Privacy policy

The planner only stores the figures you type in so it can calculate estimates and show them again next time:

• Current age, planned retirement age, and years of service
• Annual salary and expected salary growth
• Your URS tier, system, and plan selection
• Retirement account balances and contribution settings (401(k), Roth 401(k), 457(b), Roth 457(b), IRAs, other savings)
• Employer contribution and match settings
• Social Security benefit estimates you copy from your own SSA statement — dollar amounts only
• Marital status, spouse age, survivor option, and life-expectancy assumptions used for survivor planning
• Assumed rate of return, inflation, tax-rate assumptions, and your income and expense goals

If you create an account, we also store your email address (and, with Google sign-in, the basic profile Google returns) so you can sign back in.

Do not enter any of the following anywhere in this app. There is no field for them, we have no use for them, and we will never ask for them by email or phone:

• Social Security numbers
• URS or myURS usernames, passwords, PINs, or security answers
• Bank, credit union, brokerage, or retirement account numbers
• Payment card numbers
• Driver license, passport, or employee ID numbers
• Medical records or health information
• Names of your spouse, children, or beneficiaries — the survivor tools only need ages

Some fields are free-form numbers. Please keep them as numbers; do not use them to store notes containing personal identifiers.

Without an account. Your plan is saved in your browser's local storage on that device only. It never leaves your device. Clearing your browser data removes it. Anyone with access to that device and browser profile can see it, so use a device lock.

With an account. Your plan is also saved to a managed cloud database in a row tied to your user ID. Database access rules enforce that a signed-in person can read, change, or delete only their own row. Nobody else using the app can read it.

• All traffic between your browser and our servers uses HTTPS/TLS encryption.
• The database is encrypted at rest by the hosting provider.
• Row-level access rules scope every read and write to the signed-in account.
• Passwords are never stored by this app; authentication is handled by our managed identity provider, which stores only a salted hash.
• We collect the minimum needed for the calculations and nothing else.

No system is perfectly secure. Because we deliberately never collect identifiers like Social Security numbers or account numbers, the impact of any incident is limited to planning figures and an email address.

We do not sell, rent, or trade your information. We do not share it with advertisers, your employer, your fire department, or Utah Retirement Systems. Information is processed only by the infrastructure providers that host the app, database, and authentication, acting on our instructions.

We may disclose information if required by law, or to protect the safety and rights of users.

Your saved plan is kept until you delete it or delete your account. There is no separate archive. Deleting your account permanently removes your saved plan.

Everything is self-service on the Your data page:

• See exactly what is stored about you
• Download a copy of your plan as a file
• Erase the copy saved on this device
• Erase the copy saved to your account
• Permanently delete your account and everything with it

If anything does not work, contact us and we will delete your data manually.

We do not use advertising or cross-site tracking cookies. If you sign in, your browser stores a session token so you stay signed in; signing out removes it.

This tool is intended for working adults. It is not directed at anyone under 18 and we do not knowingly collect information from children.

If this policy changes materially we will update the date at the top and note the change in the app. For privacy questions or deletion help, use the contact address published by the operator of this site.

See also the terms of use.