Privacy Policy

Emily Mason, a sole trader based in the United Kingdom trading as "Planazo", is the data controller for the information described here. Contact us at privacy@planazo.co.uk for anything on this page.

• Account data: name, email, password hash, profile photo, sign-in provider (e.g. Google).
• Trip data: trips you create or join, itinerary items, saved places, expenses and settlements.
• Photos: images you upload, plus any place tag you attach to them.
• Location: only while you actively choose to share it on a trip, and only for as long as you set.
• Technical data: device type, browser, IP address and basic error logs, to keep the app working and secure.

• Contract: to give you the account and trip features you signed up for.
• Consent: for location sharing, and for any marketing emails — both can be withdrawn at any time.
• Legitimate interests: keeping the service secure, fixing bugs, preventing abuse.
• Legal obligation: where we must keep records, e.g. for tax on paid plans.

Content you post to a trip is visible to that trip's members. People with an invite link can see a limited preview of that one trip. Your other trips, your atlas and your profile settings are never shown to people outside the relevant group.

Location sharing is off by default. When you turn it on, you pick a duration, we share your position only with the members of that one trip, and it stops automatically when the timer ends. Stopping is instant and we do not keep a history of where you've been — only the most recent position while sharing is active.

• Service providers / subprocessors: cloud hosting and database, authentication, file storage for photos, mapping and place search, and error monitoring. They only process data on our instructions.
• Paddle.com Market Ltd — our Merchant of Record for all paid plans. If you buy Planazo Pro or a Trip Pass, Paddle receives your name, email, billing address, country and payment details in order to take payment, manage your subscription, calculate and remit sales tax, issue invoices and handle refunds. Paddle acts as an independent controller for that payment data; see paddle.com/legal/privacy.
• Professional advisers (legal, accounting) and authorities where we're required by law.

We do not sell your data or share it with advertisers.

• Account and trip data: until you delete your account, then removed within 30 days.
• Photos: until you or the trip owner delete them.
• Live location: deleted when sharing ends or expires.
• Logs: typically 90 days.

Under UK/EU data protection law you can ask for a copy of your data, correct it, delete it, restrict or object to processing, and withdraw consent. Email privacy@planazo.co.uk and we'll respond within one month. You can also complain to the ICO (ico.org.uk).

Planazo is for adults. We don't knowingly collect data from anyone under 18.

Data may be processed outside the UK/EEA by our providers under approved safeguards. We use encryption in transit, access controls and row-level security so people can only read the trips they belong to.

This is an honest draft describing how the app behaves today. Have it reviewed and keep it in sync as features change.