Privacy

Smart Withdrawal never asks who you are. There are no accounts, and we do not collect names, email addresses, account numbers or other personal information.

Your plan inputs

The numbers you enter (ages, balances, pensions, spending) are sent to our calculation service to compute your plan and are not stored with anything that identifies you. They are not written to our logs. Saved plans live only in your own browser; a share link carries the inputs inside the link itself.

Usage analytics

To improve the planner we count anonymous usage events, such as which step of the questions people finish or how long an optimization takes. These events carry only broad ranges (for example an age band of 65–69 or a savings range of $250k–500k), never exact amounts. Analytics uses no cookies, does not record your IP address, and respects your browser’s Do Not Track setting. The events are counted by PostHog, on servers in the United States.

Cloudflare, which serves the pages, also counts page views and measures how fast pages load (Cloudflare Web Analytics). It uses no cookies and does not see the numbers you enter.

Feedback you send

If you answer “Did this answer your question?” or report a problem with your numbers, we keep your answer and any note you write, the broad ranges described above, and the date. We do not keep your IP address with it. Your plan inputs are attached to a problem report only if you tick the box to attach them; they are the same anonymous numbers a share link carries. Feedback is stored in Canada (Montreal) and deleted after 12 months.

If you email us

If you write to hello@smartwithdrawal.ca, we see your email address and your message, and use them only to reply. They are never linked to the numbers you enter in the planner. Please don’t send account numbers or other sensitive details.

Where data is processed

Calculations run on servers in Canada (Montreal). The anonymous usage events above are processed by PostHog in the United States.

Like any website, our hosting providers (Cloudflare for the pages, Google Cloud for the calculations) see your IP address in order to deliver the site and limit abuse. Google Cloud’s request logs keep it for up to 30 days. We do not combine it with the numbers you enter.