Consumer Health Data Privacy Policy

1. Who This Policy Is For

Digital Products Direct LLC, a Georgia limited liability company doing business as Planytera ("Planytera," "we," "us," or "our"), publishes this policy under the Washington My Health My Data Act (chapter 19.373 RCW) and the Nevada consumer health data law (NRS 603A.495 et seq.). It applies to you if you are a Washington or Nevada resident, or if your consumer health data is collected in either state.

This policy covers consumer health data only. Every other kind of personal information we handle is described in our Privacy Policy.

2. Consumer Health Data We Collect and Why

We collect two pieces of consumer health data, and only if you turn them on yourself. Both are off by default.

Accessibility needs (profile setting). A single on or off setting in your profile that tells us you want your trips planned with accessibility in mind. It does not record a diagnosis, a condition, a device, or any detail about your needs. We collect it for one purpose: to plan trips that prioritize step-free venues, accessible routes, rest breaks, and shorter distances between stops. To do that, the setting is included in the trip generation request we send to the service that writes your itinerary.

Accessibility filtering applied to a trip (trip record). A single on or off marker stored with an individual trip, recording that the trip was generated with accessibility filtering. We collect it for one purpose: so you can see which of your trips were planned that way, filter your trip list by it, and keep the same treatment when you edit or regenerate that trip.

We collect no other consumer health data. We do not use either of these for advertising, and we do not use them for any purpose other than planning the trips you ask us to plan.

3. Where This Data Comes From

Both pieces come directly from you: the profile setting when you turn it on, and the trip marker when you use the accessibility toggle while setting up a trip. We do not buy consumer health data, we do not receive it from data brokers or any other outside source, and we do not infer it from your other activity in the app.

4. Who Can See It

Your profile setting is visible only to you. The trip marker is visible to you and to anyone you deliberately give access to that trip, because a collaborator you invite to a trip can see the trip's details, including that it was planned with accessibility filtering. If you would rather a collaborator not see that, do not invite them to that trip.

The marker is not included in public share links. Note separately that an accessibility itinerary describes its own accessibility features in the activity descriptions, so anyone who can read the itinerary can tell it was planned that way, whether or not the marker travels with it.

5. What We Share and With Whom

We do not share consumer health data with third parties, and we do not sell it. We have no affiliates, so we share none with any.

We do use service providers (processors under these laws) that run Planytera and generate itineraries on our instructions. Giving data to a processor for the purpose described in this policy is not "sharing" under the Act, and we tell you who they are anyway:

• Supabase: the database and authentication service that stores your profile and your trips.
• Lovable: application hosting, and the AI gateway that carries trip generation requests. When your accessibility setting is on, it is included in the generation request sent through that gateway.

Lovable routes those generation requests to Google's Gemini models. We have no direct relationship with Google for this: we hold no Google AI credentials, send nothing to Google ourselves, and every request leaves Planytera addressed to Lovable. Google is therefore Lovable's sub-processor rather than a service provider we engaged. Lovable, not Planytera, sets the terms on which Google processes that data.

We have instructed Lovable to process consumer health data only to provide those services to us, only for the purpose described in this policy, and not to use it for AI model training. That instruction covers the services Lovable provides to us, including the Lovable Cloud database and the AI gateway. It does not bind Google, whose terms Lovable sets.

6. Your Rights

• Confirm and access. You can ask whether we are collecting, sharing, or selling your consumer health data, and get a copy of it. If we ever shared it, our response will list every third party and affiliate that received it, along with a way to contact each of them.
• Withdraw consent. You can withdraw your consent to our collection and sharing of your consumer health data.
• Delete. You can have your consumer health data deleted.

Using any of these rights does not affect your account, your trips, or anything else about the Service.

7. How to Make a Request

In the app. Turn the accessibility setting off in your profile. That single action withdraws your consent and deletes both the profile setting and the accessibility marker on your trips at the same time.

By email. Write to privacy@planytera.com from the email address on your Planytera account and tell us what you want: confirmation and access, withdrawal of consent, or deletion.

We use the email address on your account to confirm that a request is really yours. If we cannot confirm it, we will ask you for more information and will not act on the request until we can.

We respond without undue delay and within 45 days of receiving a request. If we need more time we may take one further 45 days, and we will tell you why within the first 45. We answer requests free of charge up to twice a year. For a request that is manifestly unfounded or excessive we may charge a reasonable fee or decline to act, and we will tell you which and why.

8. How We Handle a Deletion Request

• We delete the profile setting and the accessibility marker on every one of your trips from our live systems.
• We delete it from backup and archive systems as well. If a backup cannot be reached straight away, we complete that deletion no later than six months after we confirm your request.
• We notify our service providers of your deletion request and instruct them to delete any copy they hold. Under these laws they must honor it.
• Deleting this data does not delete your trips or your account. Your trips stay; only the accessibility marker is removed from them.

9. If We Refuse a Request

If we refuse to act on your request, we will tell you why, and how to appeal, within 45 days of receiving it. To appeal, reply to that message or write to privacy@planytera.com with "Appeal" in the subject line. We will decide your appeal and send you a written explanation within 45 days of receiving it.

If we deny your appeal and you are a Washington resident, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint. If you are a Nevada resident, you may contact the Nevada Attorney General's Bureau of Consumer Protection at ag.nv.gov. We will include the relevant link in our decision.

10. Contact Us

Digital Products Direct LLC (Planytera)
privacy@planytera.com