Privacy Policy

1. Who we are

Plan by Price ("Plan by Price", "we", "us", "our") is an independent business based in Newfoundland and Labrador, Canada. We are responsible for the personal information described in this policy. This policy covers the Plan by Price iPhone app (the "App"), the website at planbyprice.com and its shared trip pages (the "Website"), and the services behind them (together, the "Service").

Our privacy contact, who is responsible for our compliance with this policy, can be reached at hello@planbyprice.com.

2. Information we collect

Information you give us

• Account information: your email address and a unique account ID. If you sign in with Apple or Google, we receive the name and email address that service shares with us. With Sign in with Apple you can choose to hide your email, in which case we only receive a relay address.
• Trips: the destinations, dates, budgets, currencies and itineraries you save, including drafts, times you set and edits you make.
• Community content: trips you publish to Explore, plus the likes, reports (including the reason and any note you add) and blocks you make there, and any moderation decisions about your account or posts.
• Messages: anything you send us by email, such as support requests.

Information collected automatically

• Usage records needed to run the Service: how many itineraries your account has generated and how many itinerary credits you have left.
• Purchase status: whether you have an active Annual Pro subscription (and when the current period ends) or Trip Pack credits, as confirmed by Apple. We don't receive your payment card or billing address.
• Messages you send us: if you use the contact form or email us, your name (if given), email address, the topic and your message, so we can reply.
• Technical and log data: when the App or Website contacts our servers, our hosting providers record standard information such as IP address, date and time, the page or endpoint requested, and device or browser type. We use it to deliver the Service, keep it secure, prevent abuse and apply rate limits.
• Search requests: the cities you search for and the destination, dates and currency you plan for, which we use to fetch activities and prices.

Information stored only on your device

The App keeps some information on your iPhone rather than our servers: your currency and appearance settings, your free-itinerary count if you aren't signed in, booking checklist progress, and records of processed purchases. Deleting the App removes it.

What we don't collect

We don't collect your precise location, contacts, photos, health data or payment card details. We don't use advertising identifiers, third-party advertising, tracking pixels or third-party analytics, and we don't "track" you as Apple defines it. The Website doesn't set advertising or analytics cookies.

3. How we use your information

• To provide the Service: sign you in, build and save itineraries, sync your trips, show Explore, apply your plan and credits, and restore purchases. (Legal basis where applicable: performance of our contract with you.)
• Account emails: sign-in codes, a one-time welcome email when you create an account, and a confirmation when your account is deleted.
• Marketing emails (only if you opt in): travel deals and news about new features. Asking is optional and the choice starts switched off. We keep a record of when you opted in or out, as Canadian anti-spam law requires. Unsubscribe with the link in any of these emails or in the App under Settings › Email updates. Our email provider (Resend) holds the mailing list.
• To keep the Service safe and working: prevent fraud, spam, scraping and abuse, moderate community content, enforce our Terms, fix bugs and plan capacity. (Legitimate interests.)
• To communicate with you: send sign-in codes, answer support requests and tell you about important changes to the Service or these terms. We don't send marketing emails unless you've opted in. (Contract, legitimate interests, or consent.)
• To meet legal obligations: keep records required by law, respond to lawful requests and protect our rights. (Legal obligation.)

We don't use your information to make decisions that have legal or similarly significant effects on you based solely on automated processing.

4. Who we share it with

We don't sell, rent or trade your personal information, and we don't "share" it for cross-context behavioural advertising. We disclose it only as described below.

Service providers

These categories of providers process information on our behalf, under contracts that limit its use to providing their service to us:

• Cloud database and authentication: stores your account, trips and community activity, and delivers sign-in emails.
• Website and API hosting: runs the Website and the servers the App talks to.
• Security and abuse prevention: short-lived counters keyed to IP address that limit excessive requests.
• Google: Google Sign-In, if you choose to sign in with Google.
• Apple: Sign in with Apple if you choose it; processing of all in-app purchases and subscriptions; and Apple's built-in Translate feature, which translates an activity's text when you tap Translate. All under Apple's own privacy policy. We don't receive what you translate.

Data and booking partners

• To build itineraries, our servers send the destination, its map coordinates and your currency (never your name or email) to our booking partner for paid activities and prices, and to places and open-data providers for free things to do and places to eat.
• When you tap a booking or map link, you leave Plan by Price and go to the partner's website or app (such as our booking partner or Apple Maps). Booking links contain our affiliate ID so the partner knows we referred you. That partner may use cookies and collect information under its own privacy policy, which we don't control.

Other people

• Explore: if you publish a trip, other users can see the itinerary, destination, budget and spend, likes, the date posted, and your first name (or "Traveler" if we don't have one). Your email is never shown.
• Shared links: anyone with a trip's share link can view that itinerary on the Website. Share links are hard to guess, but treat them like the trip is public.

Legal and business reasons

• If required by law, court order or other lawful request, or where we believe in good faith it's needed to protect the rights, property or safety of our users, the public or us.
• If Plan by Price is involved in a merger, acquisition, financing or sale of assets, your information may be transferred to the new owner, who must respect this policy.

5. Where your information is stored

We and our providers may store and process your information in Canada, the United States and other countries whose data protection laws may differ from those where you live, and where it may be accessible to courts and authorities of those countries. Where the law requires it, we use appropriate safeguards for international transfers, such as standard contractual clauses.

6. How long we keep it

• Account and trips: until you delete them or your account.
• After account deletion: your account is closed immediately, and your profile, saved trips, Explore posts, likes and blocks are erased from our live systems within 30 days. Copies in encrypted backups are overwritten within a further 30 days.
• Reports of objectionable content and moderation records: for as long as needed to review them and protect the community.
• Free-tier record: when you delete your account we keep a one-way, keyed fingerprint of your email (not the email itself) and how many free itineraries you used, so deleting and signing up again doesn't reset the free tier. It can't be turned back into your email.
• Support messages: up to 2 years after we resolve them, then deleted.
• Server and rate-limit logs: typically for a few days to a few weeks, as set by our hosting providers.
• Support emails: as long as needed to help you, then deleted.

We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.

7. How we protect it

Data travels over encrypted connections (HTTPS). Our database enforces row-level security so each signed-in user can only read and change their own private data. Server keys are never shipped in the App. No method of transmission or storage is 100% secure, so we can't guarantee absolute security. If a breach creates a real risk of significant harm, we will notify you and the relevant authorities as the law requires.

8. Your choices and rights

• Use it without an account: you can build your free itineraries without signing in.
• Edit or delete trips and remove Explore posts at any time in the App.
• Delete your account in the App under Settings › Delete account, or email us. This doesn't cancel an App Store subscription; cancel that in your Apple ID settings.
• Stop Sign in with Apple or Google access from your Apple ID or Google account settings.

Depending on where you live (for example in Canada, including Québec, the European Economic Area, the United Kingdom, or US states such as California), you may have the right to access your personal information; correct it; delete it; receive a copy in a portable format; withdraw consent; object to or restrict certain processing; and not be discriminated against for using these rights. To use any of them, email hello@planbyprice.com from the address on your account. We may need to verify your identity, and we'll respond within 30 days (or sooner if your local law requires it). You may use an authorised agent where the law allows.

If you're not satisfied with our response, you can complain to your local data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. Children

The Service isn't directed to children under 13 (or the minimum age required in your country), and we don't knowingly collect their personal information. If you believe a child has given us personal information, email us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We'll change the effective date above and, if the changes are significant, tell you in the App or by email before they take effect.

11. Contact

Questions, requests or complaints about privacy: hello@planbyprice.com.