Privacy
Last updated 27 August 2026
What we hold, why we are allowed to, and what you can make us do about it. Written plainly, because a planning board is confidential work.
Who is responsible
Aleksandar Šoškić, Kraljice Natalije 21, 11000 Belgrade, Republic of Serbia — mail@soskic.me. One person, not a company. A service this small need not appoint a data protection officer, so that address reaches him directly.
What we store, and why we may
| What | Why | On what basis | Kept |
|---|---|---|---|
| Your email address | Signing you in. No passwords exist | To provide the service you asked for | Until you close your account |
| Display name, if you set one | Shown to people in your workspaces | To provide the service you asked for | Until you remove it |
| Your boards — names, dates, notes, links | They are the product | To provide the service you asked for | Until you delete them |
| Which steps you reach in the app | Seeing what confuses people, so it can be fixed | Your consent, which you may withdraw at any time | 12 months |
| Your IP address at sign-in | Telling a person from an automated script | Our legitimate interest in stopping abuse | Moments |
Analytics never receives board content and never your email address — you appear in it as an internal id. Decline it and none of it is collected; the app works exactly the same.
Who else processes it
Every company involved is listed, with what it receives and where it processes it, on the security page. Nobody joins that list without 30 days’ notice there first. We do not sell your data, and we do not use it to train anything.
Where it goes
Your account and your boards are stored in the European Union. Two providers process in the United States under the EU–US Data Privacy Framework, and one runs a global network under Standard Contractual Clauses; the security page says which is which.
The service itself is operated from Serbia, which is outside the EU, so the person named above reads the database from there when fixing a fault you have reported.
How long
Until you delete it. Closing your account in Account settings removes your account, your display name, and any workspace nobody else is in. Deletion is immediate, and there are no backups to recover from — by us or by you.
What you can make us do
Ask for a copy of what we hold, correct it, delete it, restrict or object to how it is used, take it elsewhere in a portable form, or withdraw your consent to analytics. Write to the address above and you will have an answer within a month.
Erasure needs no request: close your account and it is done. If you are unhappy with how that went, you can complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection — and if you are in the EU, to your own national data protection authority.
Nothing here decides anything about you
There is no profiling and no automated decision-making. Nothing in this product judges you, ranks you, or acts on you without a person.
Changes
If this page changes in a way that matters to you, it changes here before it takes effect, and the date at the top moves with it.