Privacy Policy

You may use supported calculators without creating an account. Retired Kevin will not intentionally store new anonymous planning work in localStorage, IndexedDB or another persistent browser store.

Information may remain temporarily in browser memory while the experience is open. Refreshing or closing the page may erase it. This does not mean that ordinary browser, device or network infrastructure leaves no technical trace.

A clear Not saved status will appear wherever losing work would matter.

A free account is expected to require a verified email address. The account service may also process an identity-provider identifier, account and security events, communication preferences, and consent records.

Your email will support sign-in, recovery, security alerts and essential service notices. Identity and communication information will be kept logically separate from encrypted financial-plan records.

The selected identity provider and other material service providers must be identified in this policy before the account service launches.

Only supported, validated records that you explicitly choose to save will be eligible for account storage. Depending on the feature, this may include plan inputs and assumptions, named scenarios, portfolio information, retirement-income information, and the model or record versions needed to reproduce an illustration.

Calculated paths and generic uploaded files will not be stored automatically. A feature that stores a report, custom return series or other additional information must ask separately and explain what will be retained.

Do not enter a SIN, bank or brokerage password, full account number, government credential, or unnecessary medical document. The educational tools do not require them.

Account creation and marketing consent will be separate choices. Providing an email for sign-in will not, by itself, subscribe you to promotional messages.

An optional marketing choice may cover retirement education, new-tool announcements and Retired Kevin updates. It will be unselected by default. Consent wording, version, time, source and withdrawal will be recorded, and every marketing message will provide an unsubscribe method.

Essential account, recovery and security messages are different from promotional messages.

The intended account design uses HTTPS during transmission and application-level authenticated encryption before a supported plan is written to central storage. Encryption keys will be managed separately from encrypted plan data, with key rotation, restricted access, encrypted backups and tested recovery procedures.

Decrypted information will exist temporarily in browser memory while you use it. Retired Kevin will not describe the service as end-to-end, zero-knowledge or completely secure unless those properties are separately built and independently verified.

Operational logs, analytics and error reports should exclude financial-plan payloads wherever reasonably possible.

Retired Kevin will rely on selected providers for identity, hosting, database, email and security operations. They may process limited personal information only to provide their contracted services and will have their own legal and security obligations.

The final policy must name material providers, explain the information shared with them, and disclose relevant processing and backup locations—including processing outside Canada—before account saving becomes active.

Creating an account will upload nothing automatically. Eligible work already saved in the browser will be shown before any transfer.

You will choose what to migrate. Retired Kevin will validate, encrypt, save and verify the account copy before offering to remove the old device copy. Removal will require a separate confirmation. Failed or partial transfers will remain visible and recoverable where possible.

Account holders should be able to view account information, correct supported details, export supported planning records, delete individual plans, withdraw optional marketing consent and request account deletion.

The final policy must specify active-record retention, deletion timing, backup expiry and any narrow security or legal records that must be kept temporarily. Privacy controls, export and deletion will not require a paid subscription.

Hosting and security infrastructure may process an IP address, request time, browser information, requested page and other limited technical information needed to deliver and protect the site.

Account access will require secure session cookies. Retired Kevin does not intend to use advertising trackers or combine financial-plan information with marketing analytics. Any future analytics must be disclosed and designed to exclude plan payloads.

Before account launch, Retired Kevin must designate a privacy-responsible role and complete the contact, provider, retention, processing-location and incident-response details in this draft.

Use the Contact page for privacy questions, access or deletion requests, or concerns. Do not include sensitive financial information in the message.