Privacy Policy

1. Introduction

Digital Products Direct LLC, a Georgia limited liability company doing business as Planytera ("Planytera," "we," "us," or "our"), respects your privacy. This Privacy Policy explains what personal information we collect, how we use and share it, and the rights and choices available to you when you use the Planytera Service.

2. Information We Collect

Account Information. Email, name, password (stored hashed), authentication identifiers from sign-in providers (Google, Apple), MFA factors, registered passkeys / biometric (WebAuthn) credentials, and account preferences (including selected language / locale).

Profile and Preferences. Travel companion type, travel pace, indoor/outdoor preference, dietary restrictions and strictness, cuisines, activities, audience composition (e.g., Kid-friendly, Family, Adults), success criteria, language, notification and email preferences, and other onboarding selections.

Optional Personalization Details. If you choose to provide them, we collect two optional profile details used only to tailor the travel itineraries we generate for you: your sex (Male, Female, Other, or Prefer not to say) and whether you have accessibility needs (a single on/off setting that, when enabled, prioritizes step-free venues, accessible routes, and rest breaks in your suggestions). Both fields are optional, are not required to create an account or generate a trip, and are used solely to personalize your itineraries. We do not use them for advertising or share them for that purpose. You can change or remove either at any time from your profile, and clearing them stops their use in future itineraries. Information about whether you have accessibility needs is special-category data concerning health under the GDPR and UK GDPR (and sensitive personal information under laws such as the CCPA/CPRA). We process it only with your explicit consent, which you give when you turn the setting on, solely to personalize your itineraries. You can withdraw that consent at any time by turning the setting off in your profile, which also deletes the information.

Trip Content. Destinations, dates, generated itineraries, edits, notes, photos, ratings, votes, post-trip journal entries, generated PDF trip recaps, shared trip tokens, collaborator information (including, for Business and Agency workspaces, information about clients or end travelers entered by the workspace owner), and shared expense entries and split and settle-up amounts, visible to trip collaborators according to the visibility setting chosen by the expense's creator.

Voice Input (Optional). If your device supports it, you can plan a trip by pressing and holding a button and speaking your request instead of typing it. Speech-to-text is performed by your operating system's or browser's built-in speech recognizer (Apple on iOS, Google on Android, your browser's speech service on the web), and that provider may process the audio of your request under its own terms, including on its servers. The audio recording is not sent to Planytera, and we never receive or store it. Planytera receives only the resulting text (up to 400 characters), which we send over an encrypted connection to our server and then to our AI provider (Google Gemini, through the Lovable AI Gateway) for the single purpose of reading the destination and dates out of your request. We do not store or log the transcript. We use it only to interpret your request in the moment and then discard it, and we limit how often the feature can be used to prevent abuse. Because you speak freely, your request may contain anything you choose to say, so please avoid speaking information you do not want processed for trip planning. Voice input is optional. You can deny or turn off the microphone permission at any time in your device settings and keep planning trips by typing; denying it does not affect any other part of the Service.

Location Data. We do not access your device's location. Planytera has no GPS, and the app does not request location permissions. The only location data we use is the destination you type in (a city or country) when you plan a trip. We send that destination to our mapping provider (Mapbox) to show maps and place suggestions, and to our weather provider (Open-Meteo) to show forecasts. We send it as your planning input, not as your physical whereabouts, and it is not tied to a precise device location.

Payment Data. When you purchase a paid feature, our payment processor collects your payment instrument details. We receive limited transaction metadata (e.g., last four digits, country, status) but not full card numbers.

Referral Program Data. If you share or redeem a referral code, we store the referral relationship (the account identifiers of the referrer and the referred user, the code used, and timestamps for redemption, conversion, and reward grant). We use this data to operate the referral program, award credits, and detect fraud or abuse. Referral records are retained for the life of the associated accounts plus up to 30 days after deletion, except where longer retention is needed for fraud prevention or legal compliance.

Device, Log, and Diagnostic Data. IP address, browser type, device identifiers, language, time zone, referring URLs, pages viewed, error/crash logs, and performance telemetry. Telemetry is subject to your consent settings where required.

Cookies, Local Storage, and Offline Cache. We use cookies and similar technologies for authentication, security, preferences, and analytics (see Section 8). When you install Planytera as a Progressive Web App (PWA) or use a native application shell, we additionally cache itineraries, preferences, map tiles, and related assets in on-device storage (IndexedDB, the Cache Storage API, and local storage) so the Service works offline. Edits made offline are queued locally on your device and synchronized when connectivity returns. On-device data is removed when you uninstall the app, clear site data, or sign out.

Communications. Support inquiries, feedback, and email engagement (opens, clicks) for transactional and, where permitted, marketing emails.

3. How We Use Your Information

• Provide, maintain, and secure the Service, including authentication, account management, and fraud prevention.
• Generate, store, and personalize itineraries, recommendations, and filters (including audience, dietary, and pace logic).
• Process payments and manage subscriptions.
• Communicate with you about the Service, transactional notices, and (with consent where required) marketing.
• Improve the Service, including model evaluation, debugging, and analytics on aggregated or de-identified data.
• Comply with legal obligations and enforce our Terms and Acceptable Use Policy.

4. Legal Bases (EEA/UK Users)

• Performance of a contract: providing the Service you request.
• Performance of a contract (voice input): processing the text of a spoken trip request that you initiate, to read your destination and dates and plan the trip you ask for. The audio is handled by your operating system's speech service under its own terms; Planytera processes only the resulting text, which it does not store.
• Legitimate interests: securing the Service, preventing abuse, and improving features.
• Consent: optional analytics and marketing communications.
• Explicit consent (Art. 9(2)(a)): processing your optional accessibility-needs setting to personalize itineraries. You may withdraw this consent at any time without affecting any other part of the Service.
• Legal obligation: tax, accounting, and law enforcement requests.

5. AI Processing

To generate itineraries, your preferences, destination, and trip parameters are sent to AI model providers (e.g., via the Lovable AI Gateway, which routes to providers such as Google and OpenAI). We do not knowingly include directly identifying information (such as your email or full name) in model prompts. Providers process this data under their respective terms; we contractually require providers not to use Planytera data to train their models, where such terms are available. When you use voice input, the spoken request you provide is included in the trip parameters we send for parsing; because it is free-form, it may contain content you choose to include, and we do not store the transcript (see "Voice Input" in Section 2).

6. How We Share Information

Service Providers. Hosting and database (Lovable Cloud / Supabase), maps (Mapbox), authentication (Google, Apple), AI model providers, payment processors (Paddle.com Market Ltd for web purchases, Apple for iOS, Google for Android, with RevenueCat managing subscription entitlements), email delivery, analytics, and customer support tools, each acting under contractual confidentiality and security obligations.

Other Users (when you choose). Collaborators you invite, recipients of shared trip links, and people you grant edit or voting rights.

Legal and Safety. To comply with law, lawful requests, court orders, or to protect the rights, property, or safety of Planytera, our users, or the public.

Business Transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to commercially reasonable confidentiality protections.

We do not sell your personal information for money. We do not engage in cross-context behavioral advertising.

7. Data Retention

• Account data: retained while your account is active and for a reasonable period after closure to comply with legal, accounting, security, and dispute-resolution obligations.
• Trip history and notes: retained until you delete them or close your account.
• Logs and security data: typically retained for up to 24 months.
• Payment records: retained as required by tax and financial regulations (typically up to 7 years).
• Anti-abuse hashes after account deletion: when you delete your account, we retain a one-way SHA-256 hash of your email address and an optional device fingerprint hash in a separate, server-only table. These hashes cannot be reversed to recover your email or identify your device, and are used solely to prevent abuse of our free Observer tier (e.g. deleting and re-creating an account to repeatedly claim free-tier perks). We retain these hashes indefinitely for this purpose. You may request deletion of these hashes by contacting us; we will honor the request unless retention is required to detect ongoing abuse.

8. Cookies and Tracking

We use strictly necessary cookies (authentication, security), preference cookies (theme, settings), and limited analytics cookies. Where required by law, we obtain consent for non-essential cookies via an in-product control. You can manage cookies through your browser; disabling some cookies may break login or other features.

8.1 Cookies and local storage we use

The table below lists the cookies and browser storage keys Planytera sets, what each one does, and how long it persists. "Session" means the value is cleared when you close the tab or sign out; "Persistent" values remain across sessions until they expire or you clear them.

You can change your cookie choices at any time from the cookie banner or your account settings. Disabling strictly necessary cookies will prevent sign-in and core features from working.

9. Your Rights and Choices

• Access, correct, or delete your personal data through your account settings or by contacting us.
• Export your trip data in a portable format on request.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Opt out of marketing emails via the unsubscribe link or settings.
• Lodge a complaint with your local data protection authority (EEA/UK users) or applicable regulator.

California residents (CCPA/CPRA), Virginia, Colorado, Connecticut, and other U.S. state privacy law residents have additional rights, including the right to know, correct, delete, and opt out of the sale or sharing of personal information for cross-context behavioral advertising. Planytera does not sell personal information or engage in cross-context behavioral advertising.

10. Children's Privacy

The Service is not directed to and is not intended for children. You must be at least 16 years of age to create a Planytera account. You confirm that you are 16 or older when you create an account. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact privacy@planytera.com, and we will take appropriate steps to delete the account and associated data. Parents and guardians who plan trips that include minors should avoid uploading identifying information about those minors (e.g., photos, full names, medical conditions) into trip notes or shared links. The "Kid-friendly" and "Family" audience filters tailor suggestions for trips that include minors planned by an adult account holder; they do not authorize accounts for minors.

10a. Account Deletion (Self-Service)

You can permanently delete your account at any time from Settings → Danger zone → Delete account. Deletion is processed immediately and removes:

• Your authentication record (email, password hash, OAuth links, MFA factors, and registered passkey / biometric credentials).
• Your profile, display name, avatar, and language / locale preference.
• Your trips, itineraries, notes, ratings, votes, journal entries, generated PDF recaps, collaborator entries, share tokens, email preferences, recovery questions, retry preferences, and device push-notification tokens.
• Your role assignments and any Business / Agency workspace memberships.

Some data may persist briefly in encrypted backups (typically up to 30 days) and in security/audit logs as required by law or to investigate abuse, after which it is purged. Anonymized, aggregated analytics that cannot be linked back to you may be retained indefinitely. Payment and tax records are retained as required by financial regulations (Section 7). On-device data stored by the installed PWA or native shell is removed when you sign out, uninstall the app, or clear site data on that device. If you would like written confirmation of deletion or a copy of your data prior to deletion, contact privacy@planytera.com.

11. Security

We use industry-standard safeguards, including encryption in transit (TLS), encryption at rest for our managed database, role-based access controls, row-level security policies, multi-factor authentication, passkey / biometric (WebAuthn) sign-in, server-side CAPTCHA on login, and routine security review. New and changed passwords are checked against the Have I Been Pwned (HIBP) breach database and rejected if known to be compromised. No system is perfectly secure; you are responsible for safeguarding your credentials, enabling MFA or a passkey, and securing any device on which you install the Planytera app.

As a record of your agreement to the Terms, Privacy Policy, and Acceptable Use Policy, we store acceptance records that include a one-way hashed IP address (not the raw IP), your browser or device user-agent string, the policy version accepted, and a timestamp. These records are append-only and retained for the life of the account plus the retention window described in Section 10.

12. International Transfers

Planytera operates globally. Your information may be processed in countries other than your country of residence, including the United States. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect international transfers.

13. Third-Party Links

The Service may link to third-party websites and venues. We are not responsible for the privacy practices of third parties. Review their privacy policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated by email or in-product notice prior to taking effect. The "Effective Date" at the top reflects the latest revision.

15. Contact Us

Privacy questions and rights requests: privacy@planytera.com.
General contact: support@planytera.com.