Privacy.

Data on your device

Your school content, notes, Canvas and Gradescope sessions, AI key, plans, and Cairn memory stay on your device. The one exception is the phone app, below, and it is an exception we cannot read.

If you pair a phone

Pairing a phone is the only way anything you plan reaches our servers, and it is off until you start it from the desktop app. When it is on, your computer encrypts a short summary of your plan — deadlines, what you are working on, what you have finished — before it leaves the machine, and uploads only the result. Your phone sends its own ticked-off items back the same way.

The key that opens any of it is never sent to us. It reaches your phone from the ten characters you type into it, and lives only on those two devices. What we hold is a box we cannot open, filed under a name derived from that key: not your email, not your subscription, nothing we can trace back to you or to a course. We can see how large it is and when it was last written, and that is all there is to see.

Unpairing from the desktop app empties it immediately. A box nothing has written to for 60 days is deleted. Your phone is never given the recovery key that opens your account or your billing.

Account and billing data

The service stores your email, subscription and device entitlement identifiers, login-session records, and security/audit records needed to operate your account. Stripe processes payments. Resend delivers sign-in links. Their privacy terms apply to data they process.

AI

AI planning is off until you turn it on. Before anything is sent, the app shows you exactly what an AI provider would receive and asks you to accept it; what it then sends goes directly to that provider using your own credentials, and nothing else. Cairn Planner does not proxy or retain those requests.

Contact

Questions or deletion requests: fuscellarojason@gmail.com.