Account and data

This page brings together everything about your account: your profile, exporting your data, deleting your account. It doesn't rewrite the privacy policy — it points to it, and describes the screen that applies it.

Your profile

From the settings (the account menu, top right of the screen, then "Preferences"), you can:

• under Settings › My account › Profile, change your name and e-mail address;
• under Settings › My account › Sign-in and security, set or change your password (changing your password closes your other sessions), link or unlink a Google account if the instance offers it, see your open sessions and sign out everywhere in one click.

Your data

Under Settings › My account › My data, the Your data section shows a table: every category of data PalmaPlan holds about you, and how long it's kept. This table isn't a separately maintained list — it's exactly the one from the privacy policy, which itself carries over the repository's technical document (legal/retentions.md): the three can't tell different durations.

Two actions are offered at this spot:

Export my data

An Export my data button downloads a file containing: your account, your preferences, your sessions, your tokens, the agents you've authorized, your access to other people's schedules, your own schedules in PalmaPlan's exchange format (re-importable as is), your comments, your notifications, your invitations, and your change-log entries in plain text. It contains neither password hashes nor token secrets, nor schedules owned by other people.

Delete my account

A Delete my account button starts a multi-step account closure, never accidental:

1. If you still own schedules, the screen lists them and asks you to transfer them to a member or delete them before continuing — an account that owns schedules can't be closed.
2. An export step reminds you that you can take your data with you before you go.
3. You must type your own e-mail address to confirm — not just a checkbox.
4. A final screen repeats that the action is immediate and irreversible before the last button.

What happens on deletion, in brief (the full detail is in the privacy policy, section 5):

• your e-mail, your name, your password hash, your sessions, your tokens, authorized agents, your notifications, your preferences and your access rights are erased immediately;
• what you wrote in other people's schedules stays — change-log entries, your comments, actions you were responsible for — but your name there is replaced with "Deleted user". That's what lets those schedules keep a consistent undo history and audit trail;
• deletion is immediate within the service, and effective in backups within fourteen days (the time it takes for the daily copies to cycle through).

The privacy policy

The full text — who has the right to see what, what PalmaPlan never does (no selling data, no advertising, no tracker), cookies, security — is at /privacy (or /confidentialite in French). This page is only an operational summary; in case of a difference, the policy is authoritative.