Privacy Policy

Planneryo is operated by Little Lion Labs (owner: Emine Çabuk), a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) (number 42012326), Prinses Julianastraat 12, 2802 JR Gouda, the Netherlands. Little Lion Labs is the data controller for the personal data described here. Contact: [email protected]. This policy covers the Planneryo iOS and Android apps and the web app. Users in Türkiye: see also our KVKK Aydınlatma Metni.

• Account data: email address, display name, password hash (if you use a password), the version and time you accepted our Terms, and an optional payment note you add for other members (for example a bank or payment handle)
• Sign in with Google or Apple: the provider's account identifier, your email address and name as shared by the provider, and, for Google, the URL of your profile picture (we store the link, not the image)
• Event collaboration data: events, announcements, memberships and RSVPs, tasks, checklists, expenses and splits, and invites
• Event venue: the place name, address and map coordinates of a venue you search for or choose. Venue search uses Google Places; we do not access your device's location
• Sponsor and invoice details entered by organizers: a sponsor's name, email, tax ID, address and notes, and snapshots of invoices generated from them. If you are a sponsor and an organizer added your details, contact us or the organizer to correct or remove them
• Reports you submit about content or members (reason, optional details, and what was reported)
• Feedback you send from the app (the topic and your message). Only if you leave "Include device info" on, we add the app version, operating system version, device model and app language; we add your account email only if you allow us to reply. Ratings and reviews you leave in the App Store or Google Play are handled by Apple or Google under their terms
• Push notification tokens and device platform, when you allow notifications
• Subscription records when you subscribe: on iOS, Apple In-App Purchase transaction records (product, transaction identifiers, expiry); for subscriptions bought outside the iOS app (for example on the web), Stripe subscription and customer records. Card details are entered only with Apple or Stripe; we never receive or store them
• Diagnostics: in the mobile apps, crash reports and a sample of performance traces (for example app-start timing) sent to Sentry when crash reporting is enabled in the build; these are not linked to your account and invite links and email addresses are masked. Our servers keep request IDs in logs and use IP addresses for short-lived rate limiting and security

• To provide Planneryo (account, events, invitations, venue lookup, expense balances, notifications, data export and deletion) and to provide paid plans — performance of our contract with you (GDPR Art. 6(1)(b))
• Security, abuse prevention, rate limiting, handling reports, crash diagnostics, reading and answering feedback, and keeping the service reliable — our legitimate interests in a safe, working and improving service (Art. 6(1)(f))
• Sponsor details entered by organizers — the organizer's and our legitimate interests in managing the event's sponsorships (Art. 6(1)(f)). If an organizer added your sponsor details, we received them from that organizer; we use them only to produce that event's sponsor records and invoices, and you can object or ask for deletion
• Keeping billing and tax records and answering lawful requests — legal obligations (Art. 6(1)(c))
• Push notifications — performance of our contract (Art. 6(1)(b)), only after you allow them in your device settings; you can switch them off at any time

Where we rely on legitimate interests, we have balanced these interests against your rights; you can ask us for details.

We do not use third-party product analytics, advertising or tracking SDKs, we do not track you across other companies' apps or websites, and we do not make decisions about you based solely on automated processing. If we add product analytics in the future, we will update this policy first and ask for your consent where required. Providing your email address is required to create an account; everything else you add is up to you.

We share data with service providers that process it on our behalf to run the service, and with the following companies that act as independent controllers for their own part: Apple (App Store purchases and Sign in with Apple), Google (Sign in with Google) and Stripe (payment fraud prevention and its legal obligations). Their own privacy policies apply. The providers are:

• Microsoft Azure (West Europe region): hosting, database and email delivery (Azure Communication Services)
• Cloudflare: network security, DNS and content delivery for our web and API traffic
• Apple (App Store In-App Purchase) and Stripe: subscription billing
• Google and Apple: verifying Sign in with Google / Apple
• Google Places: venue search and place details
• Open-Meteo: event weather forecasts, using only the venue's coordinates and dates
• Expo push notification service (with Apple and Google push delivery): notifications
• Sentry: crash reporting and performance monitoring in the mobile apps

Other members of an event can see the information you add to that event and your display name. We may disclose data where the law requires it. We do not sell or "share" personal data for cross-context behavioural advertising.

Our main database is hosted in the EU (Azure West Europe, the Netherlands). Some providers (Cloudflare, Stripe, Google, Apple, Expo and Sentry) may process data in the United States or other countries outside the EU/EEA. Where they do, we rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses with additional safeguards such as encryption in transit. For transfers of personal data of users in Türkiye, see our KVKK notice. You can ask us for a copy of the relevant safeguards.

The web app uses only strictly necessary storage: a sign-in session (cookie or browser storage), your language choice, and a temporary value that protects the Google/Apple sign-in flow. We do not use advertising or analytics cookies, so we do not show a cookie banner. Fonts are served from our own domain. If this changes, we will ask for your consent first.

You can download a copy of your data and delete your account in the app (Account → Download my data / Delete account) or on the web account page. Deletion soft-deletes your profile and clears your email, name, profile picture link, payment note and password; revokes your sessions; removes linked Google/Apple sign-in identities; deactivates your push notification tokens; cancels a web (Stripe) subscription immediately and deletes your Stripe customer record; and removes you from active event memberships. Content you added to events shared with others stays visible to those members, attributed to "Deleted User". An Apple subscription must be cancelled in your App Store settings.

• Account and event data: while your account is active, until you delete it or the event
• Email verification and reset codes: deleted within 24 hours
• Expired or revoked sessions and deactivated push tokens: deleted after 30 days
• Server logs: 30 days; database backups (including deleted data): up to 7 days
• After you delete your account, a de-identified placeholder profile remains only to keep shared event history intelligible
• Content reports: as long as needed to handle them and defend against misuse, normally up to 12 months
• In-app feedback: until you delete your account (it is deleted with it)
• Subscription and invoice records: 7 years (Dutch tax-record retention obligation)

Depending on your location (including the EU/EEA, the UK and Türkiye), you have the right to access, correct, delete or export your personal data, to restrict processing, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting earlier processing. Most of this you can do yourself in the app; otherwise email [email protected]. We answer within one month (extendable by two months for complex requests, in which case we tell you). We have not appointed a Data Protection Officer because the law does not require it. You can also complain to a data protection authority — in the Netherlands the Autoriteit Persoonsgegevens, or the authority where you live or work (in Türkiye, the KVKK Board).

Right to object: where we process your data based on legitimate interests (security, abuse prevention, report handling, diagnostics, sponsor records), you can object at any time on grounds relating to your situation by emailing [email protected]. We will stop unless we have compelling legitimate grounds or need the data for legal claims.

California residents: we do not sell or share personal information, and you may exercise the rights above, including to know and to delete, without discrimination.

Planneryo is not intended for anyone under 16. We do not knowingly collect data from people under 16; if you believe a child has created an account, contact us and we will delete it.

Data is encrypted in transit (HTTPS) and at rest in our hosting provider. Passwords are stored only as salted hashes. Access to production systems is restricted to the people who need it.

We will post changes here and update the date above; for material changes we will notify you in the app or by email. Questions about this policy: [email protected]. See also our Terms of Service and legal notice.