Privacy note: kept checks

This note is about the box “Keep my plan, requirements and check results to improve the checker”. It also says what happens to a check when you do not tick the box.

What we keep when you tick the box

• Your requirements or task, as you wrote them.
• Your plan, as written. We do not remove names, addresses or other details from it. If your plan has personal details, do not tick the box, or delete the check later.
• The check results: each requirement, its verdict, the plan lines it rests on, and who decided it (our code, an AI model, or you).
• The questions we asked, your answers and confirmations, and each “I think this is wrong”.
• Undos, re-plans, the AI models used, the cost and the times.

What every check holds, ticked or not

• Every check is stored in our database so that its result page works. The stored check holds your requirements, your plan and the results.
• It also holds your account id and organisation (if you are signed in) and your IP address (for the daily spend limits). These are linked to the stored check until it is deleted.
• The export and any training set made from it never include your account, organisation or IP address. A kept check in the export has a random record id and no name.
• The team’s numbers page counts all checks (how many, cost, time, who decided each requirement). These are counts only, with no requirement or plan text.

Who else gets your plan

• To check a plan, we send its text to AI providers: Anthropic, OpenAI and the provider of our Jev reader. This happens for every check, ticked or not. Their own terms apply, and we cannot delete what they hold.

Why

• To measure how well the checker works and to make it better.
• To train a small checking model later. Each part of the record says who made it: you, our code, or an AI model. Only checks with the tick are used for this.

How long

• A check without the tick is deleted 30 days after it was made.
• A check with the tick is deleted at most 2 years after it was made, and it is left out of every export after that.
• A daily job deletes them. This applies to checks made since this version of the note (see the version below); older runs are our own test data.

How to delete it

• Open the result page of the check and press “Delete my data”. Use the same browser that made the check. If you lost it, ask the site operator and give the record id.
• This deletes the check, its re-plans and edited re-runs, your saved edits, the cached readings of your text that we can find, knowledge items made from your plan, and the temporary working databases.
• What stays: a cost total for the current day, linked to your account or IP address (a number, no text; deleted within 7 days); the record id and time of the deletion (no text, no name), which we use to clean older exports; copies exported before the deletion (we cannot take data out of a model that was already trained); and what the AI providers hold.
• Logs: the check does not write your text to the server log (it writes the error name and code lines only). Other steps may print an error message. Our web host may keep standard access logs (time, address, page path) for its own time.

Version 2026-10-19.3.