Privacy Policy

1. Scope

PlanSway helps people discover, plan and organize real-world experiences, including events, entertainment, restaurants and related activities. This Privacy Policy explains the information we access and collect, how we use, store and share it, and how you can manage or delete it. If PlanSway becomes operated by an incorporated company, we will update this policy to identify that entity.

This policy applies to the PlanSway website, mobile applications, web app, and related services (together, the Service). Some features are available without creating an account. Other features, such as keeping saved Plans across devices, require an account.

2. Information we access and collect

Depending on how you use PlanSway, we may process the following information.

Account and authentication information

Your name or display name, email address, account identifiers, login-provider identifiers, verified authentication results, account settings and session/security information. If you sign in using a third-party provider such as Google or Apple, we receive the identity information that provider supplies with your authorization. We do not receive your Google or Apple password.

If you sign in with your email address, we ask for your email address and send you a 6-digit code to verify it.

If you sign in with Apple, Apple may provide a private relay email address instead of your real one. We keep an encrypted Apple credential only so that we can revoke Apple's authorization for PlanSway when you delete your account.

Guest use and device identifier

If you use PlanSway as a guest, the app creates a random device identifier that is stored on your device and used to open a guest session. When you later sign in, the data from your guest session is moved to your account.

Profile and preferences

Interests, preferred activities, onboarding selections, recommendation preferences, selected city, saved or selected Plans, and preferences inferred from requests or saved Plans.

Location

Your selected city or area and approximate location where relevant. If you choose to enable device location for a feature, we may process the location information required for that feature, which may be precise. Location permission is optional for normal city-based browsing.

Planning and usage activity

Your searches, planning requests, selected filters, recommendation interactions, saved Plans, reservation-status actions you report, pages/screens viewed and feature usage.

Device and technical information

Device type, operating system, browser, IP address, app version, application identifiers, diagnostics, logs and similar data necessary for operation, security and analytics.

Crash, performance and diagnostic information

We use New Relic as a service provider to help us monitor the performance, reliability, and stability of the PlanSway website and mobile application and to diagnose crashes, errors, and technical issues.

Depending on the device and platform, diagnostic information collected through New Relic may include:

• device model and operating system type or version;
• browser type;
• PlanSway application version;
• application session and performance information;
• crash reports, error information, and technical stack traces;
• network request URLs, together with response status, timing, and related performance information;
• a unique application installation or instance identifier used for diagnostic and performance purposes;
• approximate geographic information derived from the device's network or IP address; and
• technical information necessary to understand and troubleshoot the performance of the Service.

New Relic may temporarily process an IP address in order to derive approximate geographic information. According to New Relic's documentation, the IP address itself is not retained for reporting after that geographic information has been derived.

On the web, New Relic may use browser storage, such as local storage, to maintain a technical session identifier for performance and diagnostic monitoring.

We use this information to detect crashes, diagnose errors, measure application and website performance, investigate technical problems, and improve the reliability of PlanSway.

Information collected through New Relic is not used by PlanSway for advertising or cross-site or cross-context behavioral tracking.

PlanSway does not enable New Relic Session Replay. New Relic therefore is not used by PlanSway to reconstruct or replay users' screens or interactions.

New Relic processes this information on our behalf as a service provider. Its processing may involve infrastructure located outside Argentina, as described in Section 10 (International transfers) of this Privacy Policy.

Communications and feedback

Information you submit when contacting support, reporting a problem, responding to surveys, participating in the private beta or giving feedback.

Early-access and private-beta sign-ups

If you sign up for early access or the private beta, we collect the information you submit in the sign-up form, such as your email address.

Third-party information

Information we are permitted to receive from an authentication provider or from other third-party integrations you choose to use, as applicable.

We seek to collect only the data reasonably necessary to provide, operate, improve and secure the Service.

3. Sign in with Google: data access, use, storage and sharing

When you select Continue with Google, PlanSway uses Google Sign-In to authenticate you. PlanSway requests only the basic authentication and profile permissions (openid, email and profile) and does not request permission to read unrelated Google products.

Information we receive from Google

Your Google account's stable unique identifier, your email address and its verification status, your name or display name, and a link to your profile picture, which we store with your account but do not currently display or share. We also receive a short-lived identity token that we use to verify the sign-in.

How we use it

We use Google's verified identity to create or locate your PlanSway account, sign you in, maintain an authenticated session, protect your account and support account-related communications. If you sign in with Google, Apple or an email code using the same verified email address, we automatically connect them to the same PlanSway account; an unverified Google email is never used to link accounts. Your Google name fills your PlanSway profile name only if it is empty, and we show your name in your profile.

What we do not access

Google Sign-In does not give PlanSway access to your Gmail messages, Google Drive files, Google Calendar entries or Google Contacts, and the current sign-in flow does not request those permissions. If we introduce such features in the future, we will provide additional, specific disclosures and obtain any required permissions before accessing that data.

Storage and security

Our server verifies the signature, issuer, audience and expiry of the Google identity token before creating a PlanSway session, and does not store that token. We store your Google account identifier, your verified email address, your name and the link to your profile picture in our protected systems for as long as needed to maintain your PlanSway account, subject to the deletion and retention rules in Section 8. We do not store your Google password, and we do not write Google tokens or the identity information in them to our application logs.

Sharing

We do not sell your Google Sign-In data. We may make necessary information available to providers acting on our behalf to host, secure, operate or support PlanSway, under appropriate safeguards, and we may disclose information if required by law. We do not provide Google Sign-In profile information to advertisers, data brokers or information resellers.

Advertising and AI limits

Information obtained from your Google account through Google Sign-In is not used to target advertisements, for cross-context advertising, or to train generalized or non-personalized AI or machine-learning models. PlanSway's experience recommendations instead rely on interests and actions you provide within PlanSway, as separately described in this policy. Using Google to log in does not mean PlanSway can read your activity across Google services.

Your controls

You can revoke PlanSway's access in your Google Account's third-party connection settings. Revoking authorization does not by itself delete your PlanSway account or saved content. To delete your PlanSway account and associated personal data, use the deletion options in Section 8.

4. How we use personal information

We may use personal information to:

• operate PlanSway and provide the features you request;
• register, authenticate and manage accounts;
• generate Plans and recommendations;
• remember preferences and saved Plans;
• show events, places and experiences relevant to your selected city and interests;
• improve and develop our products, features, recommendation systems and AI functionality;
• analyze usage and investigate technical problems;
• respond to support requests and send service-related communications;
• prevent abuse, fraud, security incidents and violations of our terms;
• comply with legal obligations; and
• protect PlanSway's legal rights and the safety of our users.

Where applicable law requires consent or another lawful basis for processing, we will obtain or rely on that basis as appropriate.

5. AI and personalization

PlanSway uses automated systems and AI to interpret planning requests, organize experiences, generate Plans and personalize recommendations. Depending on the feature, this may involve requests and filters you enter, the preferences you select, Plans you save, and contextual information such as selected city and intended date.

We may share the information necessary to perform these functions with service providers processing it on our behalf, subject to appropriate safeguards. The AI providers we use receive the text of your planning request and the context needed to answer it, not your account identity or Google profile information.

Google Sign-In account information is not a source for training generalized AI models or advertising targeting. Personalization is based on your PlanSway preferences and PlanSway activity.

AI recommendations may be incomplete or inaccurate and do not guarantee opening hours, reservations, ticket availability, prices, age restrictions, accessibility, admission requirements or other characteristics of a venue or experience.

6. Advertising and sponsored content

PlanSway does not currently show sponsored content or ads.

If those features are offered in the future, PlanSway may use preferences, searches, saved Plans, selected location and interactions collected within PlanSway to personalize recommendations, sponsored placements or advertising shown inside PlanSway. Sponsored content will be identified where appropriate.

We do not sell personal information. We do not share personal information with unrelated third parties for their own cross-context behavioral advertising. Data obtained from Google through Google Sign-In is excluded from personalized advertising or retargeting. If our advertising practices materially change, we will update this policy and provide required notices or choices.

7. When we share information

We may disclose necessary information to:

• Service providers: businesses providing hosting, infrastructure, email delivery, maps, places and geocoding, analytics, diagnostics, security, customer support or AI processing on PlanSway's behalf, for the services they perform. This includes technical monitoring and diagnostics providers such as New Relic, which processes performance and error information on our behalf to help us identify crashes, technical problems, and performance issues.
• Authentication providers: Google, Apple or other services involved when you choose a particular login method, to complete and secure that authentication flow.
• External experience partners: event, ticketing, restaurant, mapping, transportation or other services you choose to open or interact with. Information you provide directly to those external sites is governed by their own policies.
• Authorities or relevant parties: where legally required, for security or to protect rights.
• Business successors: in connection with a future financing, incorporation, merger, acquisition, reorganization or sale of all or part of the business, subject to applicable law.
• Others at your direction: when you explicitly request or authorize a disclosure.

We do not grant third-party providers independent rights to use your PlanSway personal data for unrelated purposes merely by providing infrastructure services. We do not disclose Google Sign-In data for advertising or resale.

8. Data retention and account deletion

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including operating an active account, fulfilling user requests, maintaining security, resolving disputes, enforcing agreements and complying with legal requirements.

Account data

Your account identifiers, profile, preferences and account-linked saved Plans are generally maintained while your PlanSway account remains active, unless deletion or another legal requirement applies.

Authentication and technical records

Session and verification credentials, technical logs and security records are retained according to their operational purpose, applicable expiration and security controls, and any legal requirements.

Deletion

You can request deletion of your PlanSway account and related information:

• Online: plansway.com/en/delete-account (publicly accessible even if the app is uninstalled).
• In the app: Profile → Help → Delete my account.
• Support: support@plansway.com if you need help exercising your rights.

After verifying a deletion request where necessary, PlanSway removes your account and associated personal information according to the deletion procedure, except information we must retain for a legitimate legal or security purpose. The account deletion page describes the data categories and retention periods that apply, including data that is retained and guest data that is not linked to an account.

Deleting your PlanSway account does not delete your separate Google account or Apple ID. Revoking PlanSway's access in your Google Account is not by itself a request to delete your PlanSway account.

Where data is no longer needed, we delete, anonymize or aggregate it as applicable.

9. How we protect data

We apply reasonable technical, administrative and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure or loss. These include:

• encrypted connections (HTTPS) to the Service, with HSTS enforced on the website;
• session cookies that are HttpOnly, Secure and SameSite, so they are not readable by page scripts and are sent only over secure connections;
• server-side verification of Google sign-in tokens (signature, issuer, audience and expiry) before a session is created;
• one-way hashing of email sign-in codes and account-deletion links, so we do not keep them in readable form;
• encryption of the stored Apple credential, and keeping the guest device identifier in secure device storage on your phone;
• keeping the contents of authentication requests, such as tokens and codes, out of our production logs; and
• restricted access to our systems.

We treat sign-in tokens and account identifiers as sensitive security data. No method of transmission or storage is completely secure, and no electronic service can guarantee absolute security.

10. International transfers

PlanSway is operated from Argentina and may use service providers or infrastructure located outside Argentina or outside the country where you live. When personal information is transferred internationally, we apply the safeguards required by applicable law.

11. Your choices and privacy rights

Depending on where you live and the laws that apply, you may have rights regarding your personal information, including rights to:

• request access to personal information we hold about you;
• request correction or updating of inaccurate information;
• request deletion of personal information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request information about how your personal information is used or shared; and
• opt out of certain types of advertising, profiling or data sharing where applicable.

Users in Argentina may exercise the rights available under Argentine personal data protection law, including access, rectification, updating and deletion where applicable.

To exercise a privacy right or ask a privacy-related question, contact us at support@plansway.com. We may need to verify your identity before completing a request. You can also manage device-location permissions in your device settings and third-party connections in your Google Account settings.

To delete your PlanSway account and its data, use the account deletion page; you can also do it in the app under Profile → Help → Delete my account.

12. Users under 18

PlanSway is intended for users 13 years of age or older.

We do not knowingly allow users under 13 to create accounts or intentionally collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

Users between 13 and 17 may be subject to additional protections or consent requirements under applicable law.

PlanSway's minimum platform age does not mean that every event, venue, restaurant, bar or experience shown through the Service is appropriate or legally available to every user.

Third-party venues and experiences may impose their own age restrictions, identification requirements, admission rules or legal drinking-age requirements. Users are responsible for complying with those requirements, and PlanSway does not guarantee admission to any venue or experience.

13. Cookies and similar technologies

The web and mobile Service may use cookies, local storage, mobile SDKs, analytics and similar technologies to:

• keep the Service functioning and authenticate you;
• remember settings and preferences;
• understand usage and improve performance and reliability;
• personalize the Service; and
• help protect the Service against abuse.

We provide notice or controls for non-essential uses where required by law.

14. Third-party services and external links

PlanSway may link to or integrate with external websites, applications, venues, ticket providers, restaurants, transportation providers, maps and other services. Their websites and apps have separate privacy practices.

PlanSway does not control the privacy practices of these third parties. Purchases or reservations completed with external providers are subject to their policies and checkout processes. Please review those terms before providing them with personal or payment information.

15. Changes to this policy

We may update this policy as PlanSway evolves.

For material changes, we will provide notice through the Service or by another reasonable method, or seek consent where required by law.

The Last updated date at the top of this policy identifies the published version.

16. Contact us

For questions, privacy requests or concerns regarding this policy, contact:

PlanSway

Operated by: Santiago Javier Russo (private beta)

Country: Argentina

Email: support@plansway.com