Information we collect
- Planner account information — if you create a Planner account, Supabase Auth processes your email address, password credential, account identifiers, authentication events, and related security metadata. Accessible Finance cannot read your password.
- Planner profile and financial inputs — if you use Cloud Saved Plan, Supabase stores the first name, province or territory, date of birth, plan assumptions, income, expenses, assets, debts, retirement settings, manual CPP/OAS estimates, and scenario differences that you choose to save.
- Planner calculations — projection outputs are calculated in your browser and are not intentionally stored in the database, analytics, or application logs. Export files are created locally and saved only where you choose.
- Demo Mode data — the Planner starts with fictional values and stores Demo Mode edits in this origin's browser
sessionStorage. Demo data is not sent to Supabase. Use fictional values only because storage is shared with other pages on this website origin. - Email address — only if you voluntarily subscribe to our newsletter via Substack.
- Contact messages — if you email Accessible Finance, we receive your address and the information you include to respond to questions, corrections, accessibility feedback, and privacy requests. Do not include passwords or sensitive financial documents.
- Edition preference — your Canada or United States selection is stored locally in your browser so the site can remember your choice. It is not sent to us.
- Advertising data — when Google AdSense is active on an eligible content page, Google may use cookies or similar technologies and process device, approximate location, and interaction data to serve, limit, and measure ads, subject to your consent choices and Google's policies.
- Basic server records — the company that hosts the website may temporarily process standard request information such as an IP address, browser type, requested page, and timestamp for security, reliability, and abuse prevention. Accessible Finance does not use these records to build reader profiles.
How we use your information
Planner account information is used to authenticate you, recover access, enforce ownership, and load the same saved plan when you sign in from another device. Saved financial inputs are used only to provide the Planner and synchronize the plan you explicitly save. The browser calculates projections locally.
Your newsletter email is used by Substack to deliver the newsletter you requested. Your locally stored edition preference remembers whether you selected Canada or the United States. Google AdSense processes advertising data on eligible public content pages under Google's policies and your available consent choices. Accessible Finance does not sell personal information or use Planner financial inputs for advertising.
Third-party services
Supabase provides Planner authentication and PostgreSQL storage. Netlify builds, hosts, and delivers the website and may process standard request records. These providers process information under their own terms, security controls, configured project regions, and subprocessors. Depending on those configurations, information may be processed outside your province or country.
The Planner itself does not load the public site's advertising, translation, analytics, or newsletter scripts. The Planner and public pages serve their typography files directly from Accessible Finance. Other Accessible Finance pages also use Substack to host the newsletter, Google Translate when you choose Farsi, French, or German, and Google AdSense to serve and measure limited advertising on eligible content pages. These services have their own privacy policies. Separate referral pages link to Wealthsimple, Rakuten, and Polymarket; a destination may set tracking cookies after you click, under its own policy.
Learn more about how Google uses information from sites that use its services and use Google's ad controls to manage advertising preferences.
Browser storage and security
The Planner intentionally does not persist its Supabase authentication session in origin-wide local or session storage while it shares a website origin with public pages that load third-party scripts. A signed-in session is held by the active Planner page, so refreshing requires signing in again. Password-reset links are accepted only through the configured Planner recovery route.
Cloud records are protected by encrypted transport, database constraints, and PostgreSQL row-level security designed to limit each signed-in user to their own rows. No internet service can promise absolute security. Keep exported JSON files private: although they omit credentials and account identifiers, they contain the financial information you entered.
Retention and control
Cloud plan inputs remain in Supabase until you delete individual records or request deletion of the Planner account and its associated data. Self-service full account deletion is not yet available in this first version; use the contact page to request it. Demo Mode data is removed when you choose Exit Demo Mode and normally ends with that browser-tab session. An exported JSON file remains wherever you save or share it until you delete it.
Authentication and infrastructure providers may retain limited security, backup, or operational records for the periods described in their own policies or required by law. Newsletter information remains with Substack until you unsubscribe or exercise the controls available through that service.
Your rights
The Planner lets a signed-in user review and correct plan inputs and download a portable JSON copy. You may request access to or deletion of Planner account data through the contact page; applicable rights and exceptions depend on where you live. You can remove your email from the newsletter list through Substack, clear local preferences through browser controls, and use Google's privacy controls for advertising data processed by Google AdSense.
Contact
Questions about this policy, accessibility, or corrections can be sent through the methods on our contact and corrections page.