diff --git a/hosts/common/programs/planify.nix b/hosts/common/programs/planify.nix
index 631e92d0..de77b5eb 100644
--- a/hosts/common/programs/planify.nix
+++ b/hosts/common/programs/planify.nix
@@ -1,6 +1,11 @@
 { ... }:
 {
   sane.programs.planify = {
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.whitelistDbus = [ "user" ];  # for dconf? else it can't persist any tasks/notes
+    sandbox.whitelistWayland = true;
+
     persist.byStore.private = [
       # TODO items as a sqlite database
       ".local/share/io.github.alainm23.planify"