Planmates Privacy Policy

Platform: Planmates (planmates.app)

Ownership: Digital project operated by its individual owner.

Geographical scope and jurisdiction: Spain / European Union.

Contact for privacy and rights inquiries: privacy@planmates.app

(Full identifying details of the owner will be provided upon legitimate request by competent administrative or judicial authorities, or for the direct handling of formal data protection requests).

Planmates services are intended exclusively for individuals aged 18 and older. Registration, access, or use of the platform by minors is strictly prohibited.

We do not deliberately collect personal information from minors. If we become aware that a person under 18 has registered or provided personal data, we will immediately suspend the account and permanently delete all associated data from our servers.

We only collect the data strictly necessary for the technical operation and security of the platform:

• Account & registration data: Email address, username, and profile photograph provided during registration or when logging in via secure authentication.
• Usage & activity data: Leisure plans you publish, applications to join activities posted by other users, and public reviews/ratings exchanged with other members after an activity.
• Internal communications: Messages exchanged through the app's internal chat before scheduling an activity, securely stored solely to enable communication between participants.
• Technical & connection data: IP address, device type, operating system, and technical identifiers strictly necessary to ensure security, prevent fraud, abuse, or impersonation attempts.

We process your data under the following purposes and legal bases:

• Service management (Contract performance): Creating and managing your user account, enabling publication and application to plans, and providing internal messaging.
• Community safety (Legitimate interest): Reviewing plans to prevent unlawful content or violations of community guidelines, fraud prevention, spam control, and managing blocks or user reports.
• Service communications (Legitimate interest): Sending transactional notifications necessary for service operation (account confirmations, password resets, activity notices).
• Legal compliance (Legal obligation): Responding to requests from competent authorities and complying with applicable electronic commerce and data protection laws.

Note: Planmates does not sell your data to third parties and does not use third-party advertising tracking tools (third-party ad trackers).

To ensure proper technical operation of the platform, we rely on top-tier technology service providers complying with EU data protection and security standards:

• Database and authentication: Supabase (secure infrastructure in data centers located within the European Union).
• Transactional email delivery: Transactional email providers (such as Resend) used exclusively for system notifications and account verification.

Planmates uses only strictly necessary technical and session cookies to:

• Keep your session securely active.
• Remember your basic browsing preferences (such as selected language).

We do not use advertising tracking cookies or invasive analytics cookies that share your browsing profile with ad networks.

We retain your personal data only as long as you maintain your account active on Planmates.

Voluntary account deletion: You can request complete deletion of your account and personal data at any time from your profile settings or by sending an email to privacy@planmates.app.

Deletion process: Upon processing your request, your personal identification data, messages, and plans are permanently and irreversibly removed from our active databases, except for technical or audit information that we are legally required to retain during statutory retention periods to address potential legal liabilities.

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Know what personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure (Right to be forgotten): Request total deletion of your personal data.
• Objection & Restriction: Object to processing or request restriction under certain circumstances.
• Portability: Request a structured copy of your data in a readable format.

To exercise any of these rights, send an email to privacy@planmates.app indicating your username and the right you wish to exercise. If you believe the processing of your data infringes applicable regulations, you have the right to lodge a complaint with the competent supervisory authority (in Spain, the Spanish Data Protection Agency - AEPD via www.aepd.es).

We reserve the right to update this Privacy Policy to adapt to legal developments, case law, or technical improvements on the platform. Any significant changes will be communicated through the website or app prior to taking effect.