Effective 27 July 2026. Replaces the version dated 12 June 2026.
Scope of this policy.
This policy explains what personal data Plan4Me (“we”, “us”) collects, the purposes for which that data is used, and the choices available to you. It applies to the Plan4Me mobile application and to this website. Plan4Me is the controller of the personal data described in this policy. You can reach us at support@plan4me.ai.
Information we collect.
- Account details. Your email address, name, optional avatar and password, which is stored only as a salted hash. If you sign in with Google, Apple or Facebook, we receive your name, email address and an account identifier from that provider. We never receive the password for your social account.
- Travel preferences. Interests, travel pace, budget level, preferred transport, who you usually travel with, and any dietary restrictions or accessibility needs you choose to add. Please see the section on sensitive information below.
- Content you create. Trips, itineraries and day plans, notes, expenses and budgets, booking details you record (such as flight or hotel confirmations), saved places, share links and collaborator invitations.
- Travel assistant conversations. Messages you exchange with the AI assistant, retained so that your conversations have context and history.
- Location. Your device location, collected only if you grant the system permission. It is used to show nearby places and to power the live day view. You can revoke the permission at any time in your device settings, and the app continues to work without it.
- Payment data. Payments are handled by Stripe. We store your subscription tier, a Stripe customer reference and your credit balance. We never store your card number.
- Device and usage data. Basic device and app version information, IP address and server logs, used to operate, secure and debug the service and to enforce fair usage limits.
- Support correspondence. Any information you send to support@plan4me.ai.
- Website waitlist. If you join the waitlist on this site, we store the email address you enter, the date you joined and the form you used.
Sensitive information.
Dietary restrictions and accessibility needs can reveal information about your health, disability or beliefs. Providing this information is entirely optional. If you choose to add it, we use it solely to tailor your itineraries, for example by suggesting suitable restaurants or accessible routes, and we protect it in the same way as the rest of your data. You can remove it at any time in your preferences. Please do not enter sensitive information about other people into trips or conversations without their agreement.
How we use your information.
We use your data to create and personalize itineraries; to operate the features you use, such as budgets, day plans, offline mode and sharing; to process payments and manage subscriptions; to provide support; to keep the service secure, prevent abuse and enforce usage limits; and to meet our legal obligations. Where the GDPR or similar laws apply, our legal bases are the performance of our contract with you for most processing, your consent for location data and optional sensitive preferences, our legitimate interests in security and service improvement, and legal obligation for tax and accounting records. We do not sell personal data, and we do not display advertising from third parties.
AI processing.
Plan4Me itineraries and the travel assistant are powered by large language models. To generate a plan or answer a chat message, we send the relevant trip details, such as your destination, dates, preferences and messages, to our AI providers, currently OpenAI and, for some requests, Google. We send only what the model needs, without your account identity, and under our API agreements these providers do not use your data to train their models. Responses are generated by AI. Please treat them as suggestions rather than verified facts, and avoid entering personal information into conversations when it is not needed for planning.
Service providers.
We share data with service providers only so that they can perform services on our behalf:
- OpenAI and Google. Itinerary generation and the travel assistant.
- Google. Place data, routing and optional authentication.
- Apple and Meta (Facebook). Optional authentication.
- Mapbox. Maps in the app.
- OpenWeatherMap. Weather forecasts for your trip dates.
- YouTube. Place videos in discovery.
- Stripe. Payment processing and subscription billing.
- Fly.io and Google Firebase. Application hosting, database and authentication infrastructure, and this website, including waitlist storage.
Other disclosures.
Trips you explicitly share are visible to anyone who holds the link or invitation. We disclose data where the law requires it, or where disclosure is necessary to protect our users, the public or the service. If Plan4Me is involved in a merger, acquisition or sale of assets, data may be transferred with appropriate protections. Beyond these cases, we do not sell personal data, we do not use advertising networks, and we do not share data with data brokers.
International data transfers.
Our infrastructure and most of our providers are based in the United States or operate globally, which means your data may be processed outside your country. Where transfer rules such as the GDPR apply, we rely on the safeguards our providers offer, such as the Data Privacy Framework program and Standard Contractual Clauses.
Retention and deletion.
Your data is retained for as long as your account exists. Deleting your account from Settings in the app removes your account and associated data from live systems. Residual copies in encrypted backups are removed on a rolling schedule, typically within 30 days. Revoked share links stop working immediately. Payment records are retained for as long as tax and accounting law requires. Waitlist email addresses are deleted once launch communications are complete, or earlier on request.
Your rights.
Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. In the EEA, the United Kingdom and Switzerland these rights arise under the GDPR, and you may also lodge a complaint with your data protection authority. In California you have the rights to know, correct and delete personal information, and to opt out of its sale or sharing, neither of which we engage in, without being discriminated against for exercising those rights. Wherever you are located, email support@plan4me.ai and we will respond within the legally required time. Account deletion is available directly in the app.
Your choices.
- Location: grant or revoke the permission in your device settings.
- Notifications: manage them in your device settings or in the app.
- Preferences: edit or remove interests, dietary and accessibility entries at any time.
- Share links: revoke them at any time in the app.
- Account: delete it from Settings in the app without contacting support.
Children.
Plan4Me is not directed at children under 13 years of age, or the higher minimum age that applies in your country, and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we will delete it.
Security.
Data is encrypted in transit, passwords are stored as salted hashes, and access to production systems is restricted. No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.
This website.
This website sets no cookies and runs no analytics. Two features involve third parties: the waitlist form stores the email address you submit in Google Firebase, and pages load the Inter typeface from Google Fonts, which means your browser sends your IP address to Google when fetching it. Nothing else on the site tracks you.
Changes and contact.
If this policy changes materially, we will update this page and the effective date, and we will flag significant changes in the app. Questions and requests can be directed to support@plan4me.ai.