RetireWell ("the app", "we", "our") is a retirement-planning tool available at retirewell.milindduraphe.us. This policy explains what information the app collects, how it's used, and who it's shared with. RetireWell is operated by an individual developer, not a company — if you have questions, contact duraphes@gmail.com.
1. Information we collect
Account information. To sign in, you can use Google, Microsoft, or a one-time email login code.
- Signing in with Google shares your email address and name with us.
- Signing in with Microsoft shares your email address and name with us.
- Signing in with a login code only requires the email address you enter yourself.
We don't receive your password from any of these providers — authentication happens entirely on their side.
Financial and retirement-planning information. To generate a projection, you enter details about your retirement plan, which may include: your and your spouse's date of birth, state, and tax filing status; income and self-employment earnings; Social Security earnings history and intended claiming age; retirement account balances and contribution rates; real estate, debts, and loans; insurance policies; Medicare and other medical insurance details; and other tax-related figures (capital gains, deductions, dependents).
Saving this information is optional. If you don't check "Save this profile," your inputs are used only to generate that one projection and are not stored afterward. If you do save it, it's stored so you don't have to re-enter it next time, tied to your account email.
Usage information. We keep a basic activity log (which features you used and when) and, if you use the AI advisor, metadata about that usage (which AI model handled the request, how long it took, whether it succeeded, and its token cost) — not the content of your questions or the AI's answers.
2. How we use your information
We use the information above to:
- Generate your retirement projections, tax estimates, and Social Security estimates
- Save your profile between visits, if you've asked us to
- Power the AI advisor's answers and the AI-written narrative sections of your report
- Notify the app owner of account sign-ins as a basic security measure (see §3)
- Maintain and improve the app
We do not sell your information, and we do not use it for advertising.
3. Who we share information with
We use a small number of third-party services to run the app. We don't share more than each service needs to do its job:
- Google / Microsoft — used only for sign-in, as described above.
- Google Drive (optional) — if you choose to connect Google Drive, the app can save your exported spreadsheet there or read a file you pick, but only files you explicitly select through Google's own file picker — the app never gets blanket access to your Drive.
- OpenRouter (an AI model routing service) — when you use the AI advisor, or when the app generates the AI-written narrative in your report, your profile and projection data is sent to OpenRouter, which routes it to an underlying AI model (which may include models from Meta, Google, or Anthropic) to generate a response. This is the one case where your financial details leave our own infrastructure to a third party — we're noting it plainly here because we think you should know before you use that feature.
- Our email provider (Gmail) — used to send a security notification to the app owner when someone signs in. This notification is about your sign-in, but it's sent to the app owner, not to you, and exists to help catch unauthorized access to accounts.
We don't use analytics or advertising trackers.
4. Data storage and security
Your data is stored on infrastructure we run on Google Cloud Platform. Sessions use a bearer token (not a tracking cookie) that expires automatically after a period of inactivity. We take reasonable technical measures to protect your data, but no online service can guarantee absolute security.
Our hosting infrastructure may automatically log standard technical information (such as IP address and browser type) for security and troubleshooting purposes, separate from the application-level activity log described in §1.
5. Your choices
- Don't save your profile — if you'd rather not have your data stored at all, leave "Save this profile" unchecked; your data exists only for that session.
- Delete a saved profile — you can delete any profile you've saved directly in the app.
- Disconnect Google Drive — you can revoke the app's Drive access at any time from your Google Account's connected apps settings.
- Request full account deletion — to have your account and all associated data (including activity history) removed, contact duraphes@gmail.com.
6. Children's privacy
RetireWell is a retirement-planning tool intended for adults. It is not directed at children, and we do not knowingly collect information from anyone under 18.
7. Changes to this policy
If this policy changes, we'll update the "Last updated" date above. We encourage you to review it periodically.