Privacy Policy

What we collect

You give us

• Account: email address and password (stored hashed by our auth provider).
• Profile: first name, optional photo, optional bio, interests, home city, optional neighborhood, and an age range.
• Plans and messages: plans you create, plans you join or mark interested, and messages you send in plan group chats.
• Safety: reports you file and people you block.

Collected automatically

• If you sign in with Google: Google shares your name, email address and profile photo link with us. We use the email to sign you in and your first name to fill in your profile, which you can change. We don't get your Google password or access to anything else in your Google account.
• Approximate location (only if you turn it on): your device position is rounded to about 1 km on your device before it is sent, rounded again on our servers, and deleted automatically if not refreshed for 30 days. We never store precise or real-time location.
• Product usage events: pseudonymous events like “plan created” or “plan joined,” tied to your account ID (not your name or email) and limited to non-identifying properties.
• Security data: IP addresses are used transiently for rate limiting and abuse prevention and are stored only as salted hashes.

What other people can see

• Your first name, photo, bio, interests, and plan counts — to everyone, or only to signed-in members if you choose “Members only.”
• Your location only as you choose: hidden, your city, your neighborhood, or a rough distance in whole miles (never less than 1 mile).
• Plans: public plans are visible to anyone; friends-only plans to mutual follows and people invited; invite-only plans only to people with an invite.
• Group chats: only people currently going to that plan.

Never visible to other members: your email, phone number, exact or real-time location, home address, age range, private messages, private plans you weren't invited to, and who you block or report.

Location on plans

Plan locations are a public place name (like “Newport Park”) plus an approximate area snapped to a grid of roughly 500 meters. Maps show approximate circles, not pins. We reject street addresses as plan locations to protect hosts.

How we use data

• To run PLANS: show plans near you, let you join, power group chats and notifications.
• To keep people safe: moderation, spam and abuse prevention, rate limiting, enforcing our rules.
• To improve PLANS using aggregated, pseudonymous product metrics.

We don't sell or rent personal data, don't show ads, and don't share data with advertisers or data brokers.

Moderation access

Our moderators can see reported content (a snapshot taken when the report was filed) and account information needed to investigate. They cannot browse private group chats.

Service providers

We use vendors to host the app and database (e.g. Vercel, Supabase), deliver email, and render map tiles (OpenStreetMap). They process data only on our instructions. Map tiles are requested by your browser directly from the tile server, which can see your IP address.

Cookies

• Sign-in: keeps you signed in. Required.
• Invites: if you arrive through a friend's link, remembers which invite or plan brought you (codes only) so it can be credited after you sign up. Kept up to 30 days.
• Where you came from: a short channel name such as “producthunt” or “reddit”, taken from the link or referring site on your first visit, so we know which channels bring people. No personal data. Kept up to 30 days.

We don't use advertising or cross-site tracking cookies. Visitor counts use cookieless analytics.

Retention

• Account and profile data: until you delete your account. Deleted accounts are hidden immediately and permanently erased 30 days later.
• Plans and group chats: kept so they appear in participants' history; chats become read-only 6 hours after a plan ends.
• Approximate location: deleted after 30 days without an update, or immediately when you turn it off.
• Notifications: deleted after 90 days once read (180 days maximum).
• Reports: kept as needed for safety and legal obligations, de-identified when the reporter deletes their account.

Your choices and rights

• Edit your profile, interests, visibility and notification preferences in Settings.
• Turn approximate location on or off at any time.
• Delete your account and personal data from Settings → Account (details).
• Depending on where you live (e.g. GDPR, CCPA/CPRA), you may have rights to access, correct, port, delete or restrict processing of your data. Contact privacy@plans.app (placeholder — set before launch).

Security

Data is encrypted in transit. Every table is protected by database row-level security so members can only access what they're allowed to. No system is perfectly secure; tell us about vulnerabilities at security@plans.app (placeholder).

Children

PLANS is only for people 18 and older. We delete accounts we learn belong to minors.

Changes

We'll post updates here and notify you in the app if changes are significant.