Privacy Policy
Last updated: 10 October 2026
Planit (“Planit”, “we”, “us”) is a travel planning app for iPhone, available at get-planit.com. Planit is operated by an individual based in the European Union, who is the data controller for the personal data described here. This policy explains what we collect, why, who we share it with, and the choices you have.
Questions or requests: ashtonbarg28@gmail.com.
What we collect
Waitlist
If you join the waitlist on this website, we store your email address with our email provider, Resend, to tell you when Planit launches and send occasional early-access updates. Every email has an unsubscribe link.
Account information
Your email address and a password (stored only as a secure hash by our authentication provider), or your Google account email if you sign in with Google.
Trips and bookings
Trips you create and the bookings in them: for example flight numbers, hotel names and addresses, dates and times, confirmation codes, traveller names, prices, and notes. We also store the ratings and memories you add to past trips.
Emails you forward to us
When you forward a message to bookings@get-planit.com, we receive that message, including its sender, subject and content, so we can find booking details in it. We only accept forwards from email addresses linked to your Planit account.
Gmail data (only if you connect Gmail)
If you choose to connect Gmail, you grant Planit read-only access (the gmail.readonly permission). We use it to:
- search your mailbox for messages whose subject suggests a travel booking (for example “confirmation”, “itinerary”, “reservation” or “e-ticket”), excluding Promotions and Social;
- read those messages’ sender, subject, date, body and authentication results to extract booking details;
- store a record of which messages we have already processed, so they are not imported twice.
We never send, delete, label or change any email. We store the Google refresh token needed to keep your connection active; it is held on our servers and is never sent to the app.
Information stored only on your device
Destinations you save in Discover are kept on your iPhone and are not sent to us.
How we use your information
- To provide the app: show your trips, import bookings, detect possible duplicates, and show check-in reminders.
- To extract booking details from forwarded or Gmail messages using automated processing (see “Who we share data with”).
- To keep the service secure, prevent abuse, and fix problems.
We do not sell your personal data, use it for advertising, or build advertising profiles. We do not use your emails or booking data to train AI models.
Legal bases (GDPR)
- Contract: to provide the features you ask for, including importing bookings.
- Consent: for connecting Gmail. You can withdraw consent at any time by disconnecting Gmail in Planit or at myaccount.google.com/permissions.
- Legitimate interests: to keep the service secure and working.
Who we share data with
We use these service providers (“processors”) to run Planit. They may only process your data on our instructions:
- Supabase: database, authentication and server functions. Data is stored in the EU (Ireland).
- Resend: receives emails sent to bookings@get-planit.com.
- Google (Gemini API): reads the text of booking emails to extract booking details. We use Google’s paid API tier, under which Google does not use the content to improve its products.
- Google (Gmail API): only if you connect Gmail.
Some of these providers may process data outside the EU. Where they do, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
We may also disclose information if required by law.
How long we keep data
- Trips, bookings, and the record of imported emails: until you delete them or delete your account.
- Gmail access: until you disconnect Gmail or delete your account, at which point we delete the stored token.
- Forwarded email content is held by our email provider for a limited period and is not stored in our database beyond the extracted booking details, sender and subject.
Your rights
You can access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent. To delete your account and all associated data, email us from your account’s email address. You also have the right to complain to your local data protection authority.
Security
Data is encrypted in transit. Access is restricted so each user can only see their own data, and Gmail tokens are never exposed to the app.
Children
Planit is not intended for children under 16, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date above, and for significant changes we will notify you in the app or by email.