Privacy Policy

Plan2Live™ ("we", "us") makes the Plan2Live Mac app, which turns a setlist (from Planning Center, or one you type in) into an Ableton Live set. We also run this website, plan2liveapp.com, and send e-mail about Plan2Live. This page explains what we collect, why, who helps us handle it, how long we keep it, and what you can do about it.

The short version

• We collect what we need to run Plan2Live and make it better: your account, whether you've paid, and how the app and website are used. That includes the titles, keys and tempos of the songs you build.
• Our analytics know you by an account ID (a random code), not by your name or e-mail address. The exception is older versions of our Mac app: until you update to build 67 or later, they still send your e-mail address and name. Older records from those versions can still carry them (see "What changed in this version").
• We don't sell your data, and we don't share it for advertising. There are no ad trackers on our website or in our app.
• We don't record your screen, and we don't make recordings of your visits to our website.
• Your audio, your Ableton sets and your Planning Center login stay on your Mac.
• You can turn analytics off in the app, unsubscribe from our e-mails, and ask us for a copy of your data or to delete it: feedback@plan2liveapp.com.

Who we are

Plan2Live is run by Pablo Jauregui, doing business as Plan2Live, based in Arizona, USA.

For anything about your privacy, e-mail feedback@plan2liveapp.com.

What we collect

Your account

When you create an account, in the app or on this website, we keep:

• your e-mail address and your name (the name you type, or the one Google shares if you choose "Continue with Google");
• your plan, your subscription status, and how many builds you've used (each build is counted with a random code and the date);
• if you share an invite link: your invite code, and which people signed up or paid through it;
• if you enter an invite code or link when you create your account in the app: that code.

Your password goes to Supabase, our sign-in service, which stores it scrambled (hashed). We never see it.

If you join a waitlist or an early-access list, we keep your e-mail address, your name, the role you picked (if you picked one), which form you used, and whether you ticked the box asking for news and tips.

The Mac app

Unless you turn it off, the app sends short notes about what happened ("events") to PostHog, our analytics service. They tell us:

• What happened: for example that the app opened, that a build started, finished or failed (and why), that you connected Planning Center, checked for updates, or used Transpose or Custom Templates, or that a finished build showed you how many free builds you have left, what Plus costs or your invite link, and whether you pressed its button (never the link or your invite code). Whether the welcome guide was shown, skipped or finished: which screen and step, whether the part of the window it points at could be seen, and how many songs were in the set. Whether the sign-in screen was shown and, when you try to sign in or create an account, how it ended (for example signed in, cancelled or failed), whether you used e-mail or Google and, if it failed, why, in a few fixed words. Never your e-mail address, your password or the sign-in service's own message.
• The songs in each build: titles, keys, tempos (BPM) and time signatures, how many songs there were, whether the set was typed in or imported from Planning Center, and whether each song was matched to its stem files. This is how we find out which songs fail to build.
• Where a set was saved, in a word or two: what kind of place (for example Desktop, Documents, Downloads or an external drive), whether iCloud Drive or another sync service keeps it in sync, and the drive's format (for example APFS or exFAT). If a build stops because a drive is full, how much space it needed and how much was free. Sometimes the type of an audio file (for example MP3). Never the names or full paths of your files and folders.
• Custom Templates: the template's shape (how many tracks, groups and lanes it has) and a short code that recognizes the same template again. Never its lane names, its file name or the file itself.
• Guide track analysis: whether it found section cues, how many, which language it heard, and how long the audio was; and which guide file it was, by its size and a short scrambled fingerprint of the start of the file that cannot be turned back into the audio or its name. Never the audio and never the words.
• What you type into the app's feedback boxes (for example "Tell us about your template"). The app removes e-mail addresses and file paths from it before sending.
• Your Mac and the app: Mac model, macOS version, app version, screen size, language and region settings, time zone, and whether you're on Wi-Fi. How quickly the app responds: how long each screen took to settle after it opened and, at most once each time you open the app, that it stayed busy for 5 seconds while doing nothing you asked for, with the screen it was on, how many songs were in the set and the window's size, rounded.
• Your approximate location, worked out from your IP address (see below).

These events are linked to your account ID (a random code our sign-in service gives you), your plan and your subscription status. Before you sign in, they're linked to a random code for your copy of the app. From build 67 on, they do not include your e-mail address or your name.

Older versions of the app (before build 67) still send the e-mail address and name on your account, and on some Macs they use your e-mail address, or a code made from it, as the ID itself. They keep doing this until you update. When an older version asks our server for things like a sign-in link, our server also sends our analytics a note of it, under a code made from your e-mail address. The first time build 67 or later opens, it drops an old ID made from your e-mail address, and deletes any notes an older version saved on your Mac but hadn't sent yet if they carry your e-mail address, your name or that old ID.

To turn it off: in the app, open Settings, then Privacy & Diagnostics, and switch off "Share usage analytics". It's on when you install the app. When it's off, the app sends no events. The app still talks to our servers to sign you in, check your plan, count your builds, check for updates and show you your invite link.

The app doesn't upload crash reports.

Planning Center

Only if you connect it. The app talks to Planning Center directly from your Mac, using the access details you create in Planning Center. Those details are kept in your Mac's Keychain and are sent only to Planning Center. We never see your Planning Center password.

The app reads your service types, your plans and the items in them, with their song and arrangement details (title, key, tempo, time signature and sections). It does not ask Planning Center for people, teams or schedules. The only Planning Center details that leave your Mac are the song titles, keys, tempos and time signatures described above. Never lyrics, chord charts, or author, copyright or CCLI details.

This website

When you visit plan2liveapp.com, PostHog records the pages you visit, the page or link that brought you here, what you click, where your pointer moves and how far you scroll (we look at this as heatmaps, which show where people click and move the pointer on a page), and your browser, device type, operating system and screen size. If you're signed in, this is linked to your account ID, not to your name or e-mail address.

Before anything is sent to PostHog, the website takes ad-click codes out of web addresses (such as fbclid, which Facebook and Instagram add to links, and Google's gclid), and takes out sign-in codes and your e-mail address.

We do not record your visits: no session replay, which means no video-like recording of your screen, your mouse or your typing. The heatmaps get separate points on a page (where you clicked, or where your pointer moved), not a recording of your visit.

Vercel, which hosts this website, also counts page visits, without cookies.

If your browser sends a Do Not Track or Global Privacy Control signal, see "Do Not Track and Global Privacy Control" below.

Cookies and browser storage. The website uses:

• sign-in cookies from Supabase, to keep you signed in;
• a PostHog cookie and browser storage holding a random ID, so visits can be counted (it lasts up to a year);
• p2l_ref, for 90 days, remembering which invite link brought you here, so the person who invited you gets credit;
• p2l_ref_seen, for 30 days, after you close the invite bar;
• p2l_news_optin, for up to 30 minutes, only if you tick the news box on Create account and then choose "Continue with Google": it carries your tick through the Google sign-in, and is deleted when you come back;
• a note in your browser's storage after you close the support banner.

The video on our home page is played by YouTube. Nothing from YouTube loads until you press play. When you do, the video loads from youtube-nocookie.com, and YouTube (Google) receives your IP address and browser details and may set its own cookies, under Google's privacy policy.

Your approximate location

From your IP address, PostHog works out roughly where you are: country, region and city, and sometimes a postal code and rough map coordinates. It's rough: usually only accurate to about 10 km (6 miles), often less. We don't use GPS, and the app never asks for your location. PostHog keeps the IP address with the events.

E-mail from us

We use Kit to send e-mail about Plan2Live: product news, release notes and tips. If you have a Plan2Live account, you may be on our Kit list, with your name and your plan, so we can send you news about Plan2Live. Joining one of our waitlists or early-access lists puts your e-mail address on our Kit list, with your name, so we can tell you about it.

If you use "Send the download to my Mac" (the box our website shows on a phone, a tablet or a computer that isn't a Mac), we send your e-mail address to Kit, and Kit e-mails you the download link. That puts your address on our Kit list with a note that you asked for the link; we don't send your name. If you don't tick the news box there, we use your address only to send you that link: we leave it out of the e-mails we send to our list.

On this website, our waitlist, early-access, account sign-up and "Send the download to my Mac" forms, and Create account in the Mac app, have a box that starts unticked: "Also send me Plan2Live news and tips." Ticking it is how you ask for news and tips, and we note that you did and when: in Kit for a waitlist, an early-access list or the download link, or on your account when you create one. If you tick it when you create an account, we also put your e-mail address on our Kit list, with that note, once the address is confirmed (when you open the link we e-mail you, or when Google confirms it if you choose "Continue with Google"). We do this once, without your name. If you create the account in the app, we do this the next time you sign in on this website.

If you're on our Kit list, our server also tells Kit about a few moments on your account, so the right e-mail reaches you: when your account is new, when your first build finishes, when you've used your free builds, and when a free account hasn't built for two weeks. Kit gets a label (a tag) for that moment, and nothing else about your builds. To check whether you're on the list, our server sends Kit your e-mail address; if you're not on it, nothing is added to Kit and you get none of these e-mails.

Kit tells us whether you opened an e-mail and which links you clicked. Every e-mail from our list has an unsubscribe link, and unsubscribing stops them.

E-mails about your account, like confirming your e-mail address or resetting your password, aren't marketing.

Payments

When you buy a plan, you pay on a page run by Stripe. Stripe collects your card details, name, e-mail address and billing details. We never see or store your full card number. Stripe tells us your plan, whether your payments went through, and your Stripe customer ID, and we keep that with your account. Our analytics also note that a checkout started or finished, and each subscription payment that goes through (for example a monthly renewal), with the plan, amount and currency, linked to your account ID. When you start a checkout in the Mac app, they also note whether you chose monthly or yearly and which button you started it from. Stripe also uses payment data for its own purposes, like preventing fraud; see Stripe's privacy policy.

When you contact us

If you e-mail us, we keep your message, your e-mail address and anything you attach (for example an Ableton set you send us to look at) in our mailbox, which Google hosts. Feedback, license activations and basic usage notes sent by older versions of the app are stored with Upstash, a database service we use through Vercel.

Server logs

When your browser or the app talks to our servers (for example to sign in, check your plan, check for updates or download the app), our hosts log the request, including your IP address and the time.

What stays on your Mac

The app never sends us:

• your audio files and stems;
• your Ableton sets and templates, including Custom Templates;
• the names and full paths of your files and folders;
• your Planning Center login;
• anything else in your Planning Center plans (only the song details described above leave your Mac);
• the guide-track audio or the words in it: speech detection runs on your Mac.

These only reach us if you send them to us yourself, for example by e-mail.

How we use it

• To run your account: sign you in, apply your plan's limits and take payments.
• To find and fix problems, for example which songs fail to build and why.
• To decide what to improve in the app and on the website.
• To answer you when you contact us.
• To send account e-mails, the download link if you ask for it, and news and tips if you're on our list.
• To keep Plan2Live safe from abuse and fraud.

We don't try to work out anyone's religious beliefs, and we don't record them. We use song data only to run and improve Plan2Live.

Who helps us

These companies handle data for us so Plan2Live can run. Each one has its own privacy policy. Our services store and process data mainly in the United States.

PostHog and Kit may use data that has had names and IDs removed (de-identified) to improve their own services.

We share data with anyone else only when the law requires it (for example a court order), to protect someone's safety or our rights, or if Plan2Live is sold or merged. A new owner would have to keep the promises on this page.

We don't sell your data

We don't sell, rent or trade your personal information, and we don't share it for advertising. There are no advertising trackers (like Meta, Google Ads or TikTok pixels) on our website or in our app, and no ad networks collect information about what you do there over time or across other websites. The one outside player on our pages is the YouTube video on our home page, and only after you press play (see "This website" above).

Do Not Track and Global Privacy Control

This is also our California Do Not Track disclosure. If your browser sends a Do Not Track (DNT) or Global Privacy Control (GPC) signal, our website:

• doesn't link your visit to your account, even if you're signed in. If an earlier visit was linked, your browser gets a new random ID.
• makes no PostHog profile for you and collects no heatmap data.
• still counts the pages you visit, what you click and how far you scroll, under a random ID that isn't linked to your account. Vercel's cookie-free counter also still counts the page view.

Payments are the exception: if you start a checkout, our server still notes that a checkout started, with your account ID, and when a payment goes through we note that too (see "Payments" above). If you press play on the YouTube video, Google's own rules apply. The Mac app can't see browser signals; use its "Share usage analytics" switch instead.

Your choices and rights

Wherever you live, you can:

• Turn off app analytics: Settings, then Privacy & Diagnostics, then switch off "Share usage analytics".
• Limit website analytics: turn on Do Not Track or Global Privacy Control in your browser. Your visits are then not linked to your account and no heatmap data is collected, but the pages you visit and what you click are still counted (see "Do Not Track and Global Privacy Control").
• Unsubscribe from our e-mails: use the link at the bottom of any e-mail from our list.
• Get a copy of your data, correct it, or delete it: e-mail feedback@plan2liveapp.com. Please write from the e-mail address on your account, so we know it's you. We'll answer within 30 days.

When we delete your data, we delete your account and any waitlist sign-up (Supabase), your analytics (PostHog: those linked to your account ID, and those an older version of the app sent under your e-mail address or a code made from it) and your entry on our e-mail list (Kit). Stripe keeps the records of past payments that the law requires it to keep. We won't treat you differently for using any of these rights.

How long we keep it

Children

Plan2Live is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact feedback@plan2liveapp.com and we will delete it.

If you live outside the United States

Plan2Live is run from the United States, and our services store and process your data mainly there. The rights above are for everyone. If the law where you live gives you more rights, such as objecting to how we use your data or taking a copy elsewhere, e-mail us and we'll honor them. You can also complain to the data protection authority in your country.

If you're in the European Union or the United Kingdom, these are the legal reasons we rely on:

• Your account, payments and the service you asked for: our agreement with you.
• Analytics, fixing problems, security and improving Plan2Live: our legitimate interest in making Plan2Live work well. You can switch app analytics off at any time, as described above.
• News and tips by e-mail: your consent, or, where the law allows it, our legitimate interest in telling customers about Plan2Live. You can unsubscribe at any time.
• Payment and tax records: our legal duties.

Nevada residents

We don't sell covered information as Nevada law defines it. You can still send us a request not to sell your information at feedback@plan2liveapp.com, and we'll answer within 60 days.

Keeping your data safe

Data travels between your Mac or browser and our services encrypted (HTTPS). Only a few people at Plan2Live can see account or analytics data. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

What changed in this version

• Our analytics now know you by your account ID only: on this website, and in the app from build 67. Before, the app attached the e-mail address and name on your account, and the website attached the part of your e-mail address after the @. Older versions of the app still do until you update.
• We've removed e-mail addresses and names from the profiles in our analytics. Older records are the exception: some older versions of the app used your e-mail address, or a code made from it, as the ID itself, and notes from older versions stay as they arrived, so those records can still carry your e-mail address and name. We delete them if you ask us to, and otherwise after 2 years, like the rest of our analytics.
• Our website no longer records visits (session replay).
• We're deleting the website recordings.
• If your browser sends Do Not Track or Global Privacy Control, our website no longer links your visits to your account.
• The video on our home page now loads only when you press play.
• The sign-up and waitlist forms on our website now have a box for news and tips, which starts unticked.
• On a phone, a tablet or a computer that isn't a Mac, our website can now e-mail you the download link ("Send the download to my Mac").
• This page now lists everything we collect, including song details and approximate location. Our old privacy page left these out, or said we didn't collect them.
• If you're on our e-mail list, our server now tells Kit about a few moments on your account, like your first build (see "E-mail from us").
• Our analytics now also note each subscription payment, not only the first checkout (see "Payments").
• The Mac app's Create account now has the same news-and-tips box, which starts unticked, and an optional place for an invite code.
• When you start a checkout in the Mac app, our analytics now also note whether you chose monthly or yearly and which button you started it from (see "Payments").
• The Mac app's analytics now note whether the sign-in screen was shown and how each sign-in or new account ended, including whether you used e-mail or Google (see "The Mac app").

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how your data is used, we'll e-mail account holders and put a notice on this website before the change takes effect.

Contact

Questions or requests: feedback@plan2liveapp.com.