The app permission is delegated, meaning OnePlan itself does not get access to your Azure AD, nor do we collect any identifying information, including usernames and passwords. OnePlan acts on behalf of the user who has logged in with their Microsoft account.