No. RetireSafe is an analytical tool. It simulates thousands of futures from the inputs you provide and tells you what the engine computes. Decisions about your money should involve a licensed advisor and consideration of factors no calculator can model.

Stocks, bonds, cash and inflation are drawn together as one correlated set, so a bad year for one is a year the others feel. Lifespan comes from country-calibrated mortality tables (the Gompertz law), and the chance long-term care begins rises with age. What comes out is a spread of outcomes, not a forecast. The value is in the shape of that spread rather than any single number. If the world departs substantially from its historical behaviour, this engine will be miscalibrated alongside every other model built on historical data.

Nothing leaves your browser unless you ask it to. The whole simulation runs on your own machine rather than on a server. If you create an account and explicitly save a plan, its inputs and results are written to servers in the EU, where only your account can read them. There is one exception you did not ask for: if a simulation run fails, that run's inputs travel with the error report so we can reproduce the failure and fix it. The privacy policy sets out exactly what that covers.

Free is single-person, around 10 inputs, and the headline answer with the full range of outcomes charted. Sign in and you keep 3 saved plans you can re-open from any device. Premium adds couples, your home, long-term care, spending split into seven categories, what's most likely to break your plan, where your spending falls short, every change that could fix it, the highest spending you can sustain, what your tax bill is made of, what tax costs you each year, which account each year's withdrawals came out of, every chart's numbers as a year-by-year table you can download, whether moving money into your Roth pays off (US) and a PDF report. Full table on the pricing page.

The methodology is the product. Engine improvements ship as code; they don't generate a recurring billing event. We bill once because that's what the work costs, not because SaaS conventions say to charge monthly.

Premium-only. Both partners get their own lifespan, and the two are linked rather than drawn independently, because partners share a household, habits and health shocks. The strength of that link is empirically calibrated (a Frank copula over two Gompertz death-time draws, α≈3.4 by default). On the first death, each spending category is scaled separately (essentials fall by less than half, housing barely moves), pension survivor shares kick in, and the simulation continues for the surviving partner.

Twenty, listed in full on the country page. Each one carries its own researched numbers rather than a shared default: when the state pension starts and how it rises, what a surviving partner keeps, what healthcare and long-term care cost, what a retired household spends, and how your withdrawals are taxed. Every figure shows where it came from and the date it was read. Pick your country on the first step and your plan starts from its numbers.

Your expense plan drives what you spend. The withdrawal rule is only a ceiling on how much you may take out in a year, not a spending plan in itself. The default ceiling is a fixed amount that keeps pace with inflation, starting at 4% of the portfolio (the classic Bengen rule). A fixed share of the balance, and a ceiling that flexes with the balance and your remaining years, are also available. Premium users can change the rule on the Review step.

Premium-only. The chance long-term care begins rises with age. In any future where it does begin, that future's healthcare spending jumps to the care cost you specified and then grows at the healthcare inflation rate, typically 5%/yr before adjusting for inflation in the default region. You set both the likelihood and the cost on the long-term care step.

Premium-only. After the main 10,000-future run, the engine varies each of your inputs across its plausible range and measures how much each one swings your chance of the money lasting. The result is a ranking of what is most likely to move the needle for your specific plan, not a generic list. Formally these are Sobol total-effect indices.

Premium-only. The engine picks up to four changes you could realistically make (retire 2 years later, save €200/month more, cut discretionary spending by 10%, take a lower-risk allocation) and re-runs the whole simulation for each. You see side by side how each one shifts your chance of the money lasting, what's left at the end, and why the failing futures fail.

No. You can fill everything in and see your results without signing in, and that run stays saved in your own browser. Keeping plans that you can re-open on another device needs an account, which signs you in by emailing you a one-time link. There is no password to remember.

Tell us on the contact page. Include the engine version, which is in the footer of your results, and the inputs you used. Every saved scenario records the engine version that produced it, so we can reproduce exactly what you saw.