A clearer kind of day
Your planner, your choices.
How Paperstride handles account and planner data.
Effective 10 September 2026. This notice covers the iOS app, its account service and this website.
Your account and planner
Paperstride stores your account identity, name, verified email addresses, tasks, lists and events to sign you in and sync your planner. Session credentials are protected on your device. Your Personal planner is accessible only through your account.
Family sharing
A Family has up to six separate accounts. All members can view and edit shared Paperstride tasks and events. Only the owner manages invitations and members. Personal planners are not shared. Removing a member ends server access immediately; a device that is offline removes its shared cache when it next connects.
Connected calendars
Calendar connections are optional and start private. Google Calendar uses separate read-only consent. We store protected credentials and the calendar names, event titles and times needed to display selected calendars. We do not request event attendees, descriptions or attachments for these imports. Apple calendar reading happens on an Apple device; private Apple event data stays on that device. Explicitly sharing an Apple calendar uploads event titles and times so Family members can see them on their supported devices.
You can stop sharing or disconnect a calendar in Settings. Imported events are view only. Shared Apple calendars update while the chosen Apple device has Paperstride open, with the last refresh shown in the app.
Google data is used only to provide the calendar features you choose. We do not sell it, use it for advertising or use it to train AI models. Our handling and transfer of Google data follows the Google API Services User Data Policy, including its Limited Use requirements. You can also remove Paperstride from your Google Account's third-party connections.
Service providers
Apple and Google provide the sign-in and store services you choose. Superwall provides subscription presentation and purchase verification, including account and transaction identifiers, app/device information, paywall interactions and subscription status. Resend delivers sign-in codes and Family invitations using its EU sending region. Hetzner hosts our account service and website. Cloudflare provides DNS and routes support email to our Proton inbox. The website does not collect sign-ups or use advertising trackers; network providers process the connection information needed to deliver it.
Some providers, including Apple, Google and Superwall, operate internationally and may process data outside the European Economic Area, including in the United States. Applicable transfer safeguards depend on the provider and may include adequacy decisions or the European Commission's standard contractual clauses. Contact us for information about the safeguards applicable to your data.
Why we process data
Account, planner and subscription processing provides the service you request (Article 6(1)(b) GDPR). Optional calendar connections and sharing use your consent, which you can withdraw in Settings (Article 6(1)(a)). Security, abuse prevention and responding to support requests serve our legitimate interests in operating a reliable service (Article 6(1)(f)). Records required by law are processed to meet those obligations (Article 6(1)(c)). We do not use your planner to make automated decisions with legal or similarly significant effects.
How long data stays
We keep account and planner data while your account exists, including after a subscription expires so you can view or export it. Sign-in codes expire after ten minutes and invitations after seven days. Expired authentication records and expired, accepted or revoked invitations are removed by the service's maintenance cycle, normally within fifteen minutes while it is running.
Account deletion removes private data from the active service. Encrypted credentials awaiting provider revocation remain only until that revocation succeeds. Recovery backups are restricted to service restoration and retained for no longer than thirty days. Support correspondence remains for resolving your request and necessary follow-up; records subject to legal retention requirements remain for the applicable statutory period. Apple and other independent providers apply their own retention policies to their records.
Access, export and deletion
Expired subscriptions leave existing content available to view and export. Delete your account in Settings to remove private planner records, sign-ins and calendar connections. Shared contributions remain without your deleted profile; if you owned a Family, its planner becomes read only for remaining members. Store subscription cancellation is a separate action. Device exports are controlled by you.
Provider
Burlis Management GmbH, Philippstraße 27, 52349 Düren, Germany. Represented by Alexander Burlis.
Burlis Management GmbH is responsible for processing described here. Contact support@paperstride.com for privacy questions or requests. Further company details are in our imprint.
Your rights
Where applicable, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing. We may need to verify that a request relates to your account. You may complain to a data protection authority, including the authority where you live or work; our local authority is the LDI Nordrhein-Westfalen. We will update this notice when our data practices change and seek fresh consent when required.