The short version. Your vote and your afterglow rating are private, even from your partner. We don’t sell or share your data for advertising. We use no advertising or tracking cookies. You can delete your account from the app at any time.
Who we are
unplan.me (“unplan”, “we”) runs the website at unplan.me and the app at app.unplan.me. Questions about privacy go to privacy@unplan.me.
What we collect
When you use the app
- Account: your email address, the first name you give us, and your sign-in method (Apple, Google or a 6-digit email code).
- Your couple: who you’re paired with, and the guardrails you set together: home base (a map point, not your street address), radius, budget, how you get around, food rules, the no-alcohol rule and your free nights.
- Plans: the sealed plans we make for you, your votes, check-ins on the night (“We’re done here”), your afterglow rating and tags, and the one photo you choose to add.
- Notifications: a push token for your device and your notification settings.
- Payments: if you pay, Stripe processes your card. We only see that a payment happened, what it was for, and the last four digits of the card.
When you use the website
- Waitlist: your email and city. For the beta, optionally your partner’s email and which phone you use.
- Venue submissions: the venue details you send us, plus your name and email as the contact.
Automatically
- Technical logs: IP address, browser and error reports, used to keep the service running and secure.
- Product analytics: cookieless and aggregated (for example “how many couples voted this week”). We don’t build advertising profiles.
We never use background location. Check-in on the night is a tap.
What your partner can see
You share one account as a couple, but not everything is shared.
| Your partner can see | Your partner can’t see |
|---|---|
| Your shared guardrails, and who changed what | How you voted on a plan |
| That you’ve voted (never which way) | Your afterglow rating and tags |
| The plan, once you’ve both said yes | Your email notification settings |
| The journal photo either of you adds | Anything you tell support |
Private votes and ratings
Votes are blind. When your partner votes we tell you that they voted, never how. Reminder nudges never reveal a vote. Afterglow ratings stay private to each of you and are only used, in aggregate, to make next week’s plan better.
How we use your data
- To build your weekly plan: we filter venues in code against your guardrails, then a language model (Claude, by Anthropic) picks from that shortlist and writes the teaser. It receives your couple’s preferences and the shortlisted venues, not your name, email or home base.
- To hold a table: a venue may receive the first name on the booking, the party size and the time. Nothing else.
- To send the Thursday teaser and up to five notifications a week, by push and email.
- To take payments, prevent abuse and fix problems.
- To tell you when unplan opens in your city, if you joined the waitlist.
Who else processes it
We use a small number of providers, each bound by a data processing agreement and only for the purpose listed.
| Provider | What for |
|---|---|
| Supabase | Database, sign-in, file storage |
| Cloudflare | Hosting, security, spam protection (Turnstile on our forms) |
| Google Firebase Cloud Messaging | Push notifications |
| Resend | |
| Stripe | Payments |
| Anthropic | The language model that writes plan copy |
| Sentry | Error reports |
| PostHog | Cookieless product analytics |
Venue and weather data come from sources such as Google Places and Open-Meteo. We don’t send them personal data.
How long we keep it
| Data | How long |
|---|---|
| Account, couple, plans and journal | Until you delete your account |
| Waitlist sign-ups | Until your city opens, plus 12 months |
| Merchant contacts for listed venues | While the venue is active, plus 24 months |
| Rejected venue submissions | 90 days |
| Payment records | As long as tax law requires |
| Technical logs and error reports | Up to 30 days |
Cookies
We set no non-essential cookies, on the website or in the app. The app keeps your sign-in session on your device so you stay signed in. Analytics are cookieless. There are no advertising or social-media trackers, so there’s nothing to accept or decline.
Do Not Sell or Share My Personal Information
We don’t sell your personal information, and we don’t share it for cross-context behavioural advertising. That’s true for everyone, not only California residents, so there is nothing to opt out of. We also honour Global Privacy Control signals automatically.
If you live in California (or another US state with a similar law) you have the right to:
- know what personal information we hold about you and how we use it;
- get a copy of it;
- correct it;
- delete it;
- limit the use of sensitive information. The only sensitive information we use is your home base, and only to plan dates near you.
To use any of these rights, email privacy@unplan.me from the address on your account, or use the options in the app. We answer within 45 days and won’t treat you differently for asking.
Deleting your account
In the app, go to Us → Account → Delete my account and data. Or email privacy@unplan.me from the address on your account.
- Your account, votes, ratings and push tokens are deleted within 30 days.
- Your partner is told you’ve left, not why. Shared plans stay in their journal without your name.
- If you have an active subscription, cancel it first so you aren’t charged again.
- We keep payment records for as long as tax law requires.
To come off the waitlist, use the unsubscribe link in any email or write to us.
Children
unplan is for adults. You must be 18 or older to use it.
Changes
If we change this policy in a way that matters, we’ll tell you by email or in the app before it takes effect.