Privacy Policy

Last Updated: January 20, 2026

Who we are

This Privacy Policy describes how Planerie, LLC (“Planerie,” “we,” “us,” “our”) collects, uses, and shares personal information when you use our website, mobile app, and related services (the “Service”).
Contact: privacy@planerie.com • Address: Bridgeport, CT 06605

Summary

We don't use non-essential cookies or ad trackers.
We only collect what's needed to run Planerie (account details, event info, and minimal security logs).
We don't sell or "share" your personal information for cross-context behavioral advertising.
We never sell or share your personal phone numbers or other personal contact data.
You control what information bilateral friends see through profile visibility settings in your account settings.
You can disable friend search to prevent others from finding you by username, email, or phone number.
You can access, export, or delete your data at any time by emailing privacy@planerie.com.

Sharing your information

We do not sell or “share” your personal information for cross-context behavioral advertising. We explicitly do not sell, rent, or share personal cell phone numbers or SMS interaction data or other sensitive contact details with marketers, data brokers, or unrelated third parties.
No mobile information (phone numbers) will be shared with third parties/affiliates for marketing or promotional purposes at any time.

Information we collect

You provide

Profile: display name, username (optional)
Contact: email address, phone number. If you provide a mobile phone number, we may use it to send important account or event-related communications, including SMS invitations and updates, as described in our SMS Terms.
Home address (optional): to suggest nearby locations
Event content: event names, dates/times, locations, notes
Friends ("My Friends"): nicknames and contact details you upload
Messages: event notes and planning communications
Logs/Usage/Security: Basic logs about SMS delivery and interaction (for example, successful sends, failures, and opt-out events) to ensure the Service works as intended and to prevent abuse.

Automatically collected (service operation & security)

Device & network: IP address (truncated/rotated), User-Agent, device/OS/app version
Usage & diagnostics: aggregate counts of pages/screens and actions (from server-side logs)
Session information: authentication status and CSRF protection

Cookies & local storage

Strictly necessary only: short-lived authentication/session cookies and anti-abuse tokens
No non-essential cookies or similar tracking technologies (no analytics cookies, no ad pixels, no fingerprinting used for advertising). Because of this, you will not see a cookie banner.

How we use information

Provide the Service: create/manage events, deliver invitations and OTP codes, maintain accounts
Security & fraud prevention: authenticate users, rate-limit, prevent abuse
Product analytics (aggregate): understand feature usage and performance from server logs—without persistent client identifiers
Communications: service updates and support
Legal/compliance: meet legal requirements and enforce terms

Planerie SMS Terms

Planerie may send event invitations and event-related updates via SMS to guests on behalf of registered event hosts. When a host adds you as a guest and provides your mobile phone number, you consent to receive one-time or event-specific SMS messages related to that event (for example, invitations, time or location updates, or RSVP links).

Message frequency. You may receive one or more messages per event you are added to, depending on how the host uses Planerie. Message frequency varies by event activity.

Charges. Message and data rates may apply from your mobile carrier.

Opt-out. You can opt out of receiving SMS messages from Planerie at any time by replying STOP to any message. After you opt out, we will not send you additional event messages at that phone number, except where we are required to do so by law or you later opt back in (for example, by replying START or by being re-added and explicitly confirming).

Help. For help with SMS messages, reply HELP to any Planerie SMS or contact us at support@planerie.com.

Use of phone numbers and SMS data. Guest phone numbers and SMS interaction data (such as delivery status, opt-outs, and basic engagement information) are used only to provide and monitor event messaging, prevent abuse, and comply with legal and carrier requirements. We do not sell guest phone numbers, and we do not share them with third parties for their own marketing purposes. For more details about how we handle personal information, see this Privacy Policy.

Legal bases (EEA/UK only)

Contract: to provide the Service you request
Legitimate interests: security, fraud prevention, and aggregate product analytics with minimal data
Consent: for optional marketing messages where required

We share personal information only with:

Service providers (processors):
- Email: Resend (invitations, OTP codes)
- SMS: Pending Service Provider (text invitations, OTP codes)
- Hosting/DB: Vercel (app hosting), Supabase (database)
- Maps: Mapbox (search & suggestions) These providers are contractually limited to our instructions and prohibited from reusing your data.
Event invitees and bilateral friends: When you invite someone to an event or when you have a bilateral friendship, they may see your information based on your profile visibility settings (see "Friend requests and information sharing" section below)
Legal/Compliance: when required by law or to protect rights, safety, and integrity
With your direction: when you ask us to share (e.g., integrations you enable)

Guest contact information you upload

If you upload or enter guest contacts, you confirm you have authority to provide those details and message those guests. We process guest contact information solely to deliver your invitations and related Service messages. SMS recipients can opt out at any time by replying STOP; email recipients can click unsubscribe.

Friend requests and information sharing

How friend requests work

When you add someone as a friend on Planerie, you create a unilateral friend connection. The person you added can see that you added them in their "People Who Added Me" tab. When they add you back, you become bilateral friends (mutual friends).

What information is shared with friends

The information shared with others depends on your profile visibility settings and whether you have a bilateral friendship:

Unilateral friendships (only one person added the other):

If you add someone via username, they see only your username
If you add someone via email/phone, they see only the contact method you used to add them
They do not see your name, username, or preferred contact method until they add you back

Bilateral friendships (both people added each other):

Friends can see information based on your profile visibility level setting:
- Name and primary contact method (default): Friends see your name, username, and primary contact method
- Name only: Friends see your name and username, but not your contact methods
- No information: Friends see only your username

Event invitations:

When you invite someone to an event or RSVP to a private event, the same visibility settings apply
Event hosts can see the information allowed by your visibility level
Collaborative event participants can see each other's information based on their individual visibility settings

You can change your profile visibility level at any time in your account settings.

Friend search

By default, others can find and add you as a friend using your username, email, or phone number. You can disable this feature in your settings under "Allow friend search." Even with friend search disabled:

People you add can still add you back from their "People Who Added Me" tab
You can still receive event invitations from anyone
People you're already bilateral friends with can still see your information based on your visibility settings

Blocking

You can block accounts to prevent them from inviting you to events or seeing you in friend searches. Blocked accounts are not notified that they've been blocked. You can unblock accounts at any time from your settings.

Security

We use multiple safeguards to protect personal information, including:

Transport security: HTTPS/TLS for every request
Data encryption: Supabase/managed database encryption at rest plus application-layer encryption for sensitive fields
Extra privacy: profile names and home addresses are explicitly encrypted before being stored so they remain private even inside our database
Access controls: role-based access, logging, and review
Abuse prevention: rate-limiting and bot/spam defenses

No method of transmission or storage is 100% secure; we continuously improve our protections.

Data retention

Account data: kept for your account’s lifetime; deleted when you delete your account
Security logs (incl. truncated IP): 30–90 days, retained longer only to investigate abuse or meet legal obligations
Event data: kept while active; past/cancelled events are deleted after 90 days unless you delete earlier
Backups: deleted on rolling schedules; deleted data is typically purged from backups within 90 days

International transfers

Where personal information is transferred outside your region (e.g., to the United States), we rely on appropriate safeguards, such as Standard Contractual Clauses or other mechanisms permitted by applicable law. Our core providers include Vercel, Supabase, Resend, and Twilio.

Your rights

All users: access, correction, deletion, and data export. Contact privacy@planerie.com; we may request information to verify your identity.

California (CCPA/CPRA): right to know, delete, and correct; to limit use of sensitive PI (if applicable); and to use an authorized agent. We do not sell or share personal information for cross-context behavioral advertising and honor Global Privacy Control (GPC) signals to the extent applicable. To exercise rights, email privacy@planerie.com.

EEA/UK (GDPR): rights of access, rectification, erasure, restriction, portability, and objection (where applicable). We do not engage in automated decision-making producing legal or similarly significant effects. You may lodge a complaint with your local supervisory authority.

Children’s privacy

The Service is not directed to children under 16 (EEA/UK users must be 16+). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact privacy@planerie.com and we will delete it.

Analytics & advertising

Analytics: aggregate, server-side metrics only (counts of screens/pages and actions). We do not use client-side analytics that track individuals across sessions/devices.
Advertising: we do not collect advertising IDs (IDFA/GAID), track you across other companies’ apps or sites, or share data with ad networks.

Changes to this policy

We may update this policy from time to time. We will post the updated policy with a new “Last Updated” date and notify you by email for material changes.

Contact us

Questions or rights requests: privacy@planerie.com
Response time: within 30 days (or as required by law)
Postal address: 40 Bennet St, Bridgeport, CT 06605

CCPA/CPRA “Notice at Collection” (California)

<table> <thead> <tr> <th>Category (examples)</th> <th>Purpose</th> <th>Retention</th> <th>Disclosed to</th> </tr> </thead> <tbody> <tr> <td>Identifiers (name, email, phone)</td> <td>Create/manage account; send invitations/OTP; support</td> <td>Life of account (then delete)</td> <td>Service providers (email, SMS, hosting/DB)</td> </tr> <tr> <td>Customer records (home address, optional)</td> <td>Suggest nearby locations</td> <td>Until removed by you; account life</td> <td>Service providers (hosting/DB; maps for queries)</td> </tr> <tr> <td>Internet/network info (IP, User-Agent, diagnostics)</td> <td>Security, fraud prevention, reliability</td> <td>30–90 days (longer only for investigations)</td> <td>Service providers (hosting/DB)</td> </tr> <tr> <td>In-product content (event details, notes)</td> <td>Provide the Service to you and invitees you select</td> <td>Active + 90 days (unless you delete sooner)</td> <td>Invitees (you choose); hosting/DB</td> </tr> <tr> <td>Geolocation (approx., derived from address)</td> <td>Location suggestions</td> <td>Until removed; account life</td> <td>Maps provider (query processing)</td> </tr> <tr> <td>Friend connections (usernames, nicknames)</td> <td>Enable friend requests and bilateral friendships; event planning with friends</td> <td>Until you remove the friend or delete your account</td> <td>Bilateral friends (based on visibility settings); hosting/DB</td> </tr> </tbody> </table>

We do not sell or share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes requiring a right to limit under California law.