The safest place for your parent's statements is your own computer.

The design in one paragraph

The planner is a web page, not a service you upload to. The arithmetic runs in your browser. Your figures and your plan are kept in your browser's storage. There is no account and no database of families. We never receive your documents, your figures, or your plan, so there is nothing of yours on our side to lose.

Where your information lives

In your browser's own storage for this site, on the computer you use. That covers your license, the figures you typed, text read from a statement, the frozen plan, and a short history of past plans. It is there so the plan is still there when you come back.

It is ordinary browser storage. We do not add encryption of our own, because the key would have to sit in the same place as the data. What protects it is what protects everything else on the computer: the device's lock screen and your own user account.

A link at the foot of every page, "Erase my data from this browser", removes all of it at once. Clearing the browser's site data does the same.

What the page is allowed to do

Every page is served with a content security policy. It is a set of rules the browser enforces on our own page, whatever our code tries to do:

• Scripts and styles may come from this site only. There are no third-party scripts, no ad tags, and no tracking pixels.
• Fonts are served from this site. No font is fetched from another company.
• The page may connect only to this site and to the listed AI services. A connection to any other address is refused by the browser.
• The page cannot be shown inside a frame on another site, and it embeds none.
• Forms on the page can submit only to this site.

The site also asks browsers to use HTTPS only, sends no referring address when you follow a link out, and switches off access to the camera, microphone, and location.

You can check this yourself. Open your browser's developer tools, choose the Network tab, and use the planner. The only requests you will see are to this site, and to your AI service if you connected one.

Your license

A license is a short signed message. The planner checks the signature in your browser against a public key built into the page. That key can check a license. It cannot make one. The private key that signs licenses is kept off this site and is not in its code.

The link in your license email carries the license after the # sign. Browsers do not send that part of an address to a server, and the planner removes it from the address bar after reading it.

If you connect an AI service

This is optional. If you use it:

• Your key is kept for the open tab only, and is gone when the tab closes, unless you ask the planner to keep it on this computer.
• Your key is sent only to the company it belongs to.
• Before any real page can be sent, the planner sends a made-up statement, drawn in your browser, and checks that the service reads it back correctly.
• Each file needs your approval. You see the pages first, reduced in your browser, and Cancel sends nothing.
• The request goes straight from your browser to that company. If it tries to redirect anywhere else, the planner refuses.

From the moment a page reaches an AI company, that company's terms apply, not ours. The privacy policy says what each of the main services states about the data it is sent.

Payment

Payment happens on Stripe's own checkout page. Card numbers are typed on Stripe's site and never touch this one. We see the buyer's name and email and that a payment was made, which is how the license gets sent.

Hosting and counts

The pages are files served by Cloudflare. Like any web host, it sees the internet address a request comes from and the page that was asked for. Page addresses on this site contain no names and no figures.

One small program runs on the host. It keeps anonymous counts: that a page was opened, or that a step was reached. It stores a daily tally and nothing about a person. The privacy policy lists every field.

Your side of it

• Use your own computer, not a shared or public one. If you must use a shared one, erase your data when you finish.
• Keep the browser up to date.
• Browser extensions can read the pages you visit, including this one. Use a browser profile without extensions if that worries you.
• Treat the license email like a receipt. Anyone who has the link can open the planner, though not your figures.
• Never email us a statement or an account number. We do not need one, and email is not a safe place for it.

What we cannot promise

A web page is delivered fresh each time you open it. The promise that the planner sends nothing to us rests on how the page is built and on the policy above. It is our commitment, and you can watch it hold in the Network tab, but your browser cannot prove it for all time.

The planner has not had an independent security audit. It is new, and it is made by one developer. If that matters for your situation, use the planner with typed numbers only and no AI service. That is enough to make the full plan.

Report a problem

If you find a security problem, please write to support@calleditnow.com with what you found and how to see it. You will get a reply from a person. Please give us a fair chance to fix it before you publish it, and please do not include anyone's real financial information in a report.

The same contact details are published in the standard place, at /.well-known/security.txt. There is no paid bounty.

Last updated October 12, 2026.