Plans, saving and your data

What is the plan of record?

Your household can hold more than one plan, but only one is the official plan of record, badged in the plans list. It is the one Home and tracking measure progress against. Every other plan is just an extra: a base case, a what-if you want to keep, or a plan per goal.

That is different from the what-if sandbox, a temporary copy that never creates a new plan and is gone when you leave. “Apply” folds changes back into the same plan, and “Discard” throws them away. Duplicate the plan instead to keep a what-if as its own.

How do I manage my plans?

Signed in, the sidebar’s “Plans” row opens the full list, newest edit first, each row showing the name, last edit, an “Active” badge and “Plan of record” where it applies. Tap a row to switch. From the list you can:

• New plan. Starts a fresh plan and switches to it.
• Rename and Duplicate, from a row’s overflow menu.
• Set as plan of record. Offered on any plan not already official.
• Delete. Confirms first, with an Undo straight after. Your only plan cannot be deleted.

Several plans, and switching between them, live in your account. That is one reason the app asks you to create one right after the wizard’s first projection.

How does saving work?

There is no save button anywhere. Every change saves on its own, and a status line tells you what is happening. On a tablet or desktop it sits at the bottom of the form. On a phone it sits in the bar under the screen title, which reads “Saved · Up to date” when all is clear.

• Saving… Your change is being saved.
• Saved. It is saved.
• Couldn’t save. Check your connection. Your edits stay put, and the next change tries again.
• Updated on another device. Most likely your partner editing at the same time. Your own edits are not lost.

The app waits a moment after you stop typing, then saves to your account: the brief “Saving…” you see. Before an account exists, entries save instantly on the device, moving into your account once you create one.

Where does my data live?

Before you have an account, your plan is saved only on the device you are using, and nothing leaves it until you sign in. Sign in, and the app offers to bring it into your account so it syncs everywhere: “Move your plan to your account? Your plan is on this device. Move it to your account to see it wherever you sign in.”

• “Move my plan” moves it in: “Your plan is in your account. It now syncs wherever you sign in”, with a partner invite link if one is waiting.
• “Not now” leaves the plan where it was, deletes nothing, and asks again next sign-in.

An account that already has a plan (“Your account already has a plan”) opens that plan instead, and the plan on this device is still there. A failed move (“We couldn’t move your plan”) leaves your plan safe on the device, and the app asks again next time you sign in. See Getting started for the full flow.

To leave for good, open Profile and tap “Delete account”. It permanently deletes your plans and data and signs you out, and it cannot be undone. Anything you share with a partner stays with them.

The bottom of Profile also shows your app version. Quote it when you report a problem.

Who can see my plan?

Your household’s plan, holdings and transactions are yours. By default, nobody outside your household can see them, whether they use Perfingo Planner or not. The one exception is a hard-to-read statement you let us keep: the full PDF, names and account numbers included, is seen by the Perfingo team only, until you ask us to delete it. You can opt out with “Don’t keep it”. See Does the app keep my statement?.

• Your household only. Only you, and your partner if you have invited one, can see or change it.
• Advisors see only what you grant. An advisor gets nothing until you invite them, and only the access level you choose. See Managing your advisor’s access.

What usage data does the app collect?

Separately from your plan data, the app sends product-analytics data to PostHog, so a reported bug can be traced to what happened on screen.

What is sent as events?

No amounts, ever. Events are a fixed, closed list of which screens you visited and which actions you took, with values limited to yes/no flags or short words. Counts are words (“none”, “few”, “many”), never figures. Your net worth, income, balances and goal amounts are not in that stream. Screen views record the shape of the page, not identifiers tying it to your household or plan.

What identifies me?

Your account’s internal user id is sent, and nothing else: no email, name, household or plan identifier. That single id makes “a user reported a bug” answerable.

What about session recording?