Planr.
1. Who We Are
Planr Travel Ltd (‘Planr’, ‘we’, ‘us’) is the data controller for personal data collected through the Planr app. Our registered address and contact details can be found at www.planrtravel.com.
2. Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, password (hashed).
- Trip data: destinations, dates, traveller numbers, preferences and itinerary items you create.
- Device data: device type, operating system version, and anonymised crash reports.
- Usage data: features you interact with, search queries and in-app navigation patterns.
We do not collect financial or payment card data directly — any payments are handled by third-party providers under their own privacy policies.
3. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- Contract: to provide the Planr service you have signed up for.
- Legitimate interests: to improve the app, prevent fraud and ensure security.
- Consent: for marketing communications (you may withdraw consent at any time).
4. How We Use Your Data
We use your data to:
- Create and manage your Planr account.
- Save and display your trips and itinerary items.
- Personalise explore results and recommendations.
- Send service-related notifications (e.g. account security alerts).
- Analyse usage to improve app performance and features.
- Comply with legal obligations.
5. Sharing Your Data
We do not sell your personal data. We may share it with:
- Cloud infrastructure providers who host our backend (under data processing agreements).
- Analytics tools (anonymised/aggregated data only).
- Law enforcement or regulators where we are legally required to do so.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
7. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request erasure of your data (‘right to be forgotten’).
- Object to or restrict certain processing.
- Data portability (receive your data in a machine-readable format).
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at admin@planrtravel.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Cookies & Tracking
The Planr mobile app does not use browser cookies. We may use anonymised device identifiers and crash-reporting SDKs to improve stability. No personally identifiable tracking is performed without your consent.
9. Data Processing Inventory
This inventory maps each category of personal data we hold to why we process it, our lawful basis, how long we keep it, and which third parties (if any) receive it:
- Account data (email, username, hashed password, date of birth) — Purpose: create and secure your account. Basis: contract. Retention: for the life of your account, then 30 days after deletion. Shared with: no third party.
- Trip data (destinations, dates, traveller counts, itinerary items) — Purpose: provide the core planning service. Basis: contract. Retention: for the life of your account. Shared with: RateHawk (hotel search) and Viator (activity search), limited to the search parameters needed to return results.
- Chat / AI conversation content — Purpose: power the AI travel assistant. Basis: contract/consent. Retention: 2 years of inactivity, then automatically purged. Shared with: OpenAI (message content only, for generating a reply).
- Location search queries (destination coordinates) — Purpose: hotel/activity search and map display. Basis: legitimate interest. Retention: tied to the trip or search history. Shared with: RateHawk, Viator, and Nominatim (for reverse geocoding).
- Usage/device data — Purpose: reliability and abuse prevention. Basis: legitimate interest. Retention: rolling window, see server logs policy. Shared with: no third party beyond our infrastructure providers.
We do not sell this data. Where CPRA’s broader definition of “sharing” may apply to search parameters sent to booking partners, you can limit this via the “Do Not Sell or Share My Personal Information” toggle in Account settings.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via the app. The ‘Last Updated’ date at the top of this document reflects the most recent revision.