1. Who we are
upfrontplan is operated by Amr Hamdy, an individual sole proprietor based in Egypt, who is the data controller for the personal data described here. Contact: support@upfrontplan.com. This policy covers the upfrontplan website at upfrontplan.com and the web application at app.upfrontplan.com (together, the "Service").
2. What we collect
- Account data: your mobile phone number (your sign-in identity) and your role (buyer or seller).
- Plan data: the plans, schedules, and templates sellers author, including optional branding (business name, logo, and colors).
- Private planning inputs: the numbers a buyer types to check affordability, such as what they can set aside each month. These stay on the buyer's side, see section 3.
- Negotiation and commit records: structured change requests, confirmations, and committed plan snapshots.
- Notification records: in-app notifications and a dispatch log for the SMS messages the Service sends.
- Technical data: an essential session cookie and basic server logs needed to run and secure the Service.
What we never collect: no card or bank details (payments are handled by Paddle, our Merchant of Record, which collects your email address and payment details at checkout under its own privacy policy), no bank account linking, and no advertising or tracking cookies.
3. The privacy boundary
The Service is built around one promise: a buyer's finances never reach the seller. A seller never sees a buyer's income, expenses, planning inputs, verdicts, risk, or payment progress, and cannot tell whether the buyer even ran a check. The only things that cross to the seller are the buyer's identity on that plan, the negotiation status, and any structured request the buyer deliberately sends. This boundary is enforced in the product's data layer and tested on every release.
4. How we use your data
- to provide the Service: authoring, sharing, evaluating, negotiating, committing, and tracking plans,
- to send sign-in codes and the four kinds of product notifications (invites, counter-proposals, commits, and drift alerts), in-app and by SMS,
- to manage subscriptions and trials through Paddle,
- to secure the Service, including rate limiting and abuse prevention.
We do not sell personal data, run ads, or profile you for marketing.
5. Who we share data with
- Paddle, our Merchant of Record, for checkout, billing, and taxes.
- SMS providers, to deliver sign-in codes and notifications to your phone number.
- Hosting and infrastructure providers that run the Service.
- Authorities, only where the law genuinely requires it.
6. Retention
Nothing expires on its own. Your data stays until you delete it, and deleting is never blocked by a subscription. The billing event log is retained for accounting and dispute handling.
7. Deletion and your rights
You can delete individual plans, your saved inputs on a shared plan, or your whole account, at any time from inside the app. Account deletion removes your plans, evaluations, negotiations, tracking, notifications, sessions, and subscription record, and frees your phone number if no other account uses it.
Committed plan records are the one deliberate exception. Because both parties rely on them, the other party keeps their copy after you delete, with you shown as a neutral label such as "Former buyer" and any branding removed. When the second party also deletes, the record is gone entirely. The only trace of a deletion we keep is a non-identifying audit row recording the kind of deletion and when it happened.
For access or correction requests, email support@upfrontplan.com from a channel that lets us verify you own the account.
8. Security
Sign-in codes and session tokens are stored hashed, traffic is encrypted in transit, each account has a single active session, and sensitive operations are rate limited. No system is perfectly secure, but the Service is built and tested with security as a first-class concern.
9. International transfers
Our infrastructure and billing providers may process data outside Egypt. Where that happens we rely on the safeguards those providers publish and contractually commit to.
10. Children
The Service is for adults entering real financial commitments and is not directed at anyone under 18.
11. Changes and contact
We may update this policy from time to time, and we will give notice inside the Service for material changes. Questions: support@upfrontplan.com. A real person replies.