Privacy policy
Last updated: 14 October 2026
The short version
The calculators run entirely in your browser. Nothing you type into them - your age, your savings, your spending - is sent to us or stored by us, unless you ask us to email you your results or to carry them into the planner. The planner stores only what you choose to save, in a database in London that is encrypted at rest, and you can export or delete it yourself at any time from its settings page.
Who we are
MyRetireAge (myretireage.com) is operated by Adam Akhlaq, a sole trader based in the United Kingdom, who is the data controller for any personal data described here. You can reach us at hello@myretireage.com, or from the planner’s help page if you have an account.
What we collect, and why
Your email address, only if you sign up for early access or ask for your results by email. We keep the address and when you confirmed it. The legal basis is consent: you typed your address in, then opened the link we sent and pressed the confirm button (double opt-in). We use it to send early access updates and the monthly UK retirement briefing, and - if you asked for it - a one-off email with your calculator results.
Calculator results in emails. If you ask us to email your results, the numbers from the link you were on travel inside the confirmation link we send you, and are used to build that one email when you confirm. They are not saved to a database or used for anything else.
Calculator numbers carried into the planner. If you choose “Save as a plan” on a calculator, its numbers travel in the link to the planner so it opens with them. Nothing is stored until you keep a plan. While you sign in they wait in your browser for up to a day, not in the sign-in email we send you.
Your planner account and plan, only if you sign in to the planner. We store your email address, a display name if you give one, your reminder and display preferences, and the plan you save: your date of birth, spending target, National Insurance qualifying years, other income and lump sum choices, any growth, inflation and fee rates you set, each pot with its name, icon (including any image you upload), balance and monthly saving, your scenarios, every monthly check-in with its note, and a history of the changes you make. If you leave the first-run guide part way through as a member, we keep where you got to so you can pick it up on another device. The legal basis is the contract you enter by using the planner.
We use it to show you your plan, its history and, if you switch it on, one reminder email a month. That reminder shows your total savings, retirement age and check-in streak unless you turn the figures off in Settings; its subject line never carries a figure.
Your membership, if you pay for the planner. We keep a reference to your Stripe customer record, which membership you have, whether it is active, when it renews or ends and, for founding members, your member number.
Messages you send us. If you write to us from the planner’s help page, we receive the topic you picked, what you wrote, your email address, your display name if you gave one, and your account’s reference so we can find your plan if you ask us to. Your plan’s figures are not sent with it. Mail sent to hello@myretireage.com is received by our email provider and forwarded to our inbox. The legal basis is our legitimate interest in answering you.
Basic technical logs. Like nearly every website, our hosting provider keeps short-lived request logs (IP address, time, page) for security and reliability.
Analytics. We use two privacy-focused analytics tools, Datafast and PostHog, to see which pages and features are useful. Neither sets a cookie or records your screen. They see the page you are on, the site that sent you, your browser and device type, and your IP address, which they use to estimate your country, and they record a few actions, such as that a calculator was used or a plan was created - never what you typed into it. Page addresses are cut down before they leave your browser or our server, so the numbers a calculator or a draft plan keeps in the address bar never reach either tool.
On the public site the analytics do not identify you or follow you across other sites. Inside the planner, PostHog links your actions to your account’s reference (a random code, not your name or email address) so we can see how the planner is used over time; it never receives your plan’s figures. The legal basis is our legitimate interest in understanding which parts of the site are worth improving.
Cookies and your browser
The public site sets no cookies. The planner sets only the cookies it needs to work: one that keeps you signed in, one that remembers you chose to finish the first-run guide later, one that remembers whether the sidebar is open, and a short-lived one on the page that turns reminders off.
Some things are kept in your browser rather than sent to us. A free plan you build without paying lives only in the page’s address and, while you work through the first-run guide, in your browser’s storage, so you can pick up where you left off. Calculator numbers waiting for a sign-in link are kept the same way. All of it is cleared when you save the plan, sign out or delete your account. Datafast keeps a marker in your browser’s session storage so a single visit counts once; it is gone when you close the tab.
What we never do
We do not sell or share your data for advertising. We do not use tracking cookies or third-party ad networks. We never see the numbers you type into a calculator unless you send them to us yourself, by emailing your results or saving them as a plan.
Who processes data for us
Email is delivered by Resend, which sends our sign-in links, reminders and other emails, holds the mailing list, and receives mail sent to hello@myretireage.com. Our site is hosted on Vercel, which runs the planner in London, and the planner’s accounts and plans live in a database hosted by Neon in London. Payments for the planner are taken by Stripe, which holds your card details, billing address and receipts. Analytics are provided by Datafast and by PostHog’s EU cloud. They act as data processors, following our instructions under a data processing agreement. Stripe is also an independent controller for some of what it holds, such as fraud prevention and meeting its own legal duties, under its own privacy policy.
Where your data is
The planner’s database and the servers that run it are in London. PostHog keeps analytics data in Frankfurt, which UK law recognises as giving the same protection as the UK. Resend stores email data, including the mailing list, in the United States, Stripe processes payment data mainly there, and Vercel, a US company, serves the site’s pages from locations around the world. Those transfers are covered by the UK extension to the EU-US Data Privacy Framework and by the UK’s addendum to the standard contractual clauses.
Datafast is run by a company in Singapore, on infrastructure that is largely in the United States. It receives only what the analytics section above describes - pages, referring sites, browser and device type, and your IP address - never your name, email address or anything you type. Its terms do not yet include a UK transfer agreement, and we are asking Datafast for one.
How long we keep it
Every briefing email has an unsubscribe link. Unsubscribing stops all mail from the list; we keep your address marked as unsubscribed so it is never added back by mistake, and delete it entirely if you email us. The mailing list is separate from the planner, so deleting one does not remove you from the other.
Your planner account and plan are kept until you delete them. From the planner’s settings page you can delete your plan on its own, keeping your account, or delete your account, which removes your plan, its history, your preferences and your membership record straight away, and first cancels any subscription and deletes your customer record at Stripe. Stripe keeps its own records of past payments for as long as the law requires. A founding member’s number is never reissued, so we keep the number and the date it was issued, with nothing that links it to you. Analytics events from the planner keep the random account reference, which no longer leads to anyone once your account is gone.
When you ask for a sign-in link, we keep your email address with it until you use it, or for at most two days if you do not.
Messages you send us are kept in our inbox so we can follow up on them, and deleted if you ask us to.
Your rights
Under UK GDPR you can ask for a copy of the data we hold about you, ask us to correct or delete it, object to how we use it, and withdraw consent at any time. If you use the planner you can do the first and last yourself: its settings page downloads everything we hold about you as a JSON file and deletes your account. For anything else, email hello@myretireage.com or write to us from the help page and we’ll sort it, usually within a few days. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk).