Privacy, terms and model limits
Cancellation and privacy information updated 3 October 2026. Purchased terms retain the version accepted at checkout. Public sales remain closed until the supplier details, payment setup and launch review are complete.
Who provides the service
Operator identity, business contact address and support email have not yet been supplied. This is an owner preview, not a public service.
Who can buy this release
Silver and Gold planning is currently for people resident in England, Wales or Northern Ireland throughout the plan, using UK pension and savings assumptions and spending in GBP. Scotland, overseas residence and moves between tax regions require a separate model. Confirm your tax residence and this scope before checkout; this is your declaration, not an independent residence check.
The public-pension country list labels the source of income. It is not a list of supported customer markets. Enter the gross GBP-equivalent from your own forecast and check the start age and annual increase. Foreign tax, treaty relief, entitlement rules and changes in exchange rates are not calculated. Before-tax exploration is available with clear limits; it is not a country-specific retirement forecast.
What this planner does
FutureRetire Planner illustrates retirement cashflows from numbers and assumptions you choose. It does not recommend a particular pension, fund or investment, arrange transactions, or provide personalised investment, pension, tax or legal advice.
Results are estimates, not guarantees. Investments can fall. Returns, fees, inflation and rules can change. Minimum targets assume steady returns, no inheritance target and no reserve for poor markets. Simulations depend on their assumptions; they are not backtested personal probabilities.
Net income covers one person using England, Wales and Northern Ireland pension-income tax assumptions. Scottish tax, overseas residence, tax on investment gains/dividends/cash interest, allowance charges and household finances need separate assessment. Enter your own public pension forecast. A country choice does not select tax residence.
Returns include reinvested dividends and interest; do not add them again. An unfunded bridge before pension withdrawals is a separate savings gap. Fixed spending assumes lower buying power as prices rise; it does not calculate mortgage repayment or guarantee falling bills.
Check inputs and seek appropriate qualified advice before acting. No FCA authorisation, endorsement or regulatory protection is claimed by this preview.
Your information and privacy
The calculator has no customer-name, postal-address, date-of-birth, National Insurance number or free-text report fields. Enter only ages, financial amounts and selected options.
Figures stay in your open browser tab and are sent to the calculation server when you calculate or request a report. The application does not write plans or generated reports to a database or server files. Save plan downloads an unencrypted JSON file of your inputs and pension-target settings to your device. Load plan reads it locally; it is sent to the server only if you then calculate or request a report. Refreshing or closing clears figures not kept in a saved file. Downloads remain on your device and can contain sensitive financial information.
The browser stores your theme, purchase reference and a temporary checkout recovery key. Essential HttpOnly cookies identify a verified browser for up to 30 days and bind an email-code request for 10 minutes. Scripts cannot read these cookies. Older recovery keys are cleared after verification. No planning figures are saved in browser storage. Do not share verification codes. No advertising, analytics or tracking scripts are included. Short-lived, salted hashes of connection addresses are held in server memory to limit excessive requests.
Stripe handles payments and may collect your name, contact information, billing address, payment identifiers and technical data. The operator may see these in Stripe. After payment, the app reads your checkout email from Stripe and sends verification codes, the purchase confirmation and accepted terms through the configured email provider. The app does not save that address; provider retention is described below. The app retains a hashed recovery key, payment references, version purchased, status, dates, accepted terms version and planning-scope declaration and a copy of the offer and terms accepted at checkout, and a confirmation-delivery timestamp. Browser-access records contain random IDs, hashed credentials and codes, verification/expiry times, the active browser and attempt/send counters. Cancellation records contain the accepted policy version, express early-start request, first successful paid-feature date, notice date, refund estimate, provider status and acknowledgement status; they contain no financial-plan inputs or report contents. An upgrade adds a payment record and a link to the original purchase, without adding customer identity or planning figures. No device fingerprint, browser history or device name is collected. It never stores card details or sends pension figures to Stripe.
Numbers are not automatically anonymous. Financial information linked to someone, payment references and IP addresses can be personal data. Hosting logs and support correspondence may contain personal data. The supplied launcher disables application access logs; hosting and proxy logs require separate settings. Zero data-loss risk is not promised.
Calculation processing supplies the requested service. Purchase records supply access and handle refunds, normally under contract; security uses legitimate interests, and accounting can require legal obligations. No optional marketing processing is included.
Verification challenges are removed after 10 minutes; browser credentials after at most 30 days or earlier pass expiry, refund or dispute. These limits do not extend the paid pass. Purchase records are removed after 180 days following expiry; unpaid pending records and webhook event identifiers after 30 days. Never-activated refunded/disputed records use creation date plus the access retention period. The original purchase is kept until the linked upgrade also reaches its retention limit. Unresolved cancellations, acknowledgements and upgrade refunds are kept until resolved, then follow the normal retention rule. Cleanup runs on database access. Actual hosting, support, Stripe retention, provider roles, international transfers and safeguards must be completed in the deployment-specific notice before launch. Providers and backups do not automatically erase data when this application does.
You may have rights to access, correction, erasure, restriction, objection and portability, subject to applicable conditions. Contact the supplier above. You can complain to the ICO. Removing a browser does not remove payment records elsewhere.
Complimentary owner and tester invitations
Invited users can activate the version shown on their pass without payment, a card or email. Owner passes have no scheduled expiry. Tester passes normally last 30 days from issue, or the period set by the owner. The owner can extend or revoke them. Invitations have no paid renewal, refund or discounted paid-upgrade entitlement. All model limits and personal-use restrictions apply. Mandatory rights remain unaffected.
The private invitation code is a reusable sign-in secret. Anyone with it can use the pass, so keep it private. Up to two browsers can be registered with one active at a time. Browser sessions last at most 30 days and never beyond pass expiry. Enter the code again when needed. Only private server controls can issue, extend, revoke or replace a code. An owner pass gives planner features, not server administration.
The app stores a random pass reference, a hash of the private code, owner/tester category, version, dates, status and hashed browser credentials with active-browser state. It does not collect invitation users' names, emails, addresses or plan figures. Records are normally removed 180 days after expiry or revocation; browser records expire sooner. The operator's and recipient's private invitation files and provider backups need separate deletion. These records are not guaranteed anonymous.
Buying and using access
The pricing screen states total GBP price, features and duration. No automatic renewal and no setup appointment. Access is for your own planning use and requires internet and a supported modern browser. Plans are not saved online. Save your plan file, download reports and your purchase confirmation, and keep your purchase reference for email-verified recovery.
Access begins when payment is confirmed. The free version remains after expiry. Downloaded reports remain yours. An active £29 Silver purchase can be upgraded to Gold for £20. Gold ends 365 days after the original Silver payment. Request checkout while Silver is active and complete it before checkout expires. One completed upgrade per Silver purchase; other new passes are separate purchases. Personal use only: do not share or resell access. Register up to two browsers, with your plan tools active in one at a time. A new browser needs a code sent to your original checkout email. Verification lasts up to 30 days. Different browsers and private windows count separately; clearing cookies requires verification again. Switch or replace browsers yourself in Plans & access. These controls discourage sharing but cannot prevent deliberate cooperation or stolen sessions. Do not attack the service or bypass access controls.
Use Free and the sample reports before buying. There is no additional satisfaction guarantee. Statutory cancellation and faulty-product rights remain. The full cancellation policy below explains any proportionate early-service deduction. Cancelling only an upgrade leaves any remaining Silver expiry unchanged.
Maintenance and security updates may be needed; existing purchased periods will not be shortened. If paid service is discontinued before expiry, contact the supplier for an unused-period refund and any applicable statutory remedy. Raise complaints using the contact above. Mandatory local consumer protections continue to apply.
Cancellation and refunds
Try Free and the sample reports before buying. Paid access has a 14-day cancellation period. Where you expressly request an early start, a proportionate charge may apply for service supplied. Statutory rights are unchanged; there is no additional satisfaction guarantee.
Policy version 2026-10-03-cancellation-v1 · Updated 3 October 2026
Try the planner before buying
Use Free and the sample reports to decide whether the planner suits you. Silver and Gold are fixed-term online-access purchases with no automatic renewal. We do not offer an additional unconditional satisfaction or money-back guarantee. This does not restrict your statutory rights.
Your right to cancel
You can cancel the online-access purchase without giving a reason during the 14-day period starting the day after the contract is made, when payment is confirmed. The deadline is the end of the fourteenth day, extended to the next working day where required for weekends or public holidays. The confirmation gives the relevant dates. Any longer period or other right required by law also applies.
Tell us by using Plans & access, sending a clear email to the support address shown on this page and your confirmation, or writing to the supplier address. You do not have to use our form or log in to cancel. A cancellation sent before the deadline is in time, even if support processes it later. Include your purchase reference where available; do not send card details or financial-plan figures.
When you request immediate access
If you expressly request that the service starts during the cancellation period and receive the required information, we may deduct only a proportionate amount for service supplied before you cancel. Logging in or downloading a report does not, by itself, remove the cancellation right for this ongoing-access purchase.
Where a deduction is permitted and applies to your purchase, the time-based calculation is: price actually paid multiplied by the duration of completed 24-hour periods since the first successful paid-feature response, divided by the full purchased access duration (using the same time units). Part-days and fractions of a penny are not charged. The charge is capped at the amount paid; no activation, report-download, administration or payment-processing fee is deducted. The online tool shows the calculation before confirmation.
No service deduction is made without the recorded early-start request, required information and confirmed delivery of the accepted terms before the recorded service start. If access has not started, there is no service deduction. A service failure, outage, misleading description or other statutory claim is assessed separately and may require a larger refund; the ordinary time-based calculation is not a limit on those rights.
Silver-to-Gold upgrades
The upgrade has its own cancellation period; it does not restart the original Silver period. If only the upgrade is cancelled, any remaining Silver access keeps its original expiry. A proportionate upgrade deduction, where permitted, uses only the upgrade price and the remaining upgrade period from its payment to the disclosed Gold expiry, not a new 365-day period.
Cancelling the original Silver purchase ends its linked Gold upgrade as well. For that dependent upgrade, this policy refunds the upgrade payment in full to avoid charging twice for the same supplied period. No cancelled or refunded pass can be restored using an old browser or recovery link.
How refunds are handled
We acknowledge online cancellations without delay in a form you can save. We make any refund due without undue delay and within the applicable legal deadline, normally 14 days after being informed of cancellation, using the original payment method unless you expressly agree otherwise. Your bank may take additional time to display it.
Paid access under the cancelled purchase ends when cancellation is recorded, even if the payment provider is still processing the refund. Free remains available. Cancellation does not erase an ordinary plan or report already downloaded to your device. A pending or failed payment-provider response is not confirmation that money has reached you.
Faults, non-delivery and other legal rights
If access is not supplied, does not work as described, or has a material defect, contact support. Depending on the circumstances, the applicable remedy may include correction, repeat performance, a price reduction or a refund. These rights do not disappear after 14 days or after use. Any rights that cannot lawfully be excluded remain unaffected.
After the ordinary cancellation period, a change of mind alone does not attract an additional voluntary refund guarantee. That does not prevent claims about faulty, misdescribed or unsupplied services or digital content, service termination before the agreed end date, or any other entitlement under law. Nothing in this policy is a blanket no-refunds term.
Optional cancellation form
To: the supplier name, geographical address and support email shown above. I/We hereby give notice that I/We cancel my/our contract for the supply of the FutureRetire Planner service. Ordered on: [date]. Purchase reference, if available: [reference]. Name of consumer(s): [name]. Address of consumer(s): [address]. Date: [date]. Signature of consumer(s), only if this form is sent on paper: [signature]. Delete whichever alternatives do not apply. You may instead send any clear cancellation statement.
Contact the supplier
Seller name, geographical address and support email will be displayed here before sales open. Purchasing is not open while these details are missing.
Help and manuals
Open the plain-English customer guide
Open the technical and operator manual
Independent guidance: MoneyHelper. Check your State Pension forecast.