Privacy Policy

1. What information do we collect?

• Account information: name and email address when you register.
• Third-party sign-in: when signing in with Google, Apple, or Facebook, we receive your name and email from that service.
• Location and settings: language is taken from your phone's language (on the website: your browser's language). Currency and citizenship are taken from your phone's region (on the website: your browser's region, otherwise the country derived from your IP address). These are auto-filled only once and never overwritten afterwards — you can change them yourself at any time in your profile. Your departure location is suggested as the nearest larger airport based on your IP address, but only when your IP country matches your region. The IP address is looked up locally on our own server, is not stored, and is not shared with anyone. IP Geolocation by DB-IP (https://db-ip.com). Precise location (GPS) is only used when you tap "Use current location" yourself — the coordinates are then sent to our server only to find the nearest airport, and are not stored. Travel Safety is shown based on the citizenship in your profile, where information is available for that country.
• Push token: if you accept notifications, we store your device's push token to send price alerts and travel inspiration.
• Travel preferences: departure city, travel style, budget, and preferred currency as set in your profile.
• Search history: flight and hotel searches are stored locally on your device and can be deleted at any time from your profile.
• Trip plans: trip plans you create are stored in our database linked to your account.

2. How do we use this information?

• To provide you with a personalised travel experience.
• To send push notifications about price changes and travel inspiration (only if enabled by you).
• To improve the AI assistant's responses based on travel style and budget.
• To send emails for account confirmation and password reset.

Usage data

To improve the app, we look at how it is used, including searches, clicks, selected language and trip plan names. This is used internally only and shown without names or email addresses. It is not shared with others or used for advertising.

3. Sharing with third parties

We do not share personal data with advertisers or sell it. We use the following third-party services:

• Supabase – database storage and authentication (EU infrastructure).
• Expo / Expo Push – push notifications.
• Anthropic (Claude) – AI assistant. Conversation content is sent to Anthropic for processing. See Anthropic's privacy policy.
• Google, Apple, Facebook – optional social sign-in.
• RapidAPI / Expedia – flight and hotel search.
• OpenRouteService – driving route calculation.

4. Storage and security

Your data is stored securely in Supabase with encryption in transit (TLS). Access is restricted using Row Level Security policies.

5. Your rights

• Account deletion & backups: see the delete-account page (plantravelapp.com/en/delete-account) for a full overview of what is deleted, including any attachments/documents you uploaded. Database backups are automatically deleted within 7 days.
• Access: you can view your data in your profile.
• Deletion: you can delete your account and all associated data directly from your profile in the app.
• Notifications: you can turn off push notifications at any time in your profile or in your phone's settings.
• Data export: you have the right to receive your personal data in a machine-readable format (GDPR Article 20). Send an email to kontakt@nordicdigitalapp.no to request this.

6. Children

PlanTravel is not directed at children under 16. We do not knowingly collect information from children.

7. Changes to this policy

We may update this policy. Significant changes will be notified in the app. Continued use after an update constitutes acceptance.