Who's behind this
I'm Luana Micheau, trading as ReturnKit, a sole trader in Ireland. For privacy questions or requests, contact privacy@returnkit.life. Data-rights requests are normally answered within one calendar month. Where a permitted extension is necessary, I will explain it within that first month.
What stays on your device
Everything you put into the app:
- Profile stuff: life stage, age, conditions you choose to share (PCOS, ADHD, postpartum, etc.)
- Activity: cycle dates, focus blocks, journal entries, brain dumps
- Preferences: theme, mode, settings
Planner records are stored in this browser. Cloud sync and online features can send information off this device. Local browser storage is not automatically encrypted by ReturnKit. Use a device passcode, avoid shared browser profiles and keep a private backup before clearing browser data.
What I see when you sign in
Account records include your email, authentication information, plan and trial status, and service activity such as last sign-in or cloud-save dates. Stripe handles payment card details. Cloud content may be readable by the service unless end-to-end encryption is enabled; signing in alone does not enable it.
What happens with cloud sync (if you turn it on)
Included planner records are sent over HTTPS to ReturnKit's Cloudflare service. End-to-end encryption is a separate optional setting. Turning sync off pauses future syncing on that browser; it does not erase existing cloud records or stop other signed-in devices. Account deletion and local deletion are separate actions. Contact us about historical copies or other records covered by an erasure request.
Health data (the sensitive bit)
Conditions, medications, cycle and pregnancy records, and other people's health details are sensitive health information. In the current version, some structured health records are included in optional cloud sync; others, including daily medication-taken logs and postpartum screening, are excluded. A device-only health migration is planned but is not yet complete. Do not assume existing cloud copies have been removed. Health consent, cloud storage and optional online AI are separate decisions; a general sign-in or acceptance of terms is not blanket consent to all of them. Do not enter another person's health information unless you have appropriate authority to do so.
The AI Copilot
Online AI sends your request and the context supplied by the feature to an AI provider. Hosted AI uses Anthropic; bring-your-own-key features use the selected provider. Identifier removal is not a guarantee of anonymity. Do not put private health information into online AI prompts. ReturnKit's intended boundary keeps health and journal features off hosted AI; a field-by-field review is still being completed. Provider retention and training are different questions: Anthropic describes standard API retention of up to 30 days, with exceptions and product-specific terms. See Anthropic's retention guidance. A personal API key does not make a request device-only.
The browser extensions
ReturnKit Capture (Chrome Web Store) is an optional companion that does one thing, on your command: when you save a page or a selection, it sends that page's address, title and the text you picked to your own Capture inbox over HTTPS. Nothing is captured in the background, only what you click Save on; the extension never reads or records the pages you visit. Your capture key lives in the browser's own extension storage, is scoped so it can only add to Capture (it cannot read your planner), and is sent only to ReturnKit's API.
ReturnKit Focus (Chrome Web Store) is a separate companion for timed focus sessions with optional site guardrails. It does not collect browsing history. During an active session it only checks navigation against your blocklist. Session state stays on your device unless you choose to pair with ReturnKit. Capture and Focus are separate listings because Chrome requires one purpose per extension.
Both companions talk to no third parties, run no analytics, and show no ads.
The planner has no analytics. This website asks first.
Inside the planner, nothing is measured. No visit counters, no session recording, no event tracking on what you write, tap or log. That is the part that matters, and it has not changed.
These marketing pages measure two different things, in two different ways.
Counting, for everyone. Vercel Web Analytics counts page views, referrers and countries. It sets nothing on your device: a visit is identified by a hash of the request that is thrown away after 24 hours, so there is nothing to consent to and nothing that follows you anywhere. This is how we know whether anyone read a page.
Understanding, only if you say yes. Microsoft Clarity shows which parts of a page get read and where people get stuck. It stores an identifier on your device, so it waits for the banner. Text is masked in what it records. We looked at Google Analytics and decided against it: the counting above already tells us what we need, and we would rather not hand your visit to an advertising company.
Neither loads until you accept the banner. If you decline, or simply never answer, nothing is loaded and nothing is measured. If your browser sends a Global Privacy Control signal, that is taken as a no without asking. Neither tool runs inside the planner at returnkit.life/app, where your notes live.
So nothing you write in ReturnKit is measured by anyone. What can be measured, with your permission, is whether a stranger read this page and where they stopped.
The companies that touch the infrastructure
Small list, each one only sees what they need:
- Cloudflare: runs sign-in, cloud sync storage, and the AI relay
- Vercel: hosts the website, and counts visits to these marketing pages without setting anything on your device
- Anthropic: only when you use hosted AI ("Ask"); it does not train on your prompts
- Resend: sends the emails you ask for (your sign-in code, digests or letters you turn on, and the separately confirmed monthly newsletter); it sees your email address and the message
- Stripe: handles payments and card details from 1 August 2026; ReturnKit never sees your card number
- Microsoft: Clarity on these marketing pages, only after you accept, for heatmaps and masked page recordings; never inside the planner
Providers may process data outside Ireland and the EEA. The applicable contracts, subprocessors and transfer safeguards depend on the service and account configuration. ReturnKit is reviewing these arrangements; this page does not claim EU-only storage or certify a provider's compliance.
The optional monthly newsletter
Newsletter signup is separate from an account and product-update preferences. With your consent, we store your email address, confirmation time and the consent notice version in Cloudflare, and use Resend to send confirmation and approved monthly editions. No planner or health information is used to choose newsletter content. We do not add tracking pixels.
Unconfirmed requests expire after 24 hours. Active subscription details remain until you unsubscribe or request deletion. Unsubscribing removes your email from the active subscription record; minimal suppression and dispatch records remain to prevent repeat sends. Rate-limit counters expire after a day. Every edition has an unsubscribe link; you can also contact hello@returnkit.life for help, access or deletion. Account deletion clears newsletter records for that account email. Provider logs and backups follow their separate retention arrangements.
Your rights (the GDPR bit)
You can:
- See your data: export a JSON file from Settings
- Fix anything inaccurate: edit it in the app
- Delete everything: the "Delete my account" button removes it within minutes
- Take your data with you: the same JSON export
- Withdraw consent: turn off sync, or delete your account
- Complain to a regulator: you can contact the Irish Data Protection Commission at any time
Cookies
None. Just localStorage and a service worker so the app works offline. Both strictly necessary, no banner needed.
Age
You need to be 16+ to use ReturnKit. That's the GDPR digital-consent age in Ireland.
One important thing
ReturnKit helps you plan and journal. It's not a medical device and it doesn't replace your GP, your therapist, or your consultant. Cycle phases and condition tags are organisational, not diagnostic. Always talk to a real clinician for medical decisions.
If this policy changes
I'll tell you in the app and ask you to re-confirm consent if anything material shifts. Small wording fixes happen quietly. The date at the top is always current.
Questions? privacy@returnkit.life. I read every email.