Privacy Policy

Effective October 27, 2026 · Plan B Wealth Strategies LLC

This notice covers the Plan B CEO Engine app, its app welcome and access-request pages, and its public sample walkthrough. The separate marketing website and third-party services may have different cookies and data practices. Contact Info@plan-b-wealthstrategies.com about this notice or your data.

1. What the app collects

• Account and access details: your username, password hash, optional account email, account status and login dates. Access requests collect name and email plus optional phone, source and notes. Do not enter financial account credentials or government identifiers.
• Planning and learning entries: the income, debts, goals, assignments, dates, calendar entries, practice answers, notes, reviews and snapshots you choose to save. We do not connect to banks or move money. The signed-in sample profile can be saved to your account; the separate public sample walkthrough keeps its values only in page memory and does not send or save them.
• Learning and use records: screens used, learning completion, setup status, activity dates, toolkit-entry counts, progress points and badges. These support the pilot and its administrative summaries. Optional feedback is stored separately; please do not include personal financial details in feedback.
• Invitations: a personal invite code and its connection to an access request or approved account. The inviter sees counts and recognition, not the invited member’s plan or contact information.
• Security and payment records: session records, short-lived login-attempt counts, optional authenticator secrets and hashed recovery codes. If you buy an optional upgrade, we keep the payment reference, offer, amount, currency and date. Stripe handles card entry on its checkout page; this app does not receive card numbers.
• Website delivery: the app records daily aggregate visits and referral sources for login and access-request pages. A short-lived referral cookie can connect a request to its source. Hosting and browser providers also process technical connection information under their policies.

2. How we use information

We use information to issue and secure accounts, show and save your plan, provide learning tools, summarize pilot progress, process optional purchases and refunds, respond to support, and maintain the service. We do not sell your app data or use it for targeted advertising. Monthly recap emails are optional and contain progress counts, not plan amounts; you can turn them off in the app.

3. Providers and voice

• Railway hosts the app and its database. Railway privacy information.
• Resend delivers account and access emails when email is configured, and optional recap emails when enabled. Resend privacy information.
• Stripe processes optional payments and refunds under its own terms and privacy policy. Stripe privacy information.
• Browser speech services: voice is a rules-based assistant, not a live AI advisor. Choosing microphone input may send audio to your browser’s speech provider. Typed input is an alternative. Recognized requests and responses appear on screen; confirmed plan changes are saved as plan data. The app does not upload raw microphone audio to its server. Browser-provider processing and retention are governed by that provider.

Training videos

Public promotional videos and cover images on our welcome page are served from our WordPress website, hosted by GoDaddy. Loading a cover image or playing a video sends normal web-request information, such as IP address and browser information, to that website’s host. We use native playback controls rather than an external social-video player.

Owners can upload educational videos, captions and transcripts to the app’s Railway-hosted persistent storage. Signed-in members can play published videos. We do not send video playback to a third-party player or record individual watch progress. Files remain until an administrator deletes them; keep originals separately because video files are not included in database backups. Do not upload private member information.

4. Access and security

Members can access only their own plans through the app. Administrators manage accounts, purchases and training progress. Administrative summaries do not display another member’s dollar amounts, debts, notes or written practice answers. The running server processes plan data to show it to you and compute progress, and operators with technical access may access that data.

Saved plans are encrypted at rest using AES-256-GCM. The key is kept separately from the database. The running service decrypts plans for use and progress calculations. This protects stored data; it is not end-to-end encryption and does not prevent technical access by server operators.

The app uses HTTPS in production, password hashing, session cookies, login rate limits and optional two-factor authentication. No system can guarantee absolute security.

5. Cookies and tracking choices

The app uses an essential login cookie and, when relevant, a one-day referral cookie. It does not include advertising trackers or cross-site behavioral-advertising tracking. Browser Do Not Track signals do not change these essential functions. Following a link to a marketing website, booking service or payment provider takes you to that service’s own practices. The public sample sends no practice values and uses no local storage.

6. Retention and deletion

Account plans and learning records remain available until the account or selected profile is deleted. Ending the pilot does not by itself run an automatic account deletion. You can request deletion at any time. Declined access requests are removed after 90 days. The app prunes activity, administrative audit and aggregate visit records older than 400 days. Pending access requests and unlinked feedback have no automatic expiry in the current app; contact us about removal.

Automatic database backups rotate by the configured number of snapshots, seven by default. The time required for deleted data to leave those backups depends on the backup schedule and any separately retained operational copies; deletion is not a promise that every backup disappears immediately. Purchase transaction records remain for accounting, refunds, disputes and legal obligations; the current app has no automatic purchase-record purge. When you delete an account, the app removes its user link from retained purchase records. Payment providers may retain their own records.

7. Your choices and requests

Use Security to export your account data or delete your account. You can edit plan entries and delete an individual profile in the app. Account deletion removes active account/plan data, the account’s linked access request, invite relationships, recap preferences and progress recaps; retained operational and transaction records are handled as described above. To request access, correction or deletion, email Info@plan-b-wealthstrategies.com. We may verify your identity before acting; do not email passwords or account numbers. We will handle requests and any applicable regional privacy rights within the requirements of applicable law. This notice does not limit rights you may have.

8. Adults and family learning

App accounts are for adults aged 18 or older. Family exercises are led by an adult using fictional amounts; children do not need their own account. Do not enter a child’s full name, birthdate or other identifying details in practice notes. If you believe a child has provided personal information, contact us so we can review and remove it.

9. Changes and contact

We will post policy updates here and update the effective date. Where required, we will provide additional notice or obtain consent before materially changing how existing information is used. Contact Plan B Wealth Strategies LLC at Info@plan-b-wealthstrategies.com.