Legal

Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how personal data is collected, used and shared when you use the Planr apps for iOS and Android, the web app at app.getplanr.app, the website getplanr.app and public pages such as shared trips and shared albums (together, "Planr"). It should be read together with our Terms of Service.

1. Who Is Responsible for Your Data

The data controller is André Ferreira, an individual developer based in Portugal who operates Planr ("we", "us", "our"). For any privacy question or request, contact support@getplanr.app. Given the size of our operation, we are not required to appoint a Data Protection Officer; privacy requests are handled directly by the controller.

2. Information We Collect

Information you provide:

• Account data: name, email address, profile photo and sign-in method. If you sign in with Google or Apple, we receive your name, email address (or an Apple private relay address) and, for Google, your profile photo. We never receive your Google or Apple password.
• Guest accounts: if you use Planr as a guest, we create an anonymous identifier so your data can be stored until you link it to a sign-in method.
• Trip data: trips, destinations, dates, itineraries, activities, places, notes, flights, accommodation, packing lists, wishlists and budgets.
• Tickets and documents: files you attach to activities (such as boarding passes or booking confirmations) are uploaded to our cloud storage so they are available on your devices.
• Expenses: amounts, currencies, categories, descriptions and who paid or owes what. Shared expenses are visible to the members of the trip; personal expenses are visible only to you.
• Chat: messages, photos, files and voice notes you send in a trip chat. These are visible to the members of that trip.
• Album (Extra Luggage): photos and videos you upload to a trip album, with technical information such as file size, video duration, upload date and, where present, the date the photo was taken. They are visible to the trip members and to anyone with the album's public link, if one is created. Your name and profile photo may be shown next to the items you uploaded, including on the public album page.
• Invitations: the email address of people you invite to a trip, and the status of the invitation. Please only invite people who expect to hear from you.
• Support communications: anything you send us by email.

Information collected when you use Planr:

• Live location (opt-in): if you turn on live location sharing, your device's position is sent to our servers while sharing is active and shown to trip members and, if you create a share link, to anyone with that link. We store only your most recent position (not a history of your movements), and the position is removed from the share link when you stop sharing.
• Auto check-in (opt-in): if enabled, your device uses geofencing to detect when you are near activities in your itinerary and marks them as visited. Proximity is checked on your device; we only store the result (the activity being marked as visited).
• Purchases and subscription status: your plan, the products you bought (First Class, Extra Luggage, eSIM), dates, prices, store or payment references and status. We never receive or store your full card details.
• eSIM orders: destination, data plan, duration, price, linked trip, order reference, status and the activation details (QR code / activation link) so you can install the eSIM.
• AI usage: the number of AI requests you made, used to apply plan limits.
• Device and technical data: device type, operating system, app version, language, push notification token, IP address and technical logs needed to deliver, secure and troubleshoot the service.
• Website and web app: we use your browser's local storage for essential functions (e.g. keeping you signed in and remembering preferences such as your cookie choice). Analytics cookies are only used if you accept them in the cookie banner; see Section 10.

3. How and Why We Use Your Data (Legal Bases)

Under the EU General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): creating and managing your account; storing and syncing your trips, documents, chat and album; sharing content with the trip members and public links you choose; sending invitations; processing purchases and delivering what you bought (First Class, Extra Luggage, eSIMs); generating AI results you request; and providing support.
• Consent (Art. 6(1)(a)): live location sharing, background location for auto check-in, push notifications, access to your camera, photos, microphone or contacts, and analytics cookies on the web. You can withdraw consent at any time in the app or your device settings, without affecting earlier processing.
• Legitimate interests (Art. 6(1)(f)): keeping Planr secure and preventing fraud, abuse and chargebacks; enforcing our Terms and handling content reports; diagnosing errors; improving features based on aggregated information; and defending legal claims. You can object to this processing at any time (see Section 8).
• Legal obligation (Art. 6(1)(c)): keeping invoices and transaction records under tax and accounting law, and responding to lawful requests from authorities.

We do not sell your personal data, we do not share it with advertisers, and we do not use it for profiling or automated decisions with legal or similarly significant effects on you. We do not use the content of your trips, chat, photos or documents to train AI models.

4. AI Features

When you use an AI feature (for example, generating or organising an itinerary, organising a day or wishlist, or importing a flight from a booking confirmation), we send the information needed for that request to our AI provider, Anthropic, through our own server. This may include destination, dates, interests, pace, budget, places and activities and, for flight import, the text or image of the confirmation you choose (which may include passenger names and booking references). We do not send your account email address. Under its commercial terms, Anthropic acts as a processor/service provider and does not use this data to train its models. AI results are suggestions only and may contain mistakes.

Please avoid including information you do not want processed, such as ID numbers or health details, in AI requests or uploaded confirmations.

5. Who We Share Data With

• Trip members: people in a trip can see its content, including shared expenses, chat, documents attached to shared activities, live location (if you share it) and the album, along with your name and profile photo.
• Anyone with a public link: if you or another trip member create a public trip, live location or album link, anyone who has that link can see the related content.
• Service providers (processors) that process data on our behalf, under contracts that require them to protect it:
  • Google Firebase / Google Cloud: authentication, database, file storage and push notifications
  • Cloudflare: hosting of the website and web app, our server functions (workers), and storage of album photos and videos (Cloudflare R2)
  • Anthropic: AI features (see Section 4)
  • Stripe: web payments, Extra Luggage and eSIM payments, and subscription management
  • RevenueCat: management of App Store and Google Play subscriptions (receives an app user identifier and purchase status)
  • eSIM Access: provisioning of travel eSIMs (receives only the order details and a reference, not your name, email or payment details)
  • An email delivery provider: sending trip invitations and security/verification emails
  • Mapbox, Google Maps Platform, OpenStreetMap (Nominatim) and Open-Meteo: maps, place search, geocoding and weather. These receive the search terms, place names or coordinates needed for the request and, as with any web request, your IP address
  • Google Analytics: only on the website/web app and only if you accept analytics cookies
• App stores: Apple and Google process your in-app purchases as independent controllers, under their own privacy policies.
• Authorised administration: a strictly limited number of authorised administrators can access account and trip data through an internal, access-controlled admin panel protected by additional verification, only when needed for support you requested, fraud prevention, security, content reports or legal compliance. Administrative access is logged.
• Legal reasons: when required by law, court order or a competent authority, or where necessary to protect the rights, safety or property of our users, third parties or ourselves.
• Business transfer: if Planr is transferred to another entity (for example, a company created to run it, or a buyer), your data may be transferred as part of that transaction, subject to this Policy, and we will inform you.

6. Where Your Data Is Stored and International Transfers

Our main database is hosted by Google Firebase in the European Union (europe-west1, Belgium). Some providers (including Google, Cloudflare, Anthropic, Stripe, RevenueCat, Mapbox and eSIM Access) may process data outside the European Economic Area, mainly in the United States, and files may be served from global networks to make them load faster. When data is transferred outside the EEA, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, for certified providers) or on the European Commission's Standard Contractual Clauses, together with the provider's additional safeguards.

7. How Long We Keep Data

• Account and trip data: for as long as your account is active. When you delete your account, your profile and personal data are deleted from our active systems.
• Content in shared trips: trips you own and their content (including album photos and videos) are deleted, unless you made another member co-owner. Content you contributed to other people's trips (e.g. chat messages, expenses, photos) may remain visible to those members, as part of their trip, until that trip is deleted; you may delete it yourself before deleting your account or ask us to remove it.
• Guest accounts that are inactive and not linked to a sign-in method may be deleted after 30 days of not linking an account.
• Live location: only the latest position is kept while sharing is active; it is removed from share links when you stop sharing and deleted with the trip.
• Purchase records and invoices: kept for the period required by Portuguese tax and accounting law (currently up to 10 years), even after account deletion.
• Technical logs: kept for a short period (usually up to 90 days), unless needed to investigate a security incident or abuse.
• Content reports and enforcement records: kept for as long as needed to handle the report and any related claim.
• Backups: deleted data may remain in encrypted backups for a limited period before being permanently overwritten.

8. Your Rights

Under the GDPR you have the right to:

• Access your personal data and receive a copy of it
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Data portability: receive the data you provided in a structured, commonly used, machine-readable format
• Object to processing based on our legitimate interests
• Restrict processing in certain circumstances
• Withdraw consent at any time, for anything we process based on consent

You can delete your account directly in the app's account settings. For any other request, email support@getplanr.app from the email address linked to your account. We may need to verify your identity before acting. We will reply within one month, which may be extended by two further months for complex requests, in which case we will tell you why.

If you believe we have not handled your data lawfully, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt), or with the authority in the EU country where you live or work. We would appreciate the chance to address your concern first.

9. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls and database security rules that limit each trip's data to its members, signed or tokenised links for files, and logged, restricted administrative access. Public links use long random tokens that are hard to guess. However, no system is completely secure, and anyone who obtains a public link can access its content. If we become aware of a personal data breach that is likely to result in a risk to you, we will notify the CNPD and, where required, you, as provided by the GDPR.

10. Cookies and Similar Technologies

The mobile apps do not use advertising trackers. On the website and web app, we use strictly necessary storage (such as sign-in sessions and your preferences), which does not require consent. Analytics cookies (Google Analytics, with IP anonymisation) are only set if you accept them in the cookie banner, and you can change your choice at any time by clearing your browser's site data for getplanr.app.

11. Device Permissions

Planr may ask for access to your location, camera, photo library, microphone, contacts or notifications, only to provide the related feature (for example, the microphone for voice notes, or photos for the album). You can grant or revoke these permissions at any time in your device settings; some features will not work without them.

12. Push Notifications

With your permission, we send push notifications about your trips, invitations, chat messages and reminders. You can turn them off at any time in the app or in your device settings.

13. Children

Planr is not intended for children under 13, and we do not knowingly collect their personal data. Users between 13 and 18 should use Planr with the involvement of a parent or guardian. If you believe a child under 13 has provided us with personal data, contact us and we will delete it. Please be careful when uploading photos or videos of children to the album or chat, especially if you create a public link.

14. Other People's Data

When you add other people's information to Planr (for example, inviting a friend by email, adding a travel companion's flight details, or uploading photos in which others appear), you are responsible for making sure you are allowed to share it and that they would reasonably expect it. People shown in content they did not upload can ask us to remove it by writing to support@getplanr.app.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date above. If the changes are significant, we will also notify you in the app or by email before they take effect.

16. Contact

For any question about this Privacy Policy or your data, contact us at support@getplanr.app.