may suspend or terminate your account, with or without notice:

• If you materially breach these Terms
• If your account is used for fraud, abuse, or illegal activity
• If required by law or a regulator
• If we discontinue the Service

12.3 Effect of termination

On termination:

• Your right to use the Service ends immediately
• Your data is handled per our Privacy Policy, Section 7 (retention)
• Provisions of these Terms that by their nature should survive (e.g. Sections 6, 9, 10, 11, 13, 14) survive termination

13Changes to these Terms

We may update these Terms from time to time. When we do:

• We will update the "Last updated" date
• For material changes, we will notify you at least 30 days in advance by email or in-app banner
• Your continued use of the Service after a non-material change constitutes acceptance

If you disagree with a material change, you may cancel your subscription and stop using the Service before it takes effect.

14Governing law and disputes

14.1 Governing law

These Terms are governed by the laws of England and Wales, without regard to conflict-of-law principles.

14.2 Jurisdiction

You and Framora agree that the courts of England and Wales have exclusive jurisdiction to resolve any dispute arising out of or related to these Terms or the Service, except that:

• If you are a consumer resident in another part of the UK or in an EU member state, you may also bring proceedings in the courts of your place of residence and you benefit from the mandatory consumer protection laws of that place
• We may seek injunctive relief in any court of competent jurisdiction to protect our intellectual property rights

14.3 Informal resolution

Before filing a formal claim, please contact us at legal@framorase.com and we will attempt to resolve the dispute informally within 30 days.

15Miscellaneous

• Entire agreement. These Terms and the Privacy Policy form the entire agreement between you and Framora regarding the Service.
• Severability. If any provision is held unenforceable, the remainder remains in effect.
• No waiver. Our failure to enforce a provision does not waive our right to enforce it later.
• Assignment. You may not assign your rights under these Terms. We may assign ours to a successor in connection with a merger, acquisition, or sale of assets.
• Headings. Section headings are for convenience only and do not affect interpretation.
• Force majeure. Neither party is liable for failure to perform due to events outside its reasonable control (acts of God, war, civil unrest, government action, internet or infrastructure failures).

16How to contact us