Privacy

What is collected

From signing in with Google. Your Google account identifier, your name, your email address, and the URL of your profile picture. Nothing else — the sign-in asks only for the basic profile scopes, so it cannot read your Gmail, Drive, Contacts or Calendar.

What you put into a plan. Its title and dates, the cities, flights, stays, places, food, activities, notes and links you add. Anything typed into a plan is stored.

A sign-in cookie. A random token, set for 30 days. The database stores only a hash of it, never the token itself. Three more short-lived cookies exist for the ten minutes it takes to complete a Google sign-in, and are deleted when it finishes.

Ordinary server logs kept by the host, which include IP addresses.

There is no analytics, no advertising, no tracking pixel, and no marketing email.

Who else sees it

Running the app means handing data to these companies:

• Vercel — hosting. Every request to the site passes through them and appears in their logs.
• Neon — the Postgres database. Your account and your plans are stored there.
• Google — sign-in, plus Maps and Places. When a plan with a map is open, your browser asks Google for map tiles and for details about the places on the plan, so Google sees those requests.
• Anthropic — when you paste a TikTok, Instagram or YouTube link, the title and description that link publishes are sent to Anthropic’s API to generate the one-line summary that appears under it.
• AirLabs — when you add a flight, the airline, flight number and date are sent to look up the published schedule for that flight.

Nothing is sold, and nothing is handed to anyone else — except where the law requires it.

What other people see

A plan is private to you until you share it. When you do, the link itself is the key: anyone who has the URL can open the plan and read it without an account, and can pass the URL on. Share pages ask search engines not to index them, but treat a shared link as public.

Your name and profile picture appear to you inside the app. They are not shown on a shared plan today.

Deleting things

You can delete any plan from its edit screen, which deletes its share links with it. To delete your whole account — the account, its sign-in identity, its sessions, its plans and their links — email hello@vibeplannr.com and it will be done by hand. A button for this is being built; until it exists, the email is the path.

You can also revoke the app’s access from your Google account settings at any time. That stops future sign-ins; it does not delete what is already stored, so send the email as well if that is what you want.

How long it is kept

Plans are kept until you delete them or delete your account. Sign-in sessions expire after 30 days of not being used. Host logs are kept for as long as the host keeps them.

Changes, and getting in touch

If this changes, the date at the top changes. Questions, or anything that looks wrong: hello@vibeplannr.com.