Privacy Policy

Data Controller

Planora is an iOS travel planning app developed independently. For any privacy-related inquiry, contact: support@planora.kikocastellani.fr.

Data We Collect

Planora collects only the data required to operate the app:

• Account: email address, first name, last name, nickname, profile photo (end-to-end encrypted), preferred language, currency and country;
• Authentication: Apple ID (if using Sign in with Apple), access token (stored locally on device only);
• Trips: title, destination, dates, timezone, currency, status, invitation code;
• Organization: events, activities, checklist, packing list, formalities, budget and expense splits;
• Journal & Documents: end-to-end encrypted on device before upload — the server never receives readable content;
• Chat: end-to-end encrypted messages and media, plus metadata required for delivery (sender, date, trip);
• Purchases: when you buy Planora Pro, a transaction identifier, product identifier, purchase date, and environment (production or sandbox) are stored to verify your Pro status;
• Location: device location, only if you grant permission, to center the trip map — never sent to the server;
• Technical data: server logs required for security and abuse prevention.

Sign in with Apple

If you use Sign in with Apple, Planora receives a unique Apple identifier and, depending on your choice, your name as provided by Apple. This data is used solely to create or identify your account. Apple's privacy policy governs that transmission.

In-App Purchases

When you buy Planora Pro, Apple processes the payment: Planora never receives or stores any card details. After cryptographically verifying the StoreKit receipt provided by Apple, Planora retains only the metadata needed to recognize your Pro status: transaction identifier, product identifier, purchase date, and environment. This data is tied to your Planora account and deleted along with it.

How We Use Your Data

Collected data is used to:

• create and manage your account;
• sync and display your trips;
• enable collaboration between trip members;
• display weather forecasts for your trip destinations;
• display currency exchange rates;
• secure authentication and prevent abuse;
• enable account export and deletion.

Data Sharing

Trip data is visible to the members of that trip, according to the visibility setting you choose (shared, private, or custom). Planora does not sell your data and does not share it with any advertising third parties.

End-to-End Encryption

Profile photos, the journal, documents, and chat are encrypted on your device before being sent. The server stores only ciphertext and key envelopes intended for authorized members. Planora cannot access the readable content of these items.

Chat Reporting & Blocking

Chat remains end-to-end encrypted. When you choose Report, the selected message is decrypted and sent to support, with its reason and technical tracking identifiers, to handle abuse reports and keep the service safe; this processing relies on Planora's legitimate interest in protecting its users. Your report action authorizes this targeted disclosure; the full history is never sent. Account blocks are stored to prevent interactions.

Third-Party Services

The app uses third-party services for certain features:

• Apple Maps (MapKit): map display and routing — Apple's privacy policy applies;
• Weather provider: forecasts are provided by Apple Weather (WeatherKit) using the trip destination; no real-time location is transmitted;
• Exchange rate provider: public financial data with no personal data involved.

Data Retention

Data is retained while your account is active. Encrypted messages, journal entries, and documents are retained while the trip exists. Transient files linked to document requests are deleted after confirmed receipt or expiry. Deleting your account removes your personal data, subject to shared trip constraints (see Export & Deletion).

Your Rights

Depending on your country, you may have the following rights:

• Right of access to your data;
• Right to rectification;
• Right to erasure;
• Right to data portability (via the Export feature);
• Right to object to processing;
• Right to lodge a complaint with your local data protection authority.

To exercise these rights: support@planora.kikocastellani.fr.

Export & Deletion

You can export your data and delete your account from the app settings. Solo trips are deleted, shared trips you organize are automatically transferred to an eligible editor, and you leave other trips; your personal content and files are deleted. Deleting your account triggers revocation of the associated Sign in with Apple token; if Apple is temporarily unavailable, Planora automatically retries the revocation.

Children

Planora does not set a global minimum age: minors may use the app. Minors' personal data is processed with the same data-protection safeguards as any user's. Where applicable law requires the involvement of a parent or legal guardian for a specific processing operation, Planora respects that requirement. You can contact us with any question about a minor's account.

Changes to This Policy

This policy may be updated when the app's practices change. The date at the top of this page reflects the most recent revision. For significant changes, a notice will appear in the app.

Contact

For any questions: support@planora.kikocastellani.fr.