Who's behind this
Hi, I'm Luana. I run ReturnKit as a sole trader from Ireland. If you have a privacy question or want your data deleted, email me directly: privacy@returnkit.life. I reply within a few days (30 max, as GDPR requires).
What stays on your device
Everything you put into the app:
- Profile stuff: life stage, age, conditions you choose to share (PCOS, ADHD, postpartum, etc.)
- Activity: cycle dates, focus blocks, journal entries, brain dumps
- Preferences: theme, mode, settings
This sits in your browser's localStorage. I never see it. It only leaves your device if you turn on cloud sync.
What I see when you sign in
Just your email (so you can sign in across devices) and a random token that proves it's you. If you go paid one day, Stripe handles cards: I never touch them.
What happens with cloud sync (if you turn it on)
Your data gets stored, encrypted in transit, in Cloudflare KV against your account. Mirror of what's on your device. Turn sync off anytime in Settings. Delete the cloud copy with one button.
Health data (the sensitive bit)
Some of what ReturnKit helps you organise (conditions, medications, cycle, perimenopause and postpartum notes, your kids' health details) counts as special-category data under GDPR (Article 9), so it gets the strongest treatment. It lives on your device by default and never leaves unless you choose. If you turn on cloud sync, I process it only on the basis of your explicit consent (the sync toggle itself), and you can withdraw that consent anytime by turning sync off or deleting the cloud copy. I never sell it, never use it for advertising, and never train AI models on it.
The AI Copilot
When you tap "Ask" with hosted AI on, your prompt goes over HTTPS to Anthropic (Claude). Before it's sent, identifying details (your name, date of birth, your kids' and partner's names, exact dates) are stripped by default; ages and health context stay so the help is useful. Anthropic processes it and returns an answer, does not train on it, and I don't keep the prompt afterwards. If you prefer to bring your own AI key, your prompts go to whichever provider you chose, under your own account and their terms, not mine. Policy: Anthropic.
The browser extensions
ReturnKit Capture (Chrome Web Store) is an optional companion that does one thing, on your command: when you save a page or a selection, it sends that page's address, title and the text you picked to your own Capture inbox over HTTPS. Nothing is captured in the background, only what you click Save on; the extension never reads or records the pages you visit. Your capture key lives in the browser's own extension storage, is scoped so it can only add to Capture (it cannot read your planner), and is sent only to ReturnKit's API.
ReturnKit Focus (Chrome Web Store) is a separate companion for timed focus sessions with optional site guardrails. It does not collect browsing history. During an active session it only checks navigation against your blocklist. Session state stays on your device unless you choose to pair with ReturnKit. Capture and Focus are separate listings because Chrome requires one purpose per extension.
Both companions talk to no third parties, run no analytics, and show no ads.
The planner has no analytics. This website asks first.
Inside the planner, nothing is measured. No visit counters, no session recording, no event tracking on what you write, tap or log. That is the part that matters, and it has not changed.
These marketing pages measure two different things, in two different ways.
Counting, for everyone. Vercel Web Analytics counts page views, referrers and countries. It sets nothing on your device: a visit is identified by a hash of the request that is thrown away after 24 hours, so there is nothing to consent to and nothing that follows you anywhere. This is how we know whether anyone read a page.
Understanding, only if you say yes. Microsoft Clarity shows which parts of a page get read and where people get stuck. It stores an identifier on your device, so it waits for the banner. Text is masked in what it records. We looked at Google Analytics and decided against it: the counting above already tells us what we need, and we would rather not hand your visit to an advertising company.
Neither loads until you accept the banner. If you decline, or simply never answer, nothing is loaded and nothing is measured. If your browser sends a Global Privacy Control signal, that is taken as a no without asking. Neither tool runs inside the planner at returnkit.life/app, where your notes live.
So nothing you write in ReturnKit is measured by anyone. What can be measured, with your permission, is whether a stranger read this page and where they stopped.
The companies that touch the infrastructure
Small list, each one only sees what they need:
- Cloudflare: runs sign-in, cloud sync storage, and the AI relay
- Vercel: hosts the website, and counts visits to these marketing pages without setting anything on your device
- Anthropic: only when you use hosted AI ("Ask"); it does not train on your prompts
- Resend: sends the emails you ask for (your sign-in code, and any digests or letters you turn on); it sees your email address and the message
- Stripe: handles payments and card details from 1 August 2026; ReturnKit never sees your card number
- Microsoft: Clarity on these marketing pages, only after you accept, for heatmaps and masked page recordings; never inside the planner
All of them are GDPR-compliant and use EU-approved data transfer agreements. Microsoft is kept to the marketing pages and never given anything you write. Nobody on this list sells your data.
Your rights (the GDPR bit)
You can:
- See your data: export a JSON file from Settings
- Fix anything inaccurate: edit it in the app
- Delete everything: the "Delete my account" button removes it within minutes
- Take your data with you: the same JSON export
- Withdraw consent: turn off sync, or delete your account
- Complain to a regulator: you can contact the Irish Data Protection Commission at any time
Cookies
None. Just localStorage and a service worker so the app works offline. Both strictly necessary, no banner needed.
Age
You need to be 16+ to use ReturnKit. That's the GDPR digital-consent age in Ireland.
One important thing
ReturnKit helps you plan and journal. It's not a medical device and it doesn't replace your GP, your therapist, or your consultant. Cycle phases and condition tags are organisational, not diagnostic. Always talk to a real clinician for medical decisions.
If this policy changes
I'll tell you in the app and ask you to re-confirm consent if anything material shifts. Small wording fixes happen quietly. The date at the top is always current.
Questions? privacy@returnkit.life. I read every email.