Planward Labs
Effective Date: October 27, 2026
Last Updated: October 27, 2026
Developer: Planward Labs
Application: Next Transfer for Android (com.nexttransfer.rmplanner)
Applies to: version 0.3.1 and later, until this policy is updated
Privacy & Support: next.transfer.app@gmail.com
Next Transfer is an independent app. It is not made, endorsed, or supported by The Church of Jesus Christ of Latter-day Saints.
Next Transfer is a productivity and planning application designed to help returned missionaries organize tasks, calendar events, goals, weekly plans, contacts, reminders, locations, and related information.
This Privacy Policy explains what Next Transfer accesses, what it stores, where that information is kept, what leaves your device, and what you can do about it. It describes the version of Next Transfer identified above. When the application's behavior changes, this policy is updated to match what actually ships.
Next Transfer is a local-first application. Your planner database lives in private application storage on your own device.
An online account is optional. If you choose to sign in with Google and turn on Google Sync, a copy of your Next Transfer data is stored in a private cloud area that belongs to your account, so you can sync and restore it (Section 9). If you never sign in, nothing leaves your device for Sync.
You can delete your account and all of your cloud data at any time from inside the app (Section 13).
Next Transfer contains no advertising, no analytics, and no crash-reporting service. If you choose to read a Canvas link from a screenshot, Google ML Kit reads it on your phone and may send Google basic diagnostics (Section 10).
Planward Labs does not sell your information.
Companion (optional, Pro, not available yet) will let you share items you choose with one person. When it is available and you turn it on, those items pass through our server (Section 9.2).
Optional connections, all part of Next Transfer Pro and all read-only: your phone's calendar (Keep in sync), your Google Calendar, and your school's Canvas LMS. Events and tasks they bring in become normal Planner records. Your Canvas link, Canvas access token and Canvas grades stay on your phone (Sections 4.3 to 4.5).
You can choose a profile picture. If you use your own photo, it is shrunk, camera details such as location are removed, and it is included in your Google Sync copy so it shows on your other phones (Section 3).
Next Transfer can request optional access to contacts, your phone calendar, location, and notifications for specific features you choose to use. Each is requested only when the related feature is used.
Backup & Restore lets you create a copy of your Next Transfer data and save it to a location you choose. Portable backup files are not encrypted — see Section 7.
Your MPIN, your app-lock settings and your sign-in tokens never leave your device and are never included in backups or Sync (Section 12).
Notes are kept like your Journal. They are kept until you delete them, and they are included in your backups (Section 3).
The temple map is built into the app. Choosing which temples to show uses your location only on your device (Section 4.2).
Next Transfer asks Google Play whether a newer version is available so it can offer to update (Section 10).
Next Transfer Pro is an optional subscription bought through Google Play. Google Play handles the payment; Planward Labs never receives your card or payment details. To give you Pro, our server checks your purchase with Google Play and keeps a small record of your plan (Section 9.1).
Depending on which features you use, you may enter or create the following information inside Next Transfer:
an optional local profile or display name, including the name you give when the app asks "What should we call you?"
optional My Companion details: your role, phone number and email address
tasks, including due dates, times, priorities, status, and completion history
calendar events, including repeating-event and exception data, and the temple you choose for a Temple Visit event
goals, goal activities, achievement history, and progress entries
weekly plans and planning targets
outcome reports and activity history
contacts, including names, phone numbers, email addresses, social profile usernames, notes, groups, tags, and availability
saved places and map coordinates
journal entries you write, including entries you save from an Event's notes
notes (a title and text, with optional pins and an archive)
reminder and notification preferences
privacy and appearance preferences
application settings and first-run progress
Where it is stored: in a private SQLite database and private application storage belonging to Next Transfer on your device. This information stays on your device unless you turn on Google Sync, in which case a copy is stored in the cloud as described in Section 9.
Notes. Notes (formerly Quick Notes) are kept until you delete them, like your Journal. They are included in the backups you create (Section 7). On the Pro plan they are also included in Google Sync; on the Free plan they are not (Section 9). When you convert a note into a contact, event, or task, the record you save is handled like any other record of that type.
My Companion details. The role, phone number and email address you enter in My Companion are kept in Next Transfer's private storage on this phone only. They are not included in backups or Google Sync, and they are not shared with anyone. (Companion, which lets you share items you choose with one person, is not available yet. Section 9.2 explains how it works when it is.)
Profile picture. You can choose one of the built-in pictures, your Google account picture, your own photo, or none. Your own photo is chosen with Android's photo picker or taken with your camera app; Next Transfer does not ask for photo, storage or camera permission. The app shrinks the photo (at most 512 pixels, usually under 150 KB) and removes camera details such as GPS location, camera model and time before keeping it. It is kept in Next Transfer's private storage on this phone. If you use Google Sync, your photo and your picture choice are included in your cloud copy, on the Free and Pro plans, so your picture is the same on your phones (Section 9). They are not included in backup files (Section 7). If you choose your Google account picture, the app loads it from Google when it is shown.
On-device display settings. Next Transfer keeps a few small settings on your device, such as:
which Home sections you collapsed;
the order and number of Life Goals shown on Home;
which Guides tips you have completed;
your temple map choices (show temples, which region, include temples in search);
your Pro look choices for Life Goal cards;
whether the weekly backup reminder is on, and the date of the last backup made on this phone;
which in-app messages you have read;
your opening animation and Home banner choices;
the date Next Transfer was installed on this phone, read from Android to show the Welcome card during your first day (it is not stored or sent anywhere).
They contain no planner content and are never synced or backed up. Your profile picture is the one exception described above.
Next Transfer includes an optional feature for importing contacts from your device's contact list.
The feature is initiated by you, and you choose which contacts to import.
Next Transfer asks Android for contact access only when you open that feature.
Next Transfer reads only contact names, phone numbers, and email addresses.
Next Transfer does not modify, add to, or delete your device's contacts.
Imported contact information is stored locally inside Next Transfer.
You can use manual contact entry and all other planning features without granting contact access.
Next Transfer includes an optional Locate me action for Maps.
Location access is requested only after you explicitly use a location-dependent action such as Locate me. It is not required merely to display a map.
Android may allow you to grant approximate location only, even when precise location is requested.
Next Transfer does not request background location permission and does not track your location in the background.
Your current location is used to perform the action you asked for. It is not automatically converted into a saved location unless you separately choose to save it.
Coordinates you deliberately save or associate with a record are stored locally inside Next Transfer.
Temple map. Next Transfer includes a built-in list of temple locations. To show temples in your country or nearby, and to list your country's temples first when you choose a temple for an event, the app compares your device location with that list on your phone. Your location is not sent to Planward Labs or anyone else for this. If location access is not allowed, the app uses the region you chose instead.
Next Transfer includes an optional Phone calendar feature (Calendars & imports → Phone calendar) with two choices: Import once, and Keep in sync. From version 0.3.1, Keep in sync is part of Next Transfer Pro; Import once stays free.
The feature is initiated by you. Next Transfer asks Android for calendar access only when you open it.
Access is read-only. Next Transfer never adds, changes, or deletes anything in your phone's calendar.
You choose which calendars to use. Read-only calendars, such as holidays, are listed but not selected unless you pick them. To let you choose, Next Transfer shows the name of each calendar and the account it belongs to; those names are used on your phone only.
For the events it reads, Next Transfer reads the title, start and end time, all-day flag, description, location, repeat rules and the calendar's account type (so it can show where an event came from), and saves them as Next Transfer calendar events. From then on they are handled like any other event you create (Sections 3, 7 and 9).
Import once copies the events one time. Keep in sync also checks your chosen calendars when you open the app and in the background about once a day (overnight), adding new events and updating changed ones. An event deleted in your phone calendar is marked Cancelled in Next Transfer, never deleted. Events you edit in Next Transfer are not overwritten.
The calendar data is read on your phone. It is not sent to Planward Labs, except as part of your own backups and Google Sync copy if you use them.
You can turn Keep in sync off at any time, and Android lets you remove calendar access in your phone's settings. Events already copied stay in your Planner until you delete them. If your Pro plan ends, Keep in sync continues for up to 7 days, then stops; nothing already copied is deleted.
You can use the Planner and all other features without granting calendar access.
Next Transfer can optionally connect to your Google Calendar so your Google Calendar events show in your Planner.
The connection is started by you, and Google asks for your permission on its own screen. You can decline.
Access is read-only (Google's calendar.readonly permission). Next Transfer never creates, changes, or deletes anything in your Google Calendar.
Google Calendar is part of Next Transfer Pro. It checks your chosen calendars when you open the app or tap Refresh, at most every 15 minutes; it does not run in the background. The Google account you connect and the calendars you pick are remembered on this phone only and are not included in backups or Google Sync. The access Google gives the app is kept in memory only while it checks. If your Pro plan ends, Google Calendar stops checking; events already added stay in your Planner.
Next Transfer reads the event title, start and end time, all-day flag, description, location, and repeat rules for the calendars you choose, and shows them as events in your Planner.
The calendar data is read on your phone. Events it reads become normal Planner events, so they are included in your own backups and your Google Sync copy if you use them. They are not sent to Planward Labs or anyone else otherwise, and are not used for advertising, sold, or used to train AI models.
You can disconnect at any time inside Next Transfer. Disconnecting stops the checks and forgets the connected account; events already added stay in your Planner until you delete them. To remove Next Transfer's access completely, also remove it in your Google Account at myaccount.google.com/permissions.
Next Transfer's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Next Transfer can optionally bring your school's Canvas LMS classes and assignments into your Planner. It only reads from Canvas; it never changes anything in Canvas.
Calendar feed link. You can paste your Canvas calendar feed link (or read it from a screenshot, below). The link works like a password: it is kept only in your phone's secure storage, is shown only as your school's address, is never included in backups or Google Sync, and is never sent to Planward Labs. Next Transfer downloads the feed directly from the address in the link (your school's Canvas server), when you open the app, when you tap Refresh, and about once a day in the background (overnight, when the phone has a connection). For each class event and assignment in the feed, Next Transfer copies the title, the date and time, the description, the location and the item's Canvas web address. Classes become Planner events and assignments become tasks, which are then handled like any other event or task you create, including your backups and Google Sync copy (Sections 3, 7 and 9).
Access token (optional). If you also add a Canvas access token, Next Transfer uses it to read more information from your school's Canvas. The token is sent only to the Canvas address you enter (your school's). It is never sent to Planward Labs, never put in a backup (on the phone or in the cloud), never written to logs, and never shown in full. It is kept in your phone's secure storage. The token is used only while the app is open, at most about once an hour, and only for three read-only requests: your active courses, the assignments of those courses with your own submission, and recent announcements.
What the token reads and keeps on this phone: your course names with your current score and grade; your assignment names with their due dates, your submission status (submitted, late, missing) and your score; and the titles and dates of recent course announcements. Announcement messages and other people's names are not kept. The submission status (Submitted, Late, Missing) is shown next to the matching task; it does not change the task itself.
Where: in a private file of the app on this phone. That file is not encrypted by the app (it is protected by your phone's app sandbox and lock). It is never synced, never put in a backup and never sent to Planward Labs.
How long: it stays until you remove it. Signing out of your Next Transfer account or deleting your cloud account does not remove it (data on your phone is kept by design). Ending Pro does not remove it either.
How to remove it: tap "Remove token" (or "Remove Canvas token and data", which is available even without Pro), or uninstall the app. This deletes the token and everything it read from this phone. Please also delete the token in Canvas (Account → Settings). If the token expires or is deleted in Canvas, Next Transfer stops using it and asks for a new one.
Reading the link from a screenshot (optional, from version 0.3.1). If the link cannot be copied, you can choose a screenshot of it instead. Next Transfer reads the text in that picture on your phone using Google ML Kit (Section 10), finds the Canvas link, and shows it to you to check before it is saved. The picture and the text read from it never leave your phone and are not saved or backed up; the temporary copy is deleted right after reading. The link you confirm is kept like a pasted link.
Removing the feed link stops syncing; events and tasks already added stay in your Planner until you delete them. If your Pro plan ends, the access token is no longer used, and the feed keeps syncing for up to 7 days, then stops; nothing already added is deleted.
If you used BetterCalendar, you can import its backup file (Import from BetterCalendar; free).
You choose the file with Android's file picker. Next Transfer reads only that file, on your phone, and shows you what it found before anything is added.
It reads events (title, date and time, all-day flag, location, notes, colour, repeat rule, reminder time, event type and attendees), tasks (title, due date, priority, completed flag, notes and tags), contacts (name, phone number, email, notes and favourite) and your custom event type names and time zone. Any Canvas address or token in the file is ignored.
The file itself is not saved or sent anywhere. What you import becomes normal Next Transfer records, handled like any other (Sections 3, 7 and 9). The file stays where you saved it; delete it yourself if you no longer need it.
The current Android version of Next Transfer declares the following permissions, each tied to a specific feature:
Internet: load Google Maps map content, sign in with Google, run Google Sync when you turn it on, check Google Play for app updates, verify a Pro purchase, and, only if you use them, read your Google Calendar, download your Canvas feed and Canvas information from your school's Canvas server, and show your Google account picture.
Contacts: import device contacts when you choose to use the import feature.
Calendar (read only): import events from your phone's calendar, and, if you turn on Keep in sync, check your chosen calendars when you open the app and about once a day in the background.
Approximate and precise location: foreground location for user-initiated actions such as Locate me, and to choose which temples to show on the map. No background location.
Notifications: display local reminders and notifications on Android versions that require permission.
Biometric/device authentication: support the optional Biometrics app lock, and confirm it is you when resetting a forgotten MPIN, through your device's own authentication.
Network state: respect the "Wi-Fi only" Sync setting by checking whether you are on Wi-Fi or mobile data.
Boot completion and background work: restore eligible local reminder schedules after your device restarts or the clock or time zone changes, and run the optional overnight jobs you turned on: Google Sync, phone calendar Keep in sync, and the Canvas feed refresh.
Google Play billing: buy, change or restore a Next Transfer Pro subscription through Google Play.
Next Transfer does not request broad storage access. Saving a backup on supported Android versions happens without any storage permission (see Section 7).
Choosing a photo or screenshot uses Android's system photo picker, and taking a profile photo uses your camera app. Next Transfer does not request photo, media, storage or camera permission.
To open another app you choose (for example a messaging app or Gospel Library), Next Transfer asks Android only whether that specific app is installed. When you select text, Android may also list apps that can work with selected text (for example a translator). Next Transfer does not read the list of apps on your device.
Permission-dependent features are designed to fail softly: declining an optional permission disables the related feature and leaves the rest of Next Transfer usable.
Next Transfer schedules local reminders for supported features such as events, tasks, goals, reviews, and follow-up activities.
Next Transfer can also remind you to plan your monthly temple visit, and, if you turn it on in Local Backup & Restore, remind you weekly to make a backup when none was made on this phone in the past week. The backup reminder only reminds you; it never makes, exports or uploads a backup by itself.
Reminders are scheduled and delivered by the application and Android system services on your device. The current version does not use a remote push-notification server.
Next Transfer may use Android background scheduling and boot-completion capability to keep eligible reminder schedules working after a restart.
Depending on your Next Transfer privacy settings and your Android lock-screen settings, a notification may show information derived from your planner records. Next Transfer provides a privacy setting to hide notification content.
You can control notification permission through Android settings and adjust reminder preferences inside Next Transfer.
In-app messages shown inside Next Transfer (for example, release notes for a new version) are ordinary application screens. They do not require notification permission and do not produce system notifications.
When a newer version is available on Google Play, Next Transfer shows an in-app prompt to update now or install later. This is an ordinary application screen, not a system notification.
Backup & Restore is a user-initiated feature. It is designed so that you keep control of your own data.
What a backup contains. A backup contains the persistent Next Transfer data for your profile, including:
your planner records (tasks, calendar events, goals, weekly plans);
outcome reports and activity history;
contacts and contact details;
saved places;
your journal entries and notes;
your preferences (including reminder, notification, privacy, and appearance settings).
Device-specific items that cannot meaningfully be restored on another device are excluded: Android permission grants, notification scheduling artifacts, first-run progress, your app-lock settings, your on-device display settings and My Companion details (Section 3), your Pro purchase information (Section 9.1), your Canvas feed link, Canvas access token and the Canvas information it read, your Google Calendar connection settings, and your profile picture (which is carried by Google Sync instead, Section 9). Events and tasks that came from your phone calendar, Google Calendar, Canvas or a BetterCalendar import are normal records and are included.
Where a backup is saved. On supported Android versions, Next Transfer writes the backup directly to your device's user-visible Downloads folder using Android's MediaStore interface. This requires no storage permission and does not give Next Transfer access to other files on your device. If your Android version cannot write there without a broad storage permission, Next Transfer instead asks you to choose a destination using Android's system file picker.
What this means about storage providers. The destination you choose may be a cloud-backed provider installed on your device, such as Google Drive. If you choose such a provider, that provider stores and processes the file under its own terms and privacy policy.
Next Transfer does not automatically upload backup files to our servers. When you choose a location for a backup, the selected storage provider may store or process that file according to its own terms and privacy policy.
Encryption. Portable Next Transfer backup files (.ntbackup) are not encrypted. Anyone who gains access to a backup file may be able to read the information it contains. Backup files include an integrity hash so that a damaged or altered file is rejected, but an integrity hash is not encryption. Store backup files somewhere you consider secure, and treat them as you would treat the application itself. The app shows this warning before your first backup on a phone.
Separate recovery checkpoint. Before applying a restore, Next Transfer creates a temporary recovery checkpoint of your current local data. That checkpoint is stored in Next Transfer's private application storage, is protected with AES-256-GCM using a key held in Android's secure storage on that device, and is never written to a user document, exported, or uploaded. It exists only so a restore can be undone locally.
Restoring. Restore reads a .ntbackup file that you select, validates it, and then applies it in one of two ways: Merge (combine the backup with your current local data) or Replace (replace the current local data with the backup). A restore always takes place after a verified recovery checkpoint has been created. A restore never turns on an app lock that this device did not set up.
Your control. You may delete backup files at any time using your device's file manager or your chosen storage provider. You may also remove Next Transfer's local recovery data from inside the application.
Next Transfer disables Android's automatic application backup. Your Next Transfer data is therefore not copied into Android's automatic cloud backup or device-to-device transfer. The only way a copy of your data leaves the application's private storage is when you personally create a backup (Section 7), turn on Google Sync (Section 9), or export readable data.
Without an account. If you do not sign in, Next Transfer does not transmit your planner records, contacts, journal, notes, or saved locations to Planward Labs. The application still uses the network for Google Maps and the Google Play update check (Section 10), and when you personally open another app or website, or send a file or message to another application.
Sign in with Google (optional). You can sign in with your Google account to use Google Sync and Next Transfer Pro. Sign-in uses Google's own account chooser. Next Transfer receives your Google account email address and the basic profile information Google shares at sign-in, and uses it only to identify your account, show which account is signed in, and check whether your email is on the beta tester list (Section 9.1). Next Transfer never receives your Google password.
Google Sync (optional). When you turn on Sync, Next Transfer uploads a copy of your Next Transfer data to a private storage area that only your signed-in account can read. It has the same contents as a backup (Section 7), including your planner records, goals, contacts, saved places and preferences. Your journal entries and notes are included only on the Pro plan; on the Free plan they stay on your device and in your own backups. Together with each copy, Next Transfer stores technical details needed to sync safely: version number, size, integrity hashes, the data format version, and a random identifier for each of your devices.
Profile picture. Your profile picture choice, and your own photo if you chose one (shrunk, with camera details removed, Section 3), are included in each cloud copy on the Free and Pro plans. If a copy would be too large, the photo is left out.
When it syncs. Depending on your Automatic sync setting: a few minutes after you make changes, when you leave the app, overnight while the app is closed, or on a schedule you choose. You can choose "Manual only" and "Wi-Fi only" in the Sync screen. If nothing has changed since your last cloud version, no new copy is uploaded.
Versions kept. Your 3 most recent cloud versions are kept and older versions are removed automatically. If you use more than one phone, a version another of your phones is still using is kept until that phone syncs again.
Never uploaded. Your MPIN, app-lock settings, sign-in tokens, Android permission grants, notification scheduling data, on-device display settings, My Companion details, your Canvas feed link, Canvas access token and the Canvas grades and information it read, your Google Calendar connection settings and access, any screenshot you read, and, on the Free plan, your journal entries and notes are never included.
Encryption. Data is transmitted over encrypted connections (HTTPS/TLS) and stored by our cloud provider with provider-side encryption at rest. Google Sync is not end-to-end encrypted.
Access. Server rules restrict each account's rows and files to that signed-in account. Planward Labs does not use your synced data for advertising or analytics and does not sell it.
Signing out stops syncing on that device. It does not delete your local data or your cloud copies.
In-app messages. When you are signed in, the app asks our server (Supabase) for short in-app messages from the Next Transfer team, either for all users or for your account only. This uses your sign-in session; no other data is sent. The messages are kept on your phone so you can read them offline, deleted when you sign out, and whether you have read them is stored only on your phone.
Next Transfer Pro is an optional monthly or yearly subscription. Everything you need to plan stays free.
Buying. You buy, change or cancel Pro through Google Play. Google Play processes the payment under its own terms and the Google Privacy Policy. Planward Labs never receives your card number, bank details or billing address.
Signing in is required. Pro belongs to your signed-in Next Transfer account. When you buy, the app gives Google Play a one-way code made from your account identifier (a SHA-256 hash), so the purchase is tied to your account and cannot be shared with another account. This code does not reveal your email.
Checking the purchase. After you buy or restore, the app sends the purchase details Google Play gave it (the plan and a purchase token) to our server. Our server asks Google Play directly whether the purchase is real, for this app, and tied to your account, and confirms it with Google Play.
What we keep. For each account with Pro, our server keeps a small record: your account identifier, where your Pro comes from (a Play subscription or a beta gift), the plan, its status (for example active, in grace period, on hold, cancelled or expired), the date it ends, when it was last checked, and a one-way hash of the purchase token. The purchase token itself is not stored. You can read only your own record.
On your phone. The app keeps a copy of the last answer about your Pro in private storage on your phone, per account, so Pro keeps working offline until shortly after your plan's paid-until date. It is not included in backups or Sync.
Signed out. If you sign out, Pro is paused on that phone (not lost): your extra goals stay visible, but Pro features stop until you sign back in with the account that has Pro.
Beta testers. Planward Labs keeps a list of the email addresses of people who joined the closed beta (the address you joined the beta with). When you sign in, our server compares your account email with that list and, if it matches, gives your account 3 months of free Pro, counted from the first time you sign in with that account. The list is used for nothing else.
Refunds and cancellations. Refunds and cancellations are handled by Google Play. Your Pro record is updated the next time the app checks your purchase.
Companion is not available in the app yet. This section applies when Companion is available and you turn it on.
What is shared. If you connect with a Companion, only the items you choose to share are sent to your Companion's Next Transfer app through our server. Nothing else in your planner is shared.
On our server. We store shared items on our server (hosted by Supabase) only to deliver them. They are protected in transit and encrypted at rest by our hosting provider, but they are not end-to-end encrypted.
Time zone. We also save your time zone so shared dates show correctly.
Read-only setting. If you turn on "read-only for my companion", your Companion can see that this setting is on.
Disconnecting. You can disconnect at any time in Companion settings. Your Companion keeps copies of what they already received, even after you disconnect. After either of you disconnects, we delete the shared items from our server within 30 days.
Pro. Companion requires Next Transfer Pro for both people.
Google Maps. Next Transfer uses the Google Maps SDK for Android and Google Maps Platform to display map content. When map content is displayed, your device communicates with Google to obtain and render it.
Google states that the Maps SDK for Android may collect or process technical information such as request and device metadata, IP address, SDK-specific identifiers, and crash or stability information.
Depending on how map functionality is used, this may also include map interaction data such as panning or zooming.
Planward Labs does not control Google's independent collection, processing, retention, or use of that information. See the Google Privacy Policy and the Google Maps/Google Earth Additional Terms.
Google Play (app updates). When you open Next Transfer, and about every 15 minutes while it stays open, the app asks Google Play on your device whether a newer version is available, so it can offer to update. If you choose to update, Google Play downloads and installs it. This check is handled by Google Play under the Google Privacy Policy. Next Transfer receives only whether an update is available and its progress; it sends none of your Next Transfer data.
Google Play (billing). Pro subscriptions are bought through Google Play Billing on your device. Our server uses the Google Play Developer API to check and confirm your purchase (Section 9.1). Google processes your payment and purchase history under the Google Privacy Policy.
Supabase (cloud provider). If you sign in, your account, your synced copies, your Pro record and, if you use Companion, the items you share (Section 9.2) are stored and processed by Supabase, which provides the authentication, database, file-storage and server-function services behind Sync and Pro, on behalf of Planward Labs. See the Supabase Privacy Policy.
Google Calendar API. Only if you connect Google Calendar (Section 4.4), the app reads your chosen calendars directly from Google (www.googleapis.com) with read-only access, under the Google Privacy Policy. Planward Labs does not receive this access.
Canvas LMS (your school). Only if you use Canvas (Section 4.5), the app contacts your school's Canvas server at the address you entered. Canvas is a product of Instructure, Inc.; your school operates its Canvas site under its own terms and privacy policy, and your school can see that your account's feed link or token was used, as with any app you connect to Canvas. Planward Labs does not receive your Canvas link, token or information.
Your Google account picture. If you choose it as your profile picture, the app loads the image from Google's servers when it is shown.
Google ML Kit (text recognition). Only when you choose to read a Canvas link from a screenshot (Section 4.5), Next Transfer uses Google ML Kit, which reads the text on your phone. Your picture and its text are not sent to Google or to Planward Labs. Google states that ML Kit may send Google basic diagnostics and usage information: device information (manufacturer, model, Android version), app information (package name and version), a per-installation identifier that is not meant to identify you or your device, and performance and configuration details (such as speed, image size and error codes). Google uses this for diagnostics and usage analytics, encrypts it in transit and does not transfer it to third parties. See Google's ML Kit data disclosure and the Google Privacy Policy.
Google Sign-In. If you sign in, Google authenticates you and shares your account email and basic profile with Next Transfer under the Google Privacy Policy.
Android platform services. Android provides the operating-system services Next Transfer relies on for permissions, notification delivery, background scheduling, secure storage, file selection, and device authentication.
External applications you open. Where supported, you can choose to call a contact, open an SMS application, compose an email, open a messaging application such as WhatsApp, or open a navigation application. These actions occur only when you initiate them, and the information needed for the action is passed to the application you chose. Next Transfer does not read your conversations and does not record what happens after you leave the application. Those applications' privacy practices are governed by their own policies.
Social profiles you open. When you tap a social profile saved on a contact (for example Facebook, Messenger, WhatsApp, Telegram, Viber, Instagram, X, LinkedIn, LINE, Discord, or GitHub), Next Transfer opens that person's profile or chat in the platform's app, or in your web browser if the app is not installed. To do this, the username, link, or phone number you saved is passed to that service. Next Transfer does not log in to these services and does not read anything from them. Each service's own privacy policy applies.
Other apps in Home Resources. Home Resources can open other apps you choose, such as Gospel Library, Member Tools, or FamilySearch Tree, or their Google Play page if they are not installed. Next Transfer shares no information with those apps; it only asks Android to open them. Those apps are provided by their own publishers under their own policies.
Temple information and temple pages.
Temple names, status and locations shown on the map come from Wikipedia contributors (CC BY-SA 4.0) and OpenStreetMap contributors (ODbL). This information is built into the app, and using it sends no data about you.
When you tap Directions, the temple's location is passed to the navigation app you use.
When you tap Schedule, the temple's page on the Church's website opens in your browser. That website is operated by The Church of Jesus Christ of Latter-day Saints under its own privacy policy. Next Transfer shares no information with it.
Storage providers you choose. If you save a backup to a cloud-backed destination, that provider's terms and privacy policy apply to the file.
Next Transfer contains no advertising and no advertising SDK, and does not use an advertising identifier for targeted advertising.
Next Transfer contains no analytics SDK and no crash-reporting SDK. Planward Labs does not operate a behavioral analytics or remote crash-reporting service for this application. The one exception is outside our control: when you read a Canvas link from a screenshot, Google ML Kit may send Google the basic diagnostics described in Section 10. Planward Labs does not receive that information.
Guides progress (which tips you have completed) is worked out on your device from your own data and is never sent anywhere.
Planward Labs does not sell personal information, and does not operate a data-broker business based on information stored in Next Transfer.
Report a problem. The app keeps a short activity log on your device (about the last 10 minutes, plus the last minutes before the app last closed or crashed): the screens you opened (with record identifiers removed), technical event codes, slow-screen times, and error types with the place in our code where they happened. Error messages, your notes, journal, contacts, names, locations and passwords are never recorded. When you choose Settings > Privacy and Data > Report a problem and tap Create report, the app shows you the whole report, including your phone's maker, model, Android version, memory and free space, the app version, whether you use Free or Pro, anything you type in "What happened", and, only if you turn on "Include background work details", the timing of reminders and background sync jobs. Nothing is sent automatically: the report leaves your device only if you tap Share report and choose an app (for example email) to send it with. We use reports you send only to find and fix problems. Third-party platform components described in Section 10 may still collect technical diagnostics under their own policies.
Next Transfer offers two optional app locks, which you can use separately or together:
Biometrics uses your device's fingerprint or face authentication. Authentication is performed by the operating system; Next Transfer does not receive or store your fingerprint, face template, or device PIN.
MPIN is a 6-digit PIN for Next Transfer. Only a salted, one-way hash of your MPIN is kept, in Android secure storage on your device. Your MPIN itself is never stored, and the hash is never included in backups or Google Sync. Repeated wrong attempts are temporarily locked out. If you forget your MPIN, you can reset it after confirming it is you with your device's own screen lock.
Because app-lock settings stay on the device, they are not restored onto a new phone or after the app's storage is cleared; Next Transfer reminds you to set them up again.
Because Next Transfer stores information locally, your information generally remains on your device according to the lifecycle of each record. Depending on the type, records may be edited, completed, archived, cancelled, merged, or deleted using the controls available in each feature. Reminder schedules associated with a record are updated or removed when the record or your reminder settings change.
Notes are kept until you delete them.
Canvas. Your Canvas feed link, access token and the Canvas information the token read stay on this phone until you remove them ("Remove Canvas token and data", or remove the feed link) or uninstall the app. Signing out, deleting your cloud account, or the end of Pro does not remove them. Events and tasks Canvas added stay in your Planner until you delete them.
Google Calendar and phone calendar. Disconnecting or turning sync off stops reading; events already added stay until you delete them.
Profile picture. Removing your photo removes it from this phone, and the next Google Sync copy no longer contains it. Older cloud copies that still contain it are replaced as new copies are made (your 3 most recent are kept), and all of them are deleted at once when you delete your account.
The Temple Visit Life Goal is a permanent goal and cannot be deleted inside the app. You can rename it. Its records stay on your device and are removed with the rest of your data in the ways below.
You can remove your data by:
deleting individual records inside the application,
clearing application data from Android settings, or
uninstalling Next Transfer, which normally removes its private database and application data from the device.
Files you created and saved yourself are not removed by uninstalling the application, for example a .ntbackup file in Downloads or in a cloud provider. You control those files and should delete them through your device's file manager or your storage provider if you no longer want them.
Companion. Shared items are deleted from our server within 30 days after either person disconnects. Your Companion keeps what they already received (Section 9.2).
Cloud copies and your account. If you used Google Sync, your 3 most recent cloud versions are kept and older versions are removed automatically (Section 9).
In the app: you can delete your Next Transfer account and all of your cloud copies at any time (Settings → Account → Delete account & cloud data). This happens immediately and cannot be undone. Your Pro record is deleted with your account.
By email, if you no longer have the app: write to next.transfer.app@gmail.com from the Google account you signed in with. Email requests are completed within 30 days and confirmed by email. Step-by-step instructions are on our account deletion page.
Your devices: deleting your account does not delete the data on your devices; remove that as described above.
Subscriptions: deleting your account or uninstalling the app does not cancel a Pro subscription. Cancel it in Google Play (Payments & subscriptions → Subscriptions). Google keeps its own record of your purchases under the Google Privacy Policy.
Beta tester list: the beta offer ends 3 months after public launch. Next Transfer launched publicly on October 23, 2026, so the offer ends on January 23, 2027, and the beta email list is deleted then. If your 3 free Pro months are still running on that date, your entry is kept only until they end, then deleted. You can ask us to remove your email at any time.
Next Transfer stores information in private application storage protected by Android's application sandbox and, on supported devices, by device encryption. The optional Biometrics and MPIN app locks add a further barrier against casual access to the application. If you use Google Sync, your data is transmitted over encrypted connections and protected in the cloud by provider-side encryption at rest and by access rules that limit each account to its own data. The temporary recovery checkpoint is encrypted as described in Section 7. Purchases are checked by our server directly with Google Play, and purchase tokens are kept only as one-way hashes.
This policy does not claim that:
the Next Transfer database is fully encrypted or end-to-end encrypted;
Google Sync is end-to-end encrypted;
Companion sharing is end-to-end encrypted;
backups are encrypted.
Portable backup files are expressly not encrypted. No method of electronic storage or device security can guarantee absolute security.
Next Transfer is designed as a productivity and planning application for returned missionaries and is not directed toward children. It contains no advertising and no public social-network features. The current version does not knowingly collect personal information from children. If you believe a child has provided information to Next Transfer, contact us at the address in Section 18.
Use Next Transfer entirely without granting contacts, calendar, or location access.
Decline or revoke any Android permission at any time in Android settings; the related feature stops working and the rest of the application continues to work.
Hide notification content using the privacy setting inside Next Transfer.
Use Next Transfer without an account, or sign in and turn Google Sync on or off at any time; choose "Manual only" or "Wi-Fi only" in the Sync screen.
Sign out at any time, and delete your account and cloud copies from inside the app or by email (Section 13).
Delete notes at any time.
Turn the temple map on or off, choose which temples it shows, and choose whether search includes temples.
Choose "Install later" when an update is offered, or manage updates in Google Play.
Use Next Transfer on the Free plan, or subscribe to Pro and manage or cancel your subscription in Google Play at any time.
Turn the weekly backup reminder and the Pro look on or off.
Export or delete your data yourself, including removing backups you created.
Send a backup file to another device or storage location of your choosing.
Connect or disconnect Google Calendar, Canvas and phone calendar Keep in sync at any time, and remove your Canvas token and data even without Pro.
Use a built-in profile picture, your Google picture, your own photo, or none, and change or remove it at any time.
We may update this Privacy Policy when Next Transfer's features, technologies, services, or legal requirements change. When material changes are made, the Effective Date and Last Updated date at the top of this page are revised. Continued use of Next Transfer after an update means the updated policy applies to you.
If you have questions, concerns, or requests relating to this Privacy Policy or Next Transfer's privacy practices, contact:
Planward Labs
Email: next.transfer.app@gmail.com
Back to Planward Labs · Terms of Use · Support