Privacy Policy

1. Who we are and what this covers

Plyplan is a cut-list and sheet-optimizer app made by DordevTech in Switzerland. This policy covers the Plyplan app on iOS, Android and the web, and the website at plyplan.com.

It is written to the Swiss Federal Act on Data Protection (FADP/DSG) and the EU General Data Protection Regulation (GDPR). The controller for the data described below, meant wherever this policy says "we", is:

2. The short version

You can use Plyplan without an account, and then your work stays on your device. An account is optional for buying in the App Store or Google Play. It is needed to sync projects between your devices, to use purchases on them, and to buy in the web app.

• Without an account, your projects, parts, materials and prices stay in storage on your device.
• With an account, your projects are also stored on our server so every device you sign in on has them.
• An account is your email address and a sign-in with Apple, Google or a password. Nothing else about you is asked for.
• The optimizer runs on your device. Nothing is uploaded to calculate a cutting plan.
• Purchases go straight to Apple, Google or, on the web, Stripe. We never see your card details.
• You can delete the account in the app at any time, and with it everything we hold.
• The app contains no analytics, advertising or crash-reporting SDK of any kind.

3. What stays on your device

Everything you enter is written to the app's own storage on the device and read back from there:

• Projects, parts and their dimensions
• Your sheet and board stock, kerf width and material prices
• Units, language, theme and the other settings
• Your workshop log and the badges you have earned

Without an account none of it is sent to us. Settings and the workshop log never are, signed in or not. Deleting the app deletes what is on the device, which is why signing in, or exporting a PDF, matters if losing a project would bother you: see Terms of Service, section 7.

Your phone's own backup copies this storage too. If iCloud Backup or a backup to a computer is on (iOS), or backup to Google Drive (Android Auto Backup), the operating system includes the app's storage in the device backup: your projects, settings and workshop log and, while you are signed in, your account's email address and identifier, the sign-in session and the app's copy of your synced projects. A PDF you export is kept only in temporary storage, which backups skip. Restoring the backup onto a device brings all of it back, and a backup made before you deleted the app or a project keeps its copy until the backup itself is replaced or deleted. Apple or Google make and store that backup under your Apple or Google account, not us, and we have no access to it. You turn it on or off in the device settings (iOS: Settings → your name → iCloud → iCloud Backup; Android: Settings → Google → Backup).

4. Your account and synced projects

Accounts are run with Supabase, our authentication provider, in Frankfurt, Germany. An account holds your email address, an opaque user identifier, how you signed in (Apple, Google or email and password; a password is stored only as a hash), and the time of sign-ups and sign-ins. If you sign in with Apple and choose to hide your email, the account holds Apple's relay address instead. Sign-in codes, password-reset codes and the confirmation that an account was deleted are sent to that address through Amazon SES in Frankfurt.

While you are signed in, the app copies each project (its name, parts, materials, stock, prices, layout and cutting progress) to our server, also in Frankfurt, and keeps the copies on each device you sign in on up to date. A project you delete is removed from the server and leaves only a marker with its identifier, so your other devices delete their copy too.

Signing out deletes the account's projects from that device; they stay on the server and come back when you sign in again. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

5. Purchases

Project Pass and Shop Lifetime are bought from the App Store, Google Play or, in the web app, through Stripe. Apple and Google take the payment and hold the receipt; we never receive your card details, billing address or name.

On the web, Stripe sells the purchase as merchant of record: it takes the payment in Stripe Checkout, collects the tax and holds your card details, billing details and receipt. We see the purchase, its amount, your country and the email address you gave Stripe, never your card details.

To know what you have bought, the app asks RevenueCat, which sits between the app, the stores and Stripe. Before you sign in, RevenueCat knows the installation by an anonymous identifier. RevenueCat stores the purchase receipt, the store country, and the device and app version against your customer id: that identifier until you sign in, your account's user identifier from then on. The app does not send your email address to RevenueCat.

With an account, that is what lets a purchase follow you to a new phone, a reinstall and the web app. The identifier is not used for advertising. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

6. The website

plyplan.com counts visits with Umami, which we host ourselves. It sets no cookies, does not follow you between sites and does not build a profile. It records the page, the referrer, and the country, browser and screen size derived from the request; IP addresses are not stored. Legal basis: legitimate interest in knowing whether the site works (GDPR Art. 6(1)(f)).

The site stores your theme choice in your browser's local storage so the page does not flash on the next visit. That never leaves your browser.

The cut-list calculator on the site runs entirely in your browser; what you type into it is not sent anywhere. The web app at plyplan.com/app/ works like the apps: without an account it keeps projects in your browser, signed in it syncs them as described in section 4, and signing in with Google there goes through Google's own page. The web app loads no analytics at all.

7. What we do not do

• No advertising, no ad identifiers, no attribution or marketing SDKs
• No analytics, telemetry or crash reporting inside the app
• No selling or sharing of personal data, in the CCPA sense or any other
• No tracking across apps or websites, so the app has no reason to ask for permission to
• No email list fed by the app, and no notifications you did not ask for

8. Children

Plyplan is rated 4+ / Everyone and is a woodworking tool, not a service for children. Accounts are not meant for children under 16, and we do not knowingly hold one; write to us and we delete it. A purchase also needs an Apple, Google or Stripe payment, which is subject to those companies' own age rules.

9. Your rights, and how they work here

Under the FADP and the GDPR you have the right to access, correct, delete and export your personal data, to restrict or object to processing, and to complain to a supervisory authority.

Most of these you exercise directly in the app:

• Access and export: your projects are in the app. Export one as a PDF or share it from the app.
• Correction: edit or rename a project in the app; a signed-in edit reaches the server on the next sync.
• Deletion: delete a project in the app. Settings → Delete account deletes, at once, your account, every synced project, your sign-in, our log of emails sent to your address, your customer record at RevenueCat, and the projects on that device; you type DELETE and confirm, and a confirmation email follows. If you can no longer sign in, write to us from the account's address. What stays and what happens to purchases is on the delete account page. Without an account, delete the app to remove everything.
• Purchase records at the stores and Stripe: Apple, Google and Stripe keep their receipts under their own rules, including the retention that tax law requires. Ask them, or write to us and we will forward the request.

For anything else, write to [email protected]. We answer within 30 days. If you are not satisfied, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU/EEA, to your national supervisory authority.

10. Where data goes outside Switzerland

Your account and synced projects are stored in Frankfurt, Germany: the projects on our own server, the account at Supabase, and sign-in emails sent through Amazon Web Services. The companies that process data for us or on their own account are:

• Supabase — your account and sign-in (hosted in the EU)
• Amazon Web Services — sign-in and password-reset emails (EU)
• Apple — the App Store purchase and, if you use it, Sign in with Apple
• Google — the Play purchase and, if you use it, Sign in with Google
• Stripe — the web purchase, as merchant of record
• RevenueCat — the record of what your account has bought

Apple, Google, Stripe and RevenueCat process data in the United States among other places, under their own safeguards for international transfers. The website's analytics stay on our own infrastructure in Frankfurt, Germany.

11. How long any of it is kept

Your account and synced projects are kept until you delete them or the account. Deleting the account removes them from our server and Supabase at once. Encrypted backups of the database are kept for 30 days; a backup that is deleted stays recoverable for 7 more days and is then removed for good, so a deleted account is gone from them after 37 days at most. What remains is the deleted account's identifier and the time of deletion, with no email address or name, so a sign-in from before the deletion cannot recreate the account. RevenueCat keeps the purchase record until the account is deleted, and Apple, Google and Stripe keep receipts under their own retention rules. Plyplan sells nothing that renews, so there is no subscription to cancel. Website analytics are aggregated counts, not records about a person.

12. Changes to this policy

If this policy changes, the date at the top changes with it, and a change that affects what happens to your data will be called out in the release notes of the version that introduces it.

13. Contact

• Privacy: [email protected]
• Support: [email protected]