Your plans are yours

Creno is run by YZO Labs, a company registered in France, which is responsible for your data under the EU General Data Protection Regulation (GDPR). Contact: support@creno.io

• Your account: your email address and how you sign in — an emailed code, a password (stored only as a secure hash by our authentication provider), or Sign in with Apple.
• Your settings: the display name, time zone, week start, clock format and notification times you choose.
• Your planner: the tasks, projects, habits, goals, reminders, journal entries, weekly reviews, Knowledge folders and docs, and labels you create, with their dates, times and check-offs.
• Your files: attachments you add are kept in private storage that only your account can read. Images you paste into notes, journal entries and docs are kept in storage served by link, so the documents can show them: each link is long and random, and anyone who has that exact link can open the image.
• What the assistant remembers: the short standing preferences you ask it to remember (for example your work hours), until you ask it to forget them.
• Your plan: if you have Creno Pro, the plan you are on — monthly or yearly, trial or paid, when it renews or ends, and the store’s reference for the subscription (Apple’s or Stripe’s) — and a record of each payment and refund, for your account and our accounting. Card details never reach Creno.
• What the assistant costs to run: for each request, the amount of AI processing it used and its cost, so the service stays fair for everyone. This never includes what you said or what it answered.
• Your iPhones: if you use the iPhone app, a push token for each phone, so a change made on the web can tell the phone to update its reminders.
• Shared docs: if you share a Knowledge doc by link, anyone with that link can read the doc until you stop sharing it.

You can let people you choose see your schedule. Nothing is shared until you do it, and you see exactly what they will see before you do. Only what you plan in Creno is shared — meetings in other calendars aren’t included.

• Who can see it: only people with a Creno account who accept an invite from you: a single-use link you sent them, or an invite you send in Creno to someone by their username (or who already shares with you). A link works once and stops working after 7 days. Creno stores only a scrambled fingerprint of it, never the link itself.
• What they see: only what each share allows. When you create or edit a share you choose its default — full details, titles only, busy times only, or nothing — then, if you like, a different level for each of your groups and for any single item. An item in several groups shows the least of their levels; an item you set on its own follows that setting. By default a new share shows when you are busy — no titles — for the next 14 days, and nothing from the past; you can also limit it to some hours or some days. Anything you marked “Hide completely” or “Show as busy” before stays that way unless you change it in a share. Reminders and alarms are shared only through a group, or one by one if you add them. Your journal, goals and Knowledge docs are never part of a shared schedule. Your time zone is not shown unless you choose to show your local time. The people in a share see its name (like “Family”); the names of your groups are never shown.
• Usernames: you can choose a username (like @sam). It is shown to people you share with or who share with you, and anyone who knows it can send you an invite, which you can accept or decline. Nobody can search or browse usernames.
• What you see about them: when someone accepts your invite, you see the name they show in Creno, their email address, and the day they last looked at your schedule (the day only, not the time). They are told this before they accept.
• What Creno keeps: your shares and their settings, your groups and what is in them, your username if you chose one, who is in each one, the name you show to them, and a record of the days someone viewed your schedule and how (the web, the iPhone app or their assistant) — the day, never the time. That record is deleted after 90 days, and someone who left a share is removed from it 30 days later. The colours and on/off choices someone sets for your schedule on their side are theirs and are not shown to you.
• Staying current: while someone has your schedule open, their app is told that something in it changed (never what), so it can update. It is told at most once a minute.
• Their assistant: if someone you share with uses the Creno assistant (Creno Pro), they can ask it about what they can see of your schedule — and only that — which is sent to OpenAI to answer them, as described below.
• Stopping: you can pause a share, pause all sharing, remove a person or delete a share at any time, and it takes effect straight away. They are not told why it stopped. Anyone can leave a schedule shared with them at any time.
• Shared schedules are part of “Download my data” (people in your shares appear by name only, and the schedules shared with you and your own viewing record are included), and deleting your account deletes your shares and your place in other people’s.
• Age: Creno is not for children under 13, and we don’t knowingly let them use it. Sharing a schedule between a young person and their parent or guardian is fine.
• Report a problem: if someone uses a shared schedule to watch or pressure you, or something about sharing looks wrong, write to support@creno.io. We read every report.

• Your conversation with the assistant is kept in your browser, not on our servers.
• On iPhone, calendar events are read on the phone to draw them on your timeline. They are never sent to or saved by Creno.
• Your theme and a few view preferences are kept in your browser.

Creno uses these services to work. Each one receives only what it needs for its part, and none of them may use your data for anything else.

• Supabase hosts the database, sign-in and file storage, in the European Union (Ireland). Everything listed above under “What Creno stores” lives here.
• Vercel hosts the web app. Like any web host, it handles your requests, including your IP address.
• OpenAI powers the assistant. When you talk to it, your message, the photos you send it, and the parts of your planner it looks up to answer are sent to OpenAI’s models, which are asked not to store them. When it looks something up on the web, the search runs at OpenAI with an approximate location taken from your device’s time zone. OpenAI also handles speech: your voice recordings are sent to be turned into text, and the assistant’s replies are sent to be read aloud. If someone shares their schedule with you, the part you can see is sent too when you ask the assistant about it.
• Your location, for the assistant. When the assistant needs to know where you are to answer — something nearby, a distance, directions — your device reads your position (with your permission, asked the first time): on the iPhone, your exact position and the street it is on; on the web, your browser’s position, with the city your connection comes from (as Vercel reports it) as a fallback. It is sent to OpenAI with that question, and with your next few for five minutes, to find places and distances around you. Creno does not store it. You can turn it off any time in your device’s or browser’s location settings.
• Stripe takes payment when you subscribe to Creno Pro on the web: your card and billing details go to Stripe, never to Creno. Stripe tells us the plan, its status and each payment.
• Resend delivers our emails — sign-in, sign-up and password-reset codes — so it receives your email address.
• Apple takes payment when you subscribe in the iPhone app, through your Apple Account, and tells us the plan, its status and each payment — never your card. It also delivers notifications to the iPhone app, which carry no content from your planner, and handles Sign in with Apple if you use it.

• No advertising, and your data is never sold or rented.
• No analytics or tracking cookies. The only cookies are the ones that keep you signed in, one that remembers you have finished the welcome steps, one that holds your device’s time zone (tz) so times show in your zone, and one that remembers the language you picked (creno-locale).

• Download: in Settings → Privacy & data, “Download my data” gives you everything in your account as one JSON file.
• Delete: “Delete account” in the same place permanently deletes your account, your planner and your files, straight away. Copies can remain in our hosting provider’s routine backups until those expire.
• Your data is kept for as long as your account exists. Payment records are kept as long as accounting law requires (ten years in France).
• Under the GDPR you can ask us to access, correct, export or delete your data, or object to how it is used — write to support@creno.io. You can also complain to the French data protection authority, the CNIL.

If this policy changes, the date at the top changes with it, and anything significant is announced in the app.

Questions about your data: support@creno.io