Your plan lives in your own Google Sheet.

Who we are

RetireBlueprint Pro is a one-person business run by its founder, Gena. It's a retirement planning tool sold on Etsy, with the web app hosted at retireblueprintpro.com. You can reach us at retireblueprintpro@gmail.com.

Information involved

• Your plan. The numbers you enter (ages, balances, income, spending, goals) and the results the planner calculates. These are saved in your Google Sheet.
• Your purchase. When you buy on Etsy, Etsy handles your payment. We receive what Etsy shares with sellers, such as your name, email or Etsy username, and order details. We use it to deliver your purchase and help you.
• Emails you send us. If you write to us, we keep the conversation so we can help you.
• Website analytics. We use Google Analytics to see which pages are visited, on what kind of device, and how often people click through to Etsy. IP addresses are anonymized, and web addresses are trimmed so nothing private is sent. Analytics never receives your plan's numbers.
• Your browser's storage. To load pages quickly and remember your setup, your browser keeps a few items, like your sheet's ID, your names as shown in the app, and recent plan figures. This stays on your device. We can't see it.

How the app connects to your sheet

Google sign-in (standard)

During setup, you click "Connect Privately with Google," sign in, and pick your planning sheet in Google's own file picker. From then on, your browser talks directly to Google to read and save your plan.

• RetireBlueprint Pro asks only for access to the files you pick (Google's "drive.file" permission), not the rest of your Google Drive.
• You don't share your sheet with us. Our servers and our Google account never receive your plan's data, and we can't open your sheet.
• Google's sign-in pass is kept only in your browser for the current session and expires after about an hour.
• You can remove the app's access any time in your Google Account (Security, then "Your connections to third-party apps & services").
• Because we can't open your sheet, if you want help with your plan, you can choose to share it with us temporarily, then remove the share afterward.

Earlier customers: sharing your sheet

Some earlier customers connected by sharing their sheet with retireblueprintpro@gmail.com as an Editor. This method is no longer offered to new customers. With that method, the app's connector (a Google Apps Script that runs on Google's servers under that account) reads your plan and saves your changes.

• Sharing gives RetireBlueprint Pro access to your sheet. We use it only to run your plan, and we only open your sheet ourselves if you ask us for help.
• We don't copy your plan into any other database. To keep pages fast, a read may be held in Google's temporary memory for about 45 seconds before it expires.
• You can switch to Google sign-in at any time on the Setup page, then remove the share in Google Sheets (Share, then remove retireblueprintpro@gmail.com).

Optional: Tiller

If you use Tiller, you can link it so your account balances update in your plan. Tiller is a separate service with its own privacy policy, and your bank logins stay with Tiller. Tiller linking works only with Google sign-in. You pick your Tiller sheet yourself in Google's window, and your own browser reads balances, and spending totals if you choose, to update your plan. Your Tiller sheet is never shared with RetireBlueprint Pro, we can't see it, and the app only reads it, never changes it.

Google user data

RetireBlueprint Pro's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide the planner's features you use.
• We don't sell it, use it for advertising, or use it to train AI models.
• We don't transfer it to anyone else, except as needed to run the app, to comply with the law, or with your permission.
• No person reads your data unless you ask us to (for example, for help with your plan), it's needed for security or to comply with the law.

Who else is involved

We don't sell or rent your information. These services help run RetireBlueprint Pro, each under its own privacy policy:

• Google: your sheet, the app's connector, Google sign-in, and website analytics.
• GitHub Pages: hosts the website.
• Etsy: sales, payments and buyer messages.
• Tiller: only if you choose to link it.

How long we keep things

Your plan stays in your Google Sheet for as long as you keep it; we don't hold a copy. We keep order details and emails as long as needed to support you and to meet tax and legal requirements.

Your choices

• Stop the app's access: remove retireblueprintpro@gmail.com from your sheet's Share settings. If you use Google sign-in, you can also remove RetireBlueprint Pro at myaccount.google.com/permissions.
• Delete your plan: delete your Google Sheet. It's your file.
• Clear your browser's copy: clear site data for retireblueprintpro.com in your browser settings.
• Ask us: email retireblueprintpro@gmail.com to ask what we hold about you or to have your emails and order notes deleted (except what we must keep for taxes).

Security

Your plan is protected by your own Google account, so a strong password and Google's 2-Step Verification are the best protection you can add. No system is perfectly secure. If we ever learn of a problem that affects your information, we'll tell you.

Children

RetireBlueprint Pro is meant for adults and isn't directed to anyone under 18.

Changes

If we change this policy, we'll update the date at the top of this page. Big changes will also be noted in the app.

Contact

Questions about privacy? Email retireblueprintpro@gmail.com.