Retirement Planner for Mac · Blue Plum Software Inc.
Last updated: 2 August 2026
In short: Retirement Planner stores everything on your Mac. There is no account, no sign-in, and no server that receives your financial information. We do not collect, transmit, or have access to your data, and the app contains no analytics or tracking of any kind.
Retirement Planner is developed and published by Blue Plum Software Inc. ("we", "us"). This policy explains how the macOS application handles your information. It applies to the app distributed through the Mac App Store.
Questions about this policy or your data: support@blueplum.ca.
To build a retirement projection, the app records the information you enter. This may include:
All of this is written to a file on your Mac and nowhere else. By default it is stored in the application's own container:
~/Library/Group Containers/group.TXJ32YAQV6.com.theblueplum.repl/hidata/
If you hold an Advisor subscription you may relocate that file to a folder of your choosing. If you place it in a folder synchronised by iCloud Drive, Dropbox, or a similar service, that service will hold a copy and its own privacy policy will apply to it. That choice is yours; the app itself performs no synchronisation.
We have no access to this file. It is never uploaded to us, and we operate no server that stores customer financial data.
The app is fully functional offline. It connects to the internet in only three situations, described below in full.
| Purpose | Destination | What is sent |
|---|---|---|
| Tax parameter updates | theblueplum.com |
Nothing about you. The app requests a public file of Canadian tax brackets and benefit thresholds. As with any web request, our server sees your IP address and the time of the request. No client data, identifier, or account is included, and we do not use these requests to build a profile of you. |
| Subscription and purchases | Apple | Handled entirely by Apple's App Store. Purchases, renewals, and restores are processed by Apple under Apple's privacy policy. We never see your payment details, and we receive no personal information from Apple about who has subscribed. |
| AI Withdrawal Strategy (optional) | Your chosen AI provider | Only if you enable the feature and supply your own API key. See section 4. |
Retirement Planner can ask a third-party AI service to suggest a withdrawal sequence. This feature is off unless you turn it on: it requires you to enter an API key for your own account with Anthropic, OpenAI, or Google. If no key is entered, the app never contacts these services.
When you run the feature, the app transmits the financial figures needed for the calculation, and nothing more:
The request does not include names, dates of birth, email addresses, phone numbers, notes, or any account or institution identifiers. These fields are not part of the data structure sent to the provider.
If you customise the AI prompt in the client profile, whatever you type there is sent as well. Please do not put personal details in that field.
The request goes directly from your Mac to the provider you selected — api.anthropic.com, api.openai.com, or generativelanguage.googleapis.com. It does not pass through our servers, and we neither see nor log it. Once the data reaches your provider, their privacy policy and data-retention terms govern it, under the account and API key you supplied. Usage is billed by them, not by us.
Your key is stored in the macOS Keychain on your Mac. It is sent only to the provider it belongs to, in order to authenticate your request. We never receive it.
PDF client reports are generated on your Mac and saved where you choose. They contain the client information in your plan, including names. Once you email, print, or share a report, its contents are outside the app's control and this policy no longer governs what happens to it.
If you email support, we receive whatever you send us — your email address, your message, and any attachments or screenshots. We use it only to answer you, and we keep it no longer than needed for that purpose. Please do not send us your data file or reports unless we specifically ask, and remove client names first if you do.
Retirement Planner is a financial planning tool intended for adults. It is not directed at children, and we do not knowingly collect information from anyone under the age of majority.
Because your information never leaves your Mac, you already have complete control of it:
There is no data held by us to request, correct, or delete. Under Canadian privacy law, including PIPEDA, we hold no personal information about you arising from your use of the app. Requests relating to support correspondence can be sent to support@blueplum.ca.
The app runs in Apple's App Sandbox with the protections macOS provides. Your data file sits within your user account and is covered by FileVault if you have it enabled — we recommend that you do. Your AI API key is held in the Keychain. Network requests use HTTPS.
Because your data is stored locally, it is your responsibility to back it up. Time Machine or any backup that includes your home folder will capture it.
If this policy changes, we will update the date at the top of this page. Material changes to how the app handles data will also be noted in the app's release notes.
Blue Plum Software Inc.
support@blueplum.ca
theblueplum.com/mac/rp2