Privacy Policy

The controller of the personal data processed in connection with the use of the TogetherPlan app (the “App”) is Michał Białas, contact: togetherplancontact@gmail.com. For any matter concerning the protection of personal data you can write to the address above — we reply personally, with no intermediaries.

We collect only the data that is actually needed for the App to work:

• Account data — your name, email address and profile picture, received from the sign-in provider (Sign in with Apple or Google sign-in) when you create an account.
• Your friend code — a random 9-digit identifier generated for your account, which lets others add you to shared planning without needing your email.
• Content you create yourself — the names and dates of trips, the trip plan (schedule items for individual days), calendar events, notes in the shared notebook, proposed places to visit together with their location, accommodation proposals, votes in decisions and date polls, availability marks, to-do lists and, in couple mode, important dates (e.g. anniversaries).
• Settlements — if you use this section: the description and amount of an expense together with its currency, who paid and who the cost is split between, and entries of “who owes whom, how much and for what”. This is data about settlements within your couple or group, entered by you manually. We do not collect or ask for any payment data — no card numbers, bank account numbers or online banking credentials. The App settles nothing financially and does not mediate transfers; it is only a shared notebook of amounts.
• Tickets (PDF files) — if you add a ticket to a trip, we store the PDF file itself together with the name you give it, its category (flights, transport, museums and attractions, other), an optional date and which of the participants it concerns. The content of a file can be sensitive — a flight ticket or a booking confirmation usually contains a full name and a booking reference — so we store the files as private, and they cannot be opened with the address alone. Every download goes through our server, which first checks that the person asking belongs to that trip. A ticket is visible to all participants of the trip, even if you mark it as concerning only one person — that mark organises the list, it does not restrict access. So add only documents you want to show to the whole crew.
• A link to a shared Apple Photos album— if you link a trip to an album, we store only the sharing address and the name of the album. The photos themselves, and inviting people to the album, remain entirely on Apple's side — we have no access to the contents of the album or to participants' Apple IDs.
• Technical server data — standard request logs (IP address, timestamp, the endpoint called) recorded automatically by the hosting infrastructure to keep the service secure and to diagnose failures.

What we do not collect: we do not track your location in the background, we do not use analytics or advertising tools, and we do not sell or share your data with third parties for marketing purposes.

The calendar on your phone:both the “Add to iPhone calendar” button and the synchronisation of a whole month write events directly into the device's system calendar. The App asks iOS for write-only permission — technically we are unable to read or see the events you already have in your calendar, let alone send them to our servers. Data flows in one direction only: from the App to the calendar.

TogetherPlan is for planning together — so your name, profile picture and the content you create within a given couple or group of friends are visible to the other members of that same couple or group. This is the core function of the App, not an additional sharing of data — by joining a couple or a group you agree to this visibility towards its other members.

Two things in particular are worth knowing outright. Your availability marks — the days on which you are free or busy, with hours if you give them — are seen by your whole group (and in couple mode, by the other person), because without that it would not be possible to find a shared date. PDF tickets added to a trip are seen by all of its participants. We do not share this data with anyone outside your couple or group.

Separately: you can share an invitation link that contains your friend code. Anyone who opens such a link and is signed in will be added to your friends — so treat it as a personal invitation, not something to publish.

Apart from that, we use the following external providers, who process data on our behalf:

• Supabase(PostgreSQL database) — stores all of the App's data on servers in a region of the European Union (Ireland, eu-west-1).
• Vercel(hosting of the app and the server) — handles network traffic and runs the App's server logic. The server logic runs in a region of the European Union (Dublin, dub1).
• Vercel Blob (file storage) — stores only the PDF tickets added to trips. The storage is private: files have no public addresses and are released only after our server checks that the person asking belongs to the given trip.
• Google LLC and Apple Inc. — as sign-in providers (Google Sign-In, Sign in with Apple); they pass us only basic profile data (name, email, picture) after your consent given in their own sign-in window.
• Apple Inc., separately, as the operator of the App Store — if you purchase a TogetherPlan Premium subscription, Apple handles the entire payment. We never see or store a card number, bank account details or any other payment data — they go only to Apple, within your Apple ID account. From Apple we receive only confirmation that the subscription is active and the date it expires or renews — needed so that the App knows whether to unlock full access.
• OpenStreetMap (Nominatim) — when you search for a place to add to the map, the query goes through our own server (not directly from your phone), so your IP address does not reach OpenStreetMap.
• Narodowy Bank Polski (the Polish National Bank, api.nbp.pl) — the Settlements section converts amounts at the official, public NBP exchange rate. We fetch only the general table of rates, from our server and without any of your data — the NBP does not learn who is asking for a rate or what your expense concerns.

Separately: the shared Apple Photos albumfeature works entirely within Apple's service. Creating the album and inviting people to it happens in the system Photos window, on your device — we store only the link. Sharing photos in such an album is governed by Apple's privacy policy, not ours.

Transfers of data outside the European Economic Area.The database and the server logic run in the EU, but Vercel Inc., Google LLC and Apple Inc. are US companies and, for technical support, may access data from outside the EEA. This takes place on the basis of the standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR) and — for providers taking part in the Data Privacy Framework — the Commission's decision finding an adequate level of protection. We will provide a copy of the safeguards applied on request sent to the contact address given in section 1.

The mobile app keeps some data directly on your phone — it is not sent anywhere additionally because of that, but it is worth knowing it is there:

• The session token — in the system Keychain, the encrypted store of iOS. It is removed when you log out and when you delete your account.
• A copy of recently viewed screens — so that when you return to a section its content appears immediately instead of loading from scratch. This covers, among other things, trips, settlements, the calendar and notifications. The copy is erased when you log out and when you delete your account, and iOS may also remove it by itself when storage runs low.
• Photos added to trips — saved only on your device. They never reach our servers and the other members of the couple or group cannot see them. Because this is their only copy, we do not delete them on logout (so as not to erase them irrecoverably) — they disappear when you uninstall the app.
• App settings — for example the chosen interface language.

We process data on the basis of Article 6(1)(b) GDPR — processing is necessary for the performance of a contract for the provision of the service (that is, for the App to work at all) — and, as regards technical logs, on the basis of Article 6(1)(f) GDPR (our legitimate interest in keeping the App secure and stable).

We keep your data for as long as your account is active. You can permanently delete your account yourself at any time in the App: Settings → Delete account. The operation is irreversible. The local copy of data on the device is erased as well (see section 4).

What disappears for certain: your account and profile data, your friend code, friendships, availability marks, notifications, and the entire contents of your couple (trips, events, notes, places, important dates, settlements) — the couple ceases to exist together with your account. Groups in which you were the only member also disappear, with all of their contents. Related PDF ticket files are removed from storage, not merely unlinked — this applies both to tickets from the trips being deleted and to those you uploaded yourself.

What stays with others, and why: if you belong to a group that still has other people in it, the trips, events and polls you created are not deleted — they stay in the group, and their authorship passes to the person who has belonged to that group the longest (just as when you simply leave a group). Were it otherwise, one person closing their account would delete the trip plan of the whole crew. If you want a particular piece of content to disappear, delete it in the App before deleting your account.

The transfer covers trips, events and polls. Other entries assigned to you — expenses and debts in settlements, tickets you added, notes, places and day-plan items — are deleted even from trips that stay in the group. This has a practical consequence worth knowing in advance: if you paid for a shared expense, deleting it will change the settlement balance of the other people. We recommend settling up with the group before closing your account.

Two further caveats about shared content. An entry that also concerns another person — for example an expense split between you and someone from the group — is one record, not two copies, so deleting it removes it from their view too. Conversely, content created by the other members of the couple or group remains with them after your account is deleted.

Under the GDPR you have the right to:

• access your data and obtain a copy of it,
• rectify (correct) inaccurate data,
• erase your data (“the right to be forgotten”) — in the App you can do this yourself in Settings,
• restrict processing,
• data portability to another controller,
• object to processing based on our legitimate interest,
• lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe we are processing your data unlawfully.

In any of these matters you can also simply write to us directly at the contact address given above.

The web version of the App uses one necessary cookie to keep your sign-in session. We do not use advertising cookies or third-party analytics cookies. The mobile app (iOS) does not use cookies — it stores session data locally and securely in the device's Keychain.

The App is not directed at children under 16 and we knowingly do not collect data from people of that age. If we learn that this has happened, we will delete the relevant data.

If we change how we process data, we will update this page and the date at the top of the document. For significant changes we will also inform you in the App.