Privacy Policy

Data Controller

Planora is an iOS travel planning app developed independently. For any privacy-related inquiry, contact: support@planora.kikocastellani.fr.

Data We Collect

Planora collects only the data required to operate the app:

• Account: email address, first name, last name, nickname, profile photo (end-to-end encrypted), preferred language, currency and country;
• Authentication: Apple ID (if using Sign in with Apple), access token (stored locally on device only);
• Trips: title, destination, dates, timezone, currency, status, invitation code;
• Organization: events, activities, checklist, packing list, formalities, budget and expense splits;
• Journal & Documents: end-to-end encrypted on device before upload — the server never receives readable content;
• Chat: end-to-end encrypted messages and media, plus metadata required for delivery (sender, date, trip);
• Purchases: when you buy Planora Pro, a transaction identifier, product identifier, purchase date, and environment (production or sandbox) are stored to verify your Pro status;
• Location: device location, only if you grant permission, to center the trip map — never sent to the server;
• Technical data: server logs required for security and abuse prevention.

Sign in with Apple

If you use Sign in with Apple, Planora receives a unique Apple identifier and, depending on your choice, your name as provided by Apple. This data is used solely to create or identify your account. Apple's privacy policy governs that transmission.

In-App Purchases

When you buy Planora Pro, Apple processes the payment: Planora never receives or stores any card details. After cryptographically verifying the StoreKit receipt provided by Apple, Planora retains only the metadata needed to recognize your Pro status: transaction identifier, product identifier, purchase date, and environment. This data is tied to your Planora account and deleted along with it.

How We Use Your Data

Collected data is used to:

• create and manage your account;
• sync and display your trips;
• enable collaboration between trip members;
• display weather forecasts for your trip destinations;
• display currency exchange rates;
• secure authentication and prevent abuse;
• enable account export and deletion.

Data Sharing

Trip data is visible to the members of that trip, according to the visibility setting you choose (shared, private, or custom). Planora does not sell your data and does not share it with any advertising third parties.

End-to-End Encryption

Profile photos, the journal, documents, and chat are encrypted on your device before being sent. The server stores only ciphertext and key envelopes intended for authorized members. Planora cannot access the readable content of these items.

Chat Reporting & Blocking

Chat remains end-to-end encrypted. If you choose Report, your explicit consent sends only the selected message in readable form to support, with its reason and technical tracking identifiers; the full history is never sent. Account blocks are stored to prevent interactions.

Third-Party Services

The app uses third-party services for certain features:

• Apple Maps (MapKit): map display and routing — Apple's privacy policy applies;
• Weather provider: forecasts are provided by Apple Weather (WeatherKit) using the trip destination; no real-time location is transmitted;
• Exchange rate provider: public financial data with no personal data involved.

Data Retention

Data is retained while your account is active. Encrypted messages, journal entries, and documents are retained while the trip exists. Transient files linked to document requests are deleted after confirmed receipt or expiry. Deleting your account removes your personal data, subject to shared trip constraints (see Export & Deletion).

Your Rights

Depending on your country, you may have the following rights:

• Right of access to your data;
• Right to rectification;
• Right to erasure;
• Right to data portability (via the Export feature);
• Right to object to processing;
• Right to lodge a complaint with your local data protection authority.

To exercise these rights: support@planora.kikocastellani.fr.

Export & Deletion

You can export your data and delete your account from the app settings. Solo trips are deleted, shared trips you organize are automatically transferred to an eligible editor, and you leave other trips; your personal content and files are deleted.

Children

Planora is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has created an account, please contact us for removal.

Changes to This Policy

This policy may be updated when the app's practices change. The date at the top of this page reflects the most recent revision. For significant changes, a notice will appear in the app.

Contact

For any questions: support@planora.kikocastellani.fr.