Privacy Policy

Effective date: October 16, 2026
Operated by: Anadar Professional Services · support@retirerange.com

The short version

We built RetireRange to be private by default:

• Your simulations run in your browser. The numbers you type — balances, returns, dates — are calculated on your own device. They reach our servers only when you choose to save your work (a scenario, a named strategy, or your baseline) or run an optimizer job, which runs on our servers so it can keep working after you close the tab.
• We never connect to your bank. There’s nothing to link. You enter what you want; we pull nothing automatically.
• We don’t sell your data, and we don’t run ads. RetireRange is funded by subscriptions, not by your information.
• The one time your data leaves our servers is if you click "Generate AI Summary" — and even then we send an anonymized snapshot, never your name or identity. Everything else, including our anonymous usage analytics, stays on our own servers.

The rest of this page is the detail behind those promises.

1. Who this policy covers

This policy applies to RetireRange (the "Service") and the website that hosts it, operated by Anadar Professional Services ("we," "us"). It covers visitors and subscribers.

2. Information we collect

Account information. When you create an account, we store your username, email address, display name, optional first/last name, a securely hashed password, and your registration and last-login dates. We use this to log you in, keep your saved scenarios attached to your account, and send you service emails.

Your acceptance of these policies. When you create an account you must tick a box agreeing to the Terms of Use and this Privacy Policy — the form won’t submit without it. We store a record of that: when you accepted, which version of each document you accepted (identified by the effective date shown at the top of that document), and the IP address the acceptance came from. We keep it as evidence of consent, and it’s retained and deleted on the same schedule as the rest of your account information described in Section 8.

Subscription and payment information. Your membership level, status, and start/renewal dates are stored to manage your access. Payments are handled by our payment processor; we never see or store your full card number — only a tokenized reference and transaction records.

Saved scenarios. When you choose to save a plan, we store the inputs and results you saved — household details (names, birth dates, retirement dates, Social Security ages), account names/types and the balances you entered, your withdrawal strategy and assumptions, and the modeled results. This is self-reported planning data, not verified financial-account data — every figure is one you typed. You can delete any scenario at any time, and deleting it removes it from our servers (routine backup copies are purged on the schedule in Section 8).

Optimizer jobs. When you run an optimizer job, we send the plan being optimized and your search settings to our servers, where the job runs. We store that, the email address for your "job finished" notice, and the results, so you can see them on any device. They’re kept and deleted on the schedule in Section 8.

Automatically collected technical data. Like any website, our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps) for security and reliability. Retention is governed by the host’s policies.

Usage analytics. The planner records a small set of anonymous usage events so we can see which features get used: which tabs you open, when you run a simulation or a sensitivity analysis, and when you export (and in which format). Your browser keeps a random identifier in its local storage, not a cookie, so the events from one browser can be grouped together. These events are not linked to your account, aren’t stored with your IP address, and never include the financial inputs you enter. They stay on our own servers and are never shared with a third party.

Aggregate benchmarking (planned, opt-in). We may in the future add an optional aggregate-benchmarking feature. If and when we do, it will be opt-in: only if you affirmatively choose to participate would you contribute strictly bucketed, non-identifying data points (for example, a withdrawal-rate range or a rounded success rate) to aggregate research, benchmarking, and product improvement — never including balances or identifying details — with the ability to withdraw your consent at any time from within the app. This feature is not active today, and we do not currently collect this data.

3. How we use your information

We use your information only to operate the Service: to authenticate you, store and display your scenarios back to you, run the optimizer jobs you submit, process your subscription, send transactional emails (such as "your optimizer job is finished"), and keep the Service secure and working. We do not use your saved scenario data for anything other than showing it back to you.

4. When information leaves our systems

The AI Summary (optional). If you click "Generate AI Summary," we send an anonymized snapshot of that scenario — ages, strategy, allocation percentages, success rate, percentile balances — to the Anthropic Claude API to produce a plain-language write-up. The payload does not include your name, email, username, or credentials. Your use of this feature is also subject to Anthropic’s policies, and the AI-generated text is educational, not advice. The feature is rate-limited and results are cached.

Service providers. We rely on a few processors to run the Service (hosting, payment, email delivery, and the AI feature above). They receive only what they need for their function, and each is listed in Section 8.

We do not sell your personal information to anyone.

5. Things we deliberately don’t do

• No financial-institution connections. RetireRange has no link to Fidelity, Empower, the Social Security Administration, or any bank or provider.
• No sale of data. Ever, to anyone.
• No advertising or marketing profiling. No ad networks, no retargeting pixels.
• No cross-site tracking or fingerprinting. Our usage analytics are anonymous, set no cookies, and stay on our own servers.
• No location tracking. We don’t do GPS or IP-to-location mapping.
• No children’s data. RetireRange is for adults planning retirement; we don’t knowingly collect data from anyone under 13.

6. Cookies

RetireRange itself sets no cookies of its own — it uses your browser’s localStorage to cache your work locally. The website uses a small number of essential cookies for login/session security and functional cookies to remember interface preferences. Our usage analytics set no cookies. If a payment form is shown, the payment processor may set its own cookies, governed by its policy. We use no advertising or third-party marketing cookies.

7. Third-party processors

We share data only with the providers needed to run the Service:

Each provider maintains its own privacy policy governing the data it processes.

8. How long we keep data

While your subscription is active, we keep your account, saved scenarios, and optimizer results available so they’re there whenever you return. You can delete any individual scenario in the app at any time, and you can export your scenarios (PDF, spreadsheet, or slides) whenever you like — or download a single JSON backup of all your saved data, which you can re-import later to restore it.

After your access ends — when your subscription is cancelled or lapses and the paid period you’ve already covered runs out — a 30-day grace period begins. During those 30 days your planning data is retained but set aside: resubscribing restores everything exactly as you left it. If you don’t resubscribe, at the end of the grace period we permanently delete your saved scenarios, your optimizer jobs and results, and the personal account details tied to them. This deletion is irreversible. Before it happens we’ll email you a reminder — including a prompt to export anything you want to keep — unless you’ve opted out of those emails.

Records we keep longer. For legal, tax, and accounting reasons we retain a limited set of records beyond the grace period — chiefly your billing and transaction history (required for financial and tax record-keeping) and referral-program ledger entries (which are tied to other members’ earned credits and can’t be removed without affecting them). These are kept only as long as the law and sound record-keeping require, and are held separately from the planning data above.

Asking us to delete your account. You can delete individual scenarios in the app at any time. To have the whole account removed, email support@retirerange.com — we act on the request immediately by cancelling your subscription, so you won’t be charged again. Cancelling doesn’t cut your access short: you keep using RetireRange until the end of the period you’ve already paid for, and the account dashboard prompts you to export your data. Download anything you want to keep before your access ends, because the planner and its backup download need an active subscription. When your access ends, the same 30-day grace period described above begins, and at the end of it your planning data is permanently deleted and your account details are irreversibly anonymized. Resubscribing during the 30 days cancels the deletion and restores everything.

We do it this way — rather than erasing everything the moment you ask — so that a deletion request can’t cost you data you meant to keep.

Backups. When data is deleted from our live systems, any copies in our routine encrypted backups are purged on the next backup-rotation cycle, after which no copy remains.

Server logs are retained by our hosting provider per their schedule.

9. Your rights and choices

Depending on where you live (including under California’s CCPA/CPRA, the EU/UK GDPR, and Connecticut’s CTDPA), you may have the right to access, correct, delete, or export your personal information, and to opt out of certain processing. Because we don’t sell data or serve ads, there’s no data "sale" to opt out of. To exercise any right, email support@retirerange.com and we’ll respond as required by applicable law.

Exporting your data. You don’t have to ask us. The Download backup button on the planner’s Household tab produces a single JSON file containing everything we hold that’s yours: your saved scenarios, your named strategies, your baseline, your settings, and your optimizer job history (every optimization run you’ve saved, in full — nothing summarized or truncated). Re-importing that file restores your planning inputs; it deliberately does not re-create optimizer history, for the reasons described in Managing your subscription. If you’d rather have the data in another form, email us.

10. Security

Passwords are stored hashed, access to the Service is gated to active subscribers, and your simulations run in your browser, so your inputs aren’t sent anywhere while you work. They’re sent only when you save or when you submit an optimizer job. No system is perfectly secure, but we take reasonable measures to protect your information and will notify affected users of a breach as required by law.

11. Children

RetireRange is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we’ll delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we’ll post the new version here with an updated effective date and announce the change in the app, with a link to the updated policy. For material changes we’ll also make reasonable efforts to notify active subscribers by email. Continuing to use RetireRange after the effective date means you accept the updated policy. If you have questions about a change, email support@retirerange.com.

13. Contact

Questions about your privacy or this policy:
Anadar Professional Services · support@retirerange.com

See also our Terms of Use.