Privacy, in plain language.

Your plan, on your device

Bila Boleh Retire calculates retirement scenarios in your browser. Your entered balances, spending, assets, debts, assumptions, saved plans and unfinished drafts are stored on this device using browser storage. Display preferences such as language, theme and text size are stored separately.

The calculator does not require a bank or broker login, and it does not synchronise your plan to a user account. JSON imports are read and validated in your browser; exports are generated there too.

The older drawdown calculator’s Share plan link contains unencrypted assumptions in its URL fragment. Anyone with that link can read those values, so share it carefully.

New BilaBoleh plan links contain an encrypted, compressed JSON snapshot and the key needed to open it, all inside the link fragment. The calculator does not upload the shared plan to a storage service; it clears the fragment from the address bar on opening. Anyone with the complete link can still read the plan, and messaging services may retain links you send. The recipient reviews the plan before choosing to save a new copy on their device. Sharing does not synchronise later edits.

Website requests & measurement

Opening the site sends normal page and asset requests to its hosting services. Those services may process technical information such as an IP address, browser information, requested URL and request time for delivery, security and operation.

The planner loads first-party scripts. You can calculate, save your plan and record monthly net worth without signing in to Google.

When you choose account setup, Google provides an account identifier. BilaBoleh stores it in Cloudflare D1 with a public passkey credential and sign-in records. Signing out ends the current session. Your balances and monthly history stay in this browser.

Your access, backup & deletion choices

You can review and correct your values in the calculator. In Data & settings, you can download a plan JSON backup, import a backup as a separate saved plan, or open Manage & delete selected data to choose records, a draft, a saved plan or all portfolio plans.

The deletion screen explains its scope before you confirm. Portfolio deletion keeps display preferences and separate legacy records. Clearing all site data in your browser has a broader effect and may also remove these preferences or older saves.

Back up anything you want to keep before deleting it. Avoid saving sensitive plans on shared devices. Anyone with access to the same browser profile may be able to view its saved plans.

When you contact us

Support is available through the contact link on our Support page. It opens an external messaging service only when you choose it. Information you send, such as your contact details, message or attachment, is handled through that service and used to respond to your enquiry.

Use dummy figures or redact screenshots when reporting a problem. Do not send banking passwords, identity documents or a full financial backup for routine troubleshooting.

How long information is kept

Saved plans remain in your browser until you remove them or the browser removes its stored data. Private browsing, storage limits, browser resets or clearing site data can cause data loss. Downloaded backups remain wherever you save them.

Hosting and messaging providers apply their own retention practices. The local plan controls do not delete information held by those external services.

Privacy questions & updates

For questions about this notice or information you have sent to support, contact Sho through the Support page. This notice may change when the service or its data handling changes. The date above identifies the latest published update.