Privacy Policy

1. What information do we collect?

• Account information: name and email address when you register.
• Third-party sign-in: when signing in with Google, Apple, or Facebook, we receive your name and email from that service.
• Location data: we request access to your location to auto-fill your departure city. Location is not sent to our servers and is not stored.
• Push token: if you accept notifications, we store your device's push token to send price alerts and travel inspiration.
• Travel preferences: departure city, travel style, budget, and preferred currency as set in your profile.
• Search history: flight and hotel searches are stored locally on your device and can be deleted at any time from your profile.
• Trip plans: trip plans you create are stored in our database linked to your account.

2. How do we use this information?

• To provide you with a personalised travel experience.
• To send push notifications about price changes and travel inspiration (only if enabled by you).
• To improve the AI assistant's responses based on travel style and budget.
• To send emails for account confirmation and password reset.

3. Sharing with third parties

We do not share personal data with advertisers or sell it. We use the following third-party services:

• Supabase – database storage and authentication (EU infrastructure).
• Expo / Expo Push – push notifications.
• Anthropic (Claude) – AI assistant. Conversation content is sent to Anthropic for processing. See Anthropic's privacy policy.
• Google, Apple, Facebook – optional social sign-in.
• RapidAPI / Expedia – flight and hotel search.
• OpenRouteService – driving route calculation.

4. Storage and security

Your data is stored securely in Supabase with encryption in transit (TLS). Access is restricted using Row Level Security policies.

5. Your rights

• Access: you can view your data in your profile.
• Deletion: you can delete your account and all associated data directly from your profile in the app.
• Notifications: you can turn off push notifications at any time in your profile or in your phone's settings.
• Data export: you have the right to receive your personal data in a machine-readable format (GDPR Article 20). Send an email to kontakt@nordicdigitalapp.no to request this.

6. Children

PlanTravel is not directed at children under 16. We do not knowingly collect information from children.

7. Changes to this policy

We may update this policy. Significant changes will be notified in the app. Continued use after an update constitutes acceptance.