Your data, kept to a minimum.

Who we are

unplan.me (“unplan”, “we”) runs the website at unplan.me and the app at app.unplan.me. Questions about privacy go to our privacy address.

What we collect

When you use the app

• Account: your email address, the first name you give us, and your sign-in method (Apple, Google or a 6-digit email code).
• Your couple: who you’re paired with, and the guardrails you set together: home base (a map point, not your street address), radius, budget, how you get around, food rules, the no-alcohol rule and your free nights.
• Plans: the sealed plans we make for you, your votes, check-ins on the night (“We’re done here”), your afterglow rating and tags, and the one photo you choose to add.
• Notifications: a push token for your device and your notification settings.
• Payments: if you pay, Stripe processes your card. We only see that a payment happened, what it was for, and the last four digits of the card.
• Services and the assistant: the requests you make to our assistant, what it remembers (see Your AI assistant), special dates you add (an anniversary, a birthday), the services you book through unplan and a private rating of a service you used.
• Romance quiz: after five dates you can answer a short quiz about what makes you feel loved. Your answers are private to you: your partner never sees them. If you switch sharing on, your partner sees only a tip for how to treat you on the night of a date, never your answers. You can change or delete your answers at any time.
• Referral code: if you signed up with a code from one of our city partners, we keep the code with your account (see Referral codes and city partners).

When you use the website

• Waitlist: your email and city. For the beta, optionally your partner’s email and which phone you use.
• Inviting your partner by email: if you type your partner’s address in the app, we send them your pairing link once and keep the address with that email for 30 days, then delete it.
• Venue submissions: the venue details you send us, plus your name and email as the contact.
• Partner applications (unplan.me/partners): the business details you send, and your name, email and optionally phone as the contact. We use them only to review the application and to contact you about it.

Automatically

• Technical logs: IP address, browser and error reports, used to keep the service running and secure.
• Product analytics: cookieless and aggregated in the app and by default on the website (for example “how many couples voted this week”). We don’t build advertising profiles. Links with ?src= or UTM parameters tell us which campaign a visit came from; the value is read from the link and never stored on your device.
• Website analytics with Google (only if you accept): on unplan.me we ask before using Google Analytics cookies, which tell us how visitors find us and which pages they read. Until you accept, Google gets only cookieless signals with no identifier stored on your device; if your browser sends Global Privacy Control or Do Not Track, Google Analytics is not loaded at all. Never in the app (cookies).
• A city guess on the website: to preselect your city on the home page and in the waitlist forms we use the approximate place your network appears to be in (a city and rough position that Cloudflare, which serves our site, already has for every request), and only if that isn’t available, your browser’s time zone. It is matched to the nearest launch city and returns only that city’s name, once, in your browser. You can always pick another city, and your choice wins. We don’t store the guess or your position, set a cookie for it, add it to your profile or send it to our analytics.

We never use background location. Check-in on the night is a tap.

What your partner can see

You share one account as a couple, but not everything is shared.

Private votes and ratings

Votes are blind. When your partner votes we tell you that they voted, never how. Reminder nudges never reveal a vote. Afterglow ratings stay private to each of you and are only used, in aggregate, to make next week’s plan better.

Services from partner businesses

Besides venues, unplan can introduce you to services around a date: a sitter, flowers, a car home, a class. We call the businesses behind them service partners (your partner on this page is always the other person in your couple). Every service partner is vetted by a person before it is listed, and none can pay for a better place: partners are chosen for fit and quality, never for what they pay.

• Nothing about you or your partner is sold or shared. Not with service partners, advertisers or data brokers.
• A service partner gets only what a booking needs: for example a time, a pickup address or a headcount, and only for that request. It reaches us through unplan, under a contract that forbids using it for anything else or contacting you outside the job.
• Through unplan. You find, request and pay for a service inside unplan. A service partner never gets your email address or phone number unless you choose to give them.
• Ratings are private. If you rate a service, the rating is yours: your partner doesn’t see it and the service partner doesn’t see it with your name. We see an average and a count.
• Offers are labelled as offers from a partner. A label is never a better position.

If you are a business that applies to be a service partner, we keep your application and contact details as the table below says.

Your AI assistant (the concierge)

Keep the Spark includes an assistant that learns what the two of you like and helps organise dates, occasions and extras: a quick date, an anniversary, a sitter on Saturday. It is the same system that plans your week, with a memory and a conversation on top.

• What it remembers. What you tell it, your guardrails and interests, the reasons behind your votes, your private afterglow ratings and tags, your journal and the special dates you add. Nothing else.
• You can see it, change it and delete it. Its memory is visible in the app. You can correct any item or delete it.
• When it is deleted. If you unpair or delete your account, the assistant’s memory goes with it. The memory is also included in Download my data.
• Private lanes. Each of you has a private channel with the assistant, so one of you can plan a surprise and the other never sees it. Neither of you can see the other’s private answers, ratings or surprises. What you both agreed to is in a shared lane.
• Nothing is booked or paid without your confirmation. The assistant shows the service partner, the price and the cancellation terms first, and acts only when you tap to confirm.
• It never invents. Every venue, partner and price comes from our vetted records or a live answer from the partner, never from the language model’s imagination. Code checks the model’s words before you see them.
• Quiet. Its messages count towards the same five notifications a week, unless you ask it for a reminder.

The assistant uses the language models listed below (Google’s Gemini, or Meta’s Llama run by Cloudflare Workers AI when Gemini is unavailable). It receives what the request needs, not your email address.

What you write to the assistant is kept for 30 days, then deleted. The memory you can see and edit stays until you delete it, unpair or delete your account. Drafts you never confirmed expire and are deleted after 90 days.

Connecting your own AI

If you already use an AI assistant such as Claude or ChatGPT, you can connect it to your unplan assistant (over a standard called MCP) so it runs on your own AI subscription.

• You create the connection, in the app. It gives your AI a token that belongs to you.
• It is scoped to you. It reaches your private lane and your couple’s shared lane, never another couple’s data, a partner’s private details or your partner’s private lane. The blind vote on your weekly plan can’t be reached this way.
• You can revoke it at any time in the app, and every call it makes is logged.
• Drafts only. Your AI can plan and add items to your list, but they are drafts. It cannot confirm, book or pay for anything. Only you can, in unplan.
• What your AI provider does with the conversation is covered by that provider’s own terms, not this page.

Confirmation emails and one-time links

When you ask to confirm something, for example a booking your AI drafted, we email a summary to the address on your account (never an address an assistant supplies) or give you a one-time link. These are account emails, not marketing, and they don’t count towards the five notifications a week because you started them. A link works once, expires quickly and belongs to you. Opening it only shows the summary: nothing happens until you press the confirm button, so a mail scanner or a link preview can’t confirm anything. A surprise you planned in your private lane never appears in your partner’s emails.

Referral codes and city partners

Some people run unplan in a city as a city partner (a reseller) and share a referral code. If you sign up with that code or link, we attribute your couple to them for 12 months. They earn a share of what unplan receives from you, and of what unplan earns from service partners they introduced. They see counts and amounts only, never your name, email, plans or anything else about you. A city partner has one level: nobody earns anything for recruiting other city partners.

Job applicants

If you apply for a role on our jobs pages, you sign in with LinkedIn first. LinkedIn tells us your name, email address and a LinkedIn ID (and whether LinkedIn has verified the email). We never get your password, contacts, posts or profile, and we do not post anything. You then give us your answers: your city, background, three venues and why, why you want to be involved, whether you can be reached on Thursday evenings and Friday mornings, and optionally a phone number and your LinkedIn profile address. If the link you came from carried a campaign tag (utm_source, utm_medium, utm_campaign), we keep that with the application so we know which post you saw.

Your CV file, if you attach one (when the form offers it), is emailed to our hiring inbox and is not stored on our servers. The application itself is stored in our database and read only by the founders.

How the AI review works. An AI assistant reads your application to suggest a score, a short summary and a draft reply for us. Step by step:

1. If you attached a CV, Cloudflare Workers AI turns the file into plain text. We do not keep the file or that text in our database.
2. The assistant receives your first name, the job and your city, your answers (including the role you chose), whether you gave a LinkedIn address or a CV, and the CV’s text. We do not send it your email address, phone number or LinkedIn ID, but your CV’s text may contain them if they are on your CV.
3. The model that reads it is Meta’s Llama, run by Cloudflare Workers AI. If that is unavailable, the same request goes to Google’s Gemini through Google’s paid API, under which Google does not use it to train its models.
4. These requests pass through Cloudflare AI Gateway, which keeps a log of each request and answer (so it includes your answers and the CV’s text) in our Cloudflare account, so we can check costs and errors. Only the founders can read it. The log holds our most recent 100,000 AI requests and deletes the oldest first; ask us and we delete your entries sooner.
5. The assistant’s score, summary and draft are stored with your application, and the summary is emailed to our hiring inbox.

If you did not give us your LinkedIn profile address and your CV contains it, we add it to your application. A person makes every decision and sends every email; the assistant never rejects or invites anyone on its own. Interviews are booked through Cal.com with the name and email you choose to give it.

We keep an application, our notes on it and its emails’ record for 12 months after you apply, then delete them. To withdraw or have it deleted sooner, reply to any email from us about it. Signing in with LinkedIn sets one cookie on this site, jobs_li, for 30 minutes: it is strictly necessary to send the application you started, and it is deleted once you apply.

Notifications

We still send at most five notifications a week per person, however many things you have going on: the weekly plan, the assistant, partner offers and reminders share that one budget. The Thursday teaser also always goes by email.

The city guide

The guide at unplan.me/<city> and in the app is public: anyone sees the same things on. Signed in, it is ordered by the interests you set and your own date style answers, never by anything we guess. Three things in it are about you, and each is yours alone:

• Your blind date pool: places you add as a hint for a future sealed plan. Your partner never sees it.
• Your answers on a card (We went, Not for us, We’d go again): they keep a show out of For you for six months. Your partner never sees your answer; they only notice that the show is gone from For you.
• The weekly guide email, if you ask for it: we keep the address and the city, and send nothing until you confirm by the link we email you. Every email has a one-click unsubscribe.

How we use your data

• To build your weekly plan: we filter venues in code against your guardrails, then a language model (Google’s Gemini, or Meta’s Llama run by Cloudflare Workers AI when Gemini is unavailable) picks from that shortlist and writes the teaser. It receives your couple’s preferences and the shortlisted venues, not your name, email or home base.
• To hold a table: a venue may receive the first name on the booking, the party size and the time. Nothing else.
• To send the Thursday teaser and up to five notifications a week, by push and email.
• To take payments, prevent abuse and fix problems.
• To tell you when unplan opens in your city, if you joined the waitlist.

Who else processes it

We use a small number of providers, each bound by a data processing agreement and only for the purpose listed.

Venue and weather data come from sources such as Google Places and Open-Meteo. We don’t send them personal data.

How long we keep it

Cookies

The app sets no non-essential cookies: it keeps your sign-in session on your device so you stay signed in, and its analytics are cookieless.

On the website (unplan.me) we ask once, in a banner, whether we may use Google Analytics cookies (_ga and _ga_<id>, kept by Google for up to 14 months) to see how people find us. Until you choose “Accept”, nothing is stored on your device for analytics: Google receives only cookieless, aggregated signals (Google Consent Mode). “No thanks” keeps it that way. Advertising storage is always off, and we never use Google’s data for ads. We remember your answer in your browser’s local storage (not a cookie, never sent to us), and you can change it at any time with Cookie settings at the bottom of every page. If your browser sends Global Privacy Control or Do Not Track, we don’t load Google Analytics at all and don’t ask.

If you apply for a job and sign in with LinkedIn, the website sets one strictly necessary cookie for 30 minutes so the application you started can be sent (job applicants). There are no advertising or social-media trackers.

Do Not Sell or Share My Personal Information

We don’t sell your personal information, and we don’t share it for cross-context behavioural advertising. That’s true for everyone, not only California residents, so there is nothing to opt out of. We also honour Global Privacy Control signals automatically.

If you live in California (or another US state with a similar law) you have the right to:

• know what personal information we hold about you and how we use it;
• get a copy of it (in the app: Us → Account → Download my data);
• correct it;
• delete it;
• limit the use of sensitive information. The only sensitive information we use is your home base, and only to plan dates near you.

To use any of these rights, email our privacy address from the address on your account, or use the options in the app. We answer within 45 days and won’t treat you differently for asking.

If you are in the EU or the UK

Who is responsible. The controller of your personal data is Intars Olbiks t/a unplan.me, in the United Kingdom. Write to our privacy address about anything on this page. Because we are based outside the EU, we have appointed a representative in the EU under Article 27 of the GDPR: Agnese Olbika, in Riga, Latvia, at our EU representative’s address. You may write to the representative instead of us about anything on this page.

Why we may use your data (lawful bases).

When you write to us. Messages to our city and partner addresses, our Telegram or WhatsApp accounts and our site forms land in one inbox our team uses. We keep your name or handle, your address or number and your words. Only our team in that city and the owner read them; our software sorts them by rules, not by a language model. A conversation is deleted 365 days after it was closed. If you write “STOP” to a message we sent your business, we stop and keep your address on a do-not-contact list so it holds.

Transfers outside the EU and the UK. Some of our providers (Who else processes it) process data in the United States. Each is bound by the European Commission’s standard contractual clauses (with the UK addendum) in its data processing terms, and where a provider is also certified under the EU–US Data Privacy Framework, we rely on that as well.

Your rights. You can ask us to show you your data (the app’s Us → Account → Download my data gives you a copy at once), correct it, delete it (Us → Account → Delete my account and data), restrict or object to what we do with it, and take it elsewhere. Where we rely on consent, you can withdraw it at any time; it does not affect what we did before. We answer within one month.

You may also complain to a supervisory authority. In Latvia that is the Data State Inspectorate (Datu valsts inspekcija), dvi.gov.lv; in the UK, the Information Commissioner’s Office, ico.org.uk. We would like the chance to fix it first.

Automated decisions. The weekly plan is chosen by our code from places that fit the rules you set, and a language model writes its words. That is not a decision with legal or similarly significant effects on you, and you can always veto it.

How long we keep it. As in How long we keep it, and in addition: messages to our inbox 365 days after the conversation closes; our log of emails sent to businesses 24 months; QR scan counts 13 months; the audit of our own staff’s actions 24 months, then archived for 7 years.

Deleting your account

In the app, go to Us → Account → Delete my account and data. Or email our privacy address from the address on your account.

• Your account, votes, ratings, push tokens, the assistant’s memory and your product analytics profile are deleted within 30 days.
• Your partner is told you’ve left, not why. Leaving ends the couple, as unpairing does: your partner can download your couple’s journal and photos for 30 days, then they are deleted.
• A subscription stops when you delete your account; your partner keeps the time already paid.
• We keep a record of which version of our terms and this policy you accepted, and when, until your account is deleted.
• If you have an active subscription, cancel it first so you aren’t charged again.
• We keep payment records for as long as tax law requires.

To come off the waitlist, use the unsubscribe link in any email or write to us.

Children

unplan is for adults. You must be 18 or older to use it.

Changes

If we change this policy in a way that matters, we’ll tell you by email or in the app before it takes effect.