How EnoughDay handles your data.

EnoughDay is a UK retirement planning and projection tool. This notice explains what personal data the service handles, why, and the rights you have under UK GDPR. Contact for privacy questions: hello@enoughday.com. ICO registration: pending — the registration reference will be added here once issued.

Account details. If you create an account, your email address and password are handled by our authentication provider, Supabase (built on GoTrue), hosted in the EU region. Passwords are stored only as salted hashes by that provider; we never see your plaintext password.

Plan data. The figures you enter to build a projection — ages, incomes, contributions, pot values and similar planning inputs — are stored locally in your browser by default. When you are signed in, your saved plans are also stored in our database (Supabase, EU region) so they follow you across devices.

Payment data. Payments are processed by Stripe. Card details are entered directly with Stripe and are not stored on our systems; we receive only the subscription status needed to unlock paid features.

When enabled, we use Plausible for privacy-preserving analytics. Plausible is cookieless and does not build a profile of you across sites; it records aggregate page views and a small number of anonymous usage events — such as when a calculator is used or a plan is saved — with no personal data attached.

Advertising measurement is a separate choice. Only after you allow it may EnoughDay load the Google Ads tag (gtag.js from googletagmanager.com) and the Reddit Pixel (from redditstatic.com). After a verified sign-up or Stripe-confirmed purchase, our server may also send a deduplicated conversion to the relevant platform's conversion API when consented click attribution exists. We use these tools to understand whether an advertisement led to a useful visit, sign-up flow or purchase. We do not send your plan figures, plan identifier, email address or user ID to either platform.

After you allow advertising measurement, the Google click identifiers gclid, wbraid and gbraid, and the Reddit click identifier rdt_cid, may be stored in your browser and sent to the relevant advertising platform with conversion events. A confirmed purchase sends only the relevant click identifier, event or transaction identifier, time and GBP value; a confirmed sign-up may send its event identifier, time and Reddit click identifier. Neither sends account or plan data. For signed-in accounts, server-side delivery also requires a separate, current ads-v1 grant. That grant expires after 15 minutes unless an allowed browser renews it, and is checked both when delivery is queued and immediately before it is sent. Local attribution copies remain until you deny or withdraw advertising measurement, or clear this site's browser data. If first-party attribution is linked to your account, that historical account-linked copy remains until account deletion or an explicit erasure request, but it does not itself authorise future advertising delivery. Google and Reddit process conversion data under their own retention policies.

You can withdraw advertising-measurement consent at any time using Advertising measurement preferences in the footer. Withdrawing turns measurement off locally and reloads the page without Google or Reddit advertising technology. When you are signed in, EnoughDay also sends the withdrawal to the server. If that confirmation cannot reach the server, the preference control says it is pending and retries; the prior short-lived server grant cannot renew and expires. It cannot erase processing that Google or Reddit completed before withdrawal, and does not by itself erase an account-linked attribution record. Your denied choice and any pending confirmation remain in local storage until they are changed, confirmed or you clear this site's browser data.

Plausible remains separate from this choice: it is cookieless, receives only aggregate low-cardinality events without personal or plan data, and does not load Google or Reddit technology.

When enabled, we use Sentry to capture technical errors so we can fix them. Error reports are scrubbed of email addresses before they are sent. Analytics, conversion measurement and error reporting are off unless the relevant setting is configured, and none is required to use the tool.

If you use the optional plan-explanation feature, the tool sends only the sanitised numeric results of your projection to Anthropic to generate a plain-English summary. It sends no names, no email addresses, and no free-text notes. Anthropic's commercial terms do not permit training its models on the data submitted through this feature.

Contract. Handling your account details and stored plans is necessary to provide the service you have signed up for and, where applicable, to fulfil a paid subscription.

Legitimate interests. Keeping the service secure, reliable and improving — including optional, privacy-preserving analytics and error reporting — rests on our legitimate interests, balanced against your rights.

Consent. Where a feature depends on your active choice, such as generating a plan explanation or granting advertising measurement storage, we act on that choice and you can decline it.

Beyond the storage needed to keep you signed in, hold your plan data and remember your advertising-measurement choice in your browser, no additional cookies are needed to use the service. Plausible analytics, when enabled, operate without cookies. Google Ads and Reddit advertising technology does not load until you explicitly allow advertising measurement.

Local plan data stays in your browser until you clear it. Account details and cloud-stored plans are kept for as long as your account is active. You can ask us to delete your account and its stored data, and we will do so on request.

We do not sell your data. We do not send marketing emails to people who have not signed up for them. Data is shared only with the processors named above — our authentication and database provider, the payment processor, and, where enabled, the analytics, advertising measurement, error-reporting and explanation providers — each acting on our instructions to run the service.

Under UK GDPR you have the right to be informed about how your data is handled; to access a copy of it; to have inaccurate data corrected; to have your data erased; to restrict or object to certain handling; to data portability; and to rights relating to automated decision-making. To exercise any of these, contact us using the address above.

You also have the right to complain to the Information Commissioner's Office (ICO). To reach us about any of this, email hello@enoughday.com.