Privacy policy

What we collect

• Account details: your email address, your name if you give it, and a securely hashed password. If you sign in with Google or Microsoft, we receive your name, email address and profile picture from that provider. We never receive your Google or Microsoft password.
• Schedules and project data you upload, such as Primavera P6 and Microsoft Project files, and everything the app produces from them: analyses, findings, reports and delay records.
• Evidence files you choose to attach to a project.
• Billing details: your plan, subscription status and billing history. Card details are entered on Stripe’s own page and are held by Stripe; we never see or store your card number.
• Technical data needed to run the service: server logs with IP addresses, request times and error details, and a sign-in token kept in your browser’s local storage so you stay signed in.

How we use it

• To provide the service: sign you in, store and analyse your schedules, and show you the results.
• To bill your subscription, including the free trial.
• To keep the service secure, prevent abuse, and fix problems.
• To answer you when you contact us.

We do not sell your data, we do not use it for advertising, and we do not use your schedules to train AI models.

Google user data

• When you choose “Sign in with Google”, we request only your basic profile: name, email address and profile picture. We use them solely to create your account and sign you in.
• We do not request access to your Gmail, Google Drive, calendar or any other Google data, and we do not share Google user data with anyone except the sign-in processor listed below.
• Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes it for us

• Supabase: accounts, sign-in, database and file storage (United States).
• Hostinger: the servers that run the application (United States).
• Vercel: hosting of the website and the app’s pages.
• Stripe: payments and subscriptions.
• Anthropic: only when you ask for an AI-written report, the relevant schedule data is sent to generate it. Anthropic does not use it to train its models.
• Google and Microsoft: only if you choose to sign in with them.

Each processes data only on our instructions and under its own security and privacy commitments.

How long we keep it

• We keep your account and project data for as long as your account is active. When you ask us to delete your account, we delete your account and project data within 30 days, except records we must keep by law, such as invoices.

Your choices and rights

• You can ask to see, correct, export or delete your personal data at any time by writing to us. We will answer within 30 days.
• If you signed in with Google, you can also remove Schedule Cracker’s access from your Google Account’s security settings.
• California residents have the rights described in the California Consumer Privacy Act, including the right to know, delete and correct personal information. We do not sell or share personal information for advertising.

Security

• Data is encrypted in transit with HTTPS. Access to production systems is limited to the people who run the service. No system is perfectly secure, so if we learn of a breach affecting your data we will tell you promptly.

Children

• Schedule Cracker is a professional tool and is not intended for anyone under 16.

Changes

• If we change this policy we will update the date at the top of this page, and for significant changes we will tell account holders by email or in the app.

Contact us