Refrain Join the waitlist

Privacy policy

Last updated: October 23, 2026

Who we are

Refrain is run by Ansble LLC, 5585 South Indian Rock Rd, Salt Lake City, Utah, USA. Write to hello@refrainplanner.com with any privacy question.

What we collect

  • Your account: your Google account id, email address and name, from Google sign-in.
  • What you put in Refrain: plans, songs, notes, class logs, links, tags, lists and the files you upload.
  • Sessions: for each signed-in device, a fingerprint of its sign-in cookie, its browser’s description and when it was last used, so you can see and end sessions in Settings.
  • Billing: payments are processed by Stripe. You enter your card on Stripe’s own pages; we never see or store your card number. We keep the IDs Stripe gives us for your customer record and subscription, your plan and your billing dates. Stripe keeps its own records as its privacy policy and the law require.

Students

Refrain is designed to keep student information out. It records classes, not children: there is no roster and no per-student record. Please keep notes about children to first names at most.

How we use it

Only to run Refrain for you. We don’t sell your data or use it for advertising. When you save a link, our server fetches that page to read its title, description and picture; the site sees a request from Cloudflare, not from your device. New library items may be sent to TypeSafe AI to suggest tags. We send the item’s title, description, notes, link and up to 20,000 characters of document text, plus your tag names. We never send your name or email.

Who processes your data

We use these service providers. Each handles your data only to provide its service.

  • Cloudflare, Inc. hosts Refrain and stores your data: your account and library in its database, and your uploaded files and their thumbnails in its file storage. It also handles every request to Refrain and keeps short-lived request logs for us.
  • Google LLC provides sign-in. We receive your Google account id, email and name, and nothing else. If you import from Google Drive, Refrain can read only the files you pick. Google’s access token is kept in your browser and sent to our servers only to fetch the files you picked; it is never stored or logged.
  • Stripe, Inc. processes payments (see Billing above).
  • TypeSafe AI suggests tags for new library items (see above).

These providers may process data outside your country. When you play a YouTube or Vimeo video in Refrain, it plays from youtube-nocookie.com or player.vimeo.com, which receive your request as on any site that embeds their player.

Cookies and local storage

The app sets one cookie to keep you signed in, for up to 30 days after your last visit, and a short-lived one that protects the Google sign-in while it happens. It keeps your theme choice (light, dark or system) in your browser’s local storage. There are no analytics, advertising or tracking cookies. This website sets no cookies; if you arrive with a referral link, it keeps the code in your browser’s session storage for that tab.

Logs

Cloudflare keeps a log of each request to Refrain for 3 days: the time, the address requested, the response, and network details such as your approximate country. When something goes wrong, our server may log an error with an internal account id. We don’t log your email, your files or the text of your library. Rate limiting counts requests per network address and per account for about a minute.

What we keep, and for how long

  • Your account and library for as long as you have an account. Deleting an item deletes it straight away.
  • Sign-in sessions for up to 30 days after your last visit.
  • iPhone capture keys until you revoke them. We store only a fingerprint of each key.
  • Billing records for as long as you have an account.
  • Records of actions our staff take on accounts, such as extending a trial, for two years.

When you delete your account

Deleting your account (Settings › Account › Delete my account) immediately and permanently deletes your profile, library, plans, logs, sessions and capture keys, and cancels and deletes your Stripe customer record. Your uploaded files are deleted at once; any that can’t be are retried automatically, normally within the hour. Some things remain afterwards:

  • Backups. Our database keeps point-in-time copies for 7 days so we can recover from mistakes. Your data stays in those copies until they expire. If we ever restore one, we delete again any accounts that had been deleted.
  • Trial record. A one-way, keyed fingerprint of your Google account id and the date your free trial ended, so the same Google account doesn’t get a second free trial. It can’t be turned back into your account id or email.
  • Staff action records that mention you have your email replaced with an anonymous id, and are deleted after two years.
  • Blocked accounts. If an account was blocked for abuse, we keep its email address and Google account id on the block list.
  • Logs expire after 3 days.
  • Stripe keeps payment records under its own policy.

Your choices

You can sign out of any device, revoke iPhone capture keys, and delete your account and everything in it from Settings at any time. Write to us if you want a copy of your data or have a question about it.

Changes

If we change this policy, we’ll update the date above, and tell you in the app or by email when the change matters.