Privacy Policy

Last updated: October 13, 2026

Plavia ("we", "the app") is an AI-powered planning app that builds itineraries for dates, hangouts, family outings, and other occasions. This policy explains what we collect, why, and what you can do about it.

Information you give us

• Account: your email address and password, handled by Firebase Authentication. We never see or store your password ourselves.
• Profile: your name, home city, phone number (optional), and your preferences (cuisines, activities, budget range, selected states).
• Plans you create: the occasion, group size, budget, vibe, dress style, date and time, and the generated itinerary.
• Dietary and accessibility needs: the planner asks whether you have any, and offers allergies, dietary restrictions and wheelchair access as examples. Anything you enter is treated as a hard requirement, so every venue in the plan has to satisfy it. That means this field can contain health information (such as an allergy) and information about a disability. We use it only to choose venues that work for you. It is stored with the plan and deleted when the plan is deleted, and you can always leave it blank.
• Reviews you post: your rating, caption, the venue and activity names, any photo you choose to attach, and optionally a link to a TikTok video.
• Your TikTok handle: if you add one to your profile, we store it and show it on your profile and reviews. It is optional and you can remove it at any time.
• People you share a plan with: when you send a plan for someone to approve, we store the email address or phone number you send it to, together with that plan, so the recipient can open it and respond. Only send a plan to someone who is expecting it. We use that contact detail solely to deliver and display the plan — we do not market to it, sell it, or add it to any list. Deleting the plan removes it from your saved plans; the approval record holding that contact detail is kept separately so the recipient's response still resolves, and is removed when you delete your account.

Information collected automatically

• Push notification token: a device token from Firebase Cloud Messaging, so we can tell you when someone responds to a plan you shared.
• Approximate location: if you allow it, we use your device location to centre plans and Quick Find results near you and to show reviews from your area. We use it at city level — we resolve your coordinates to a city name and store that city, not a precise position or a location history. Location is only read while the app is open, never in the background. You can decline, or turn it off later in iOS Settings, and set a city manually or type a different area for any individual plan instead.
• Usage counters: how many plans your account has generated, and your remaining plan credits, used to apply your plan allowance and to prevent abuse.
• Sponsored place counter: how many plans you have made in each city, so a sponsored place appears in at most one of every four. It holds no plan details and is deleted with your account. When a sponsored place is shown, saved, swapped, or tapped for directions, we add one to that sponsor's daily totals without recording who did it.
• Crash reports: if the app crashes, Firebase Crashlytics sends us diagnostic data (device model, OS version, and the stack trace) so we can fix it.

How your plan requests are processed

To generate a plan, the details you enter — occasion, city or state, date and time, group size, budget, vibe, dress style, and any notes or needs you type — are sent from our server to a large language model, which writes the itinerary and may run web searches to confirm that venues are real and currently open. Depending on the request we use OpenAI or Anthropic; for full plans OpenAI is used first and Anthropic is the fallback, and either provider may handle your request if the other is slow or unavailable.

We do not send your name, email address, phone number, or account identifier to either provider. Only the planning details above are sent. Please avoid typing personal information you would not want processed by them into the free-text fields.

Improving Plavia, including AI training

We keep a record of the plans Plavia generates and how you responded to them — for example whether you saved a plan, swapped a suggested venue for a different one, or rated it afterwards. We use this to measure and improve suggestion quality, and we may use it to train or fine-tune our own AI models so that Plavia gets better at planning over time.

This record is linked to your account identifier so you can request its deletion, but it does not include your name, email address, or phone number. It can include the free text you typed, including any dietary, allergy or accessibility needs, because those form part of the request the plan was built from. If we publish or share any analysis from this data, it will be aggregated or de-identified — never presented in a way that identifies you.

If you'd rather we didn't use your activity for model training, email us at the address below and we'll exclude your account.

Who we share with

We do not sell your personal information or share it with restaurants or other advertisers. Plavia may use the city, date, time, and preferences in a planning request to decide whether an eligible sponsored venue fits. Sponsors receive aggregate campaign totals, such as impressions, picks, saves, swaps away, and directions taps. They do not receive names, contact details, precise locations, plan details, or information about individual users.

Otherwise, we share data only with the service providers that make the app work:

• Google Firebase — authentication, database, file storage, push notifications, crash reporting, and hosting.
• OpenAI and Anthropic — plan generation, as described above.
• Yelp — venue ratings, photos and business details used to check and illustrate the places we suggest. We send Yelp the venue we are looking up, not anything about you.
• RevenueCat — purchase and subscription management. If you are signed in, your account identifier is shared with RevenueCat even before you buy anything, so that a purchase can be attached to the right account.
• Apple — payment processing for subscriptions. We never receive your card details.

We may also disclose information if required by law.

What other people can see

• Reviews you post are public to other signed-in Plavia users, including your display name, initials, rating, caption, and any photo you attach.
• Your profile details, saved plans, and plan history are private to you.
• If you share a plan using "Send to Accept", the person you send it to can see that plan's contents.

Your choices

• Delete your account: Settings → Delete Account. This removes your account and associated data. Public reviews you posted may remain.
• Opt out of AI training: email us and we'll exclude your account's activity from model training.
• Notifications: turn push notifications off in Settings or in iOS Settings at any time.
• Access or correction: edit your profile in the app, or contact us below for anything else.

Depending on where you live (for example, the EU/UK under GDPR, or California under the CCPA), you may have additional rights to access, correct, delete, or port your data. Contact us and we will honor those requests.

Data retention

We keep your account data for as long as your account exists. When you delete your account we delete your profile, saved plans, reviews, the approval records for plans you shared, your training-activity records, your follows, and your credit and subscription balances. Backups and logs may persist for a short period afterwards.

That includes the records of the plan requests themselves — the criteria a plan was built from, including anything you typed in the dietary and accessibility field.

One thing deliberately survives account deletion:

• A record that your device and email have already used the free plan allowance. It holds a one-way hash of your email address and an identifier for your device — not your email itself, and nothing about your plans. Without it, deleting and recreating an account would reset the free allowance indefinitely. We keep it solely to prevent that.

Children

Plavia is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has given us information, contact us and we will delete it.

Changes

If we change this policy materially, we will update the date above and, where appropriate, notify you in the app.

Restaurants that sign up as sponsors

If you sign up a restaurant on our sponsor page, we keep the business details you send us (the restaurant name, your name, business email, phone, city, Yelp link, and message) to review the request and run the sponsorship. We also keep a one way hash of the internet address the form came from, to stop spam. Sponsorship payments are handled by Stripe, and we never receive card details. Your private dashboard link shows only aggregate totals for your venue. Email us to have these details corrected or deleted.

Contact

Questions, requests, or complaints: support@planwithplavia.com