Your information, explained clearly
Privacy Policy
This policy explains what Planamis collects, why it is used, who can receive it, and the choices available to you.
- Effective date:
- July 16, 2026
- Last updated:
- July 16, 2026
1. Who we are
Planamis is a shared planning and hangout application operated by Stiven Blandon Urrego, located in Medellín, Colombia.
For purposes of applicable data protection laws, Stiven Blandon Urrego is the controller responsible for personal data processed through Planamis.
- Privacy contact: [email protected]
- Telephone: +57 324 6456578
- Location: Medellín, Colombia
2. Scope
This Privacy Policy explains how Planamis collects, uses, stores, discloses, and protects personal data when you use the Planamis website, application, shared spaces, guest access, and related services.
Planamis is intended for people aged 16 or older. It is not directed to children under 16.
3. Information we collect
Depending on how you use Planamis, we may process the following information.
Account and profile information
- Name, username, email address, language preference, and account settings
- Google account identifier when you sign in with Google
- Passwords and PINs in hashed form
- Email verification, two-factor authentication, suspension, and login status
- Legal-policy acceptance versions, timestamps, acceptance source, and HMAC-SHA256 hashed IP and user-agent identifiers. Planamis does not store raw IP addresses in acceptance history
Guest and invitation information
- Temporary guest usernames
- Email addresses used to send invitations
- Participation associated with a shared space
Shared-space content
Planamis does not currently request your device’s precise GPS location. Coordinates may be stored when you select a place through a map or place-search feature.
- Space titles, planning details, dates, reminders, notes, messages, polls, votes, links, game activity, reports, ratings, and member information
- Restaurant menu URLs, uploaded menu files, menu items, selections, and related notes
- Places selected through Google Maps or Places, including names, addresses, map links, and coordinates of selected places
- AI-generated outing ideas and the information used to request them
Expense and payment-coordination information
Planamis uses this information only to help participants coordinate expenses. Planamis does not hold funds, initiate transfers, or collect payment-card or online-banking credentials.
- Expense descriptions, amounts, currencies, participants, splits, settlement status, and confirmations
- Optional payment identifiers, financial institution names, Bre-B keys, and payment QR images that you choose to share
Technical and security information
- IP address, browser and device information, session identifiers, cookies, login time, activity logs, and diagnostic information
- Hashed IP and user-agent identifiers used for security, abuse prevention, and administrative audit records
- Error, performance, and request information collected through Laravel Nightwatch
Communications
- Messages you send concerning support, privacy, account deletion, or legal requests
- Transactional email records, such as invitations, reminders, verification messages, and password resets
AI processing information
When you request an AI-generated idea or menu extraction, Planamis may send the relevant prompt, planning context, menu text, menu file, or retrieved webpage content to OpenRouter and a selected model provider. Planamis configures these requests to use endpoints that support Zero Data Retention. You should not include confidential or unnecessary personal data in AI prompts or uploaded menus.
Planamis does not use AI to make legal, employment, credit, insurance, or similarly significant decisions about you.
4. How we use information
We use personal data to:
- Create, authenticate, and maintain accounts
- Provide PIN, password, guest, and Google sign-in
- Create and operate shared spaces
- Display shared content to authorized participants
- Coordinate plans, polls, notes, messages, games, menus, places, reminders, expenses, and settlements
- Generate AI-assisted ideas and extract menu information
- Send invitations and other transactional communications
- Provide support and respond to privacy requests
- Detect abuse, investigate reports, secure accounts, and enforce service rules
- Monitor reliability, diagnose errors, and improve performance
- Comply with legal obligations and protect users, Planamis, and the public
Planamis does not sell personal data. Planamis does not share personal data with data brokers or advertisers and does not use personal data for targeted advertising.
Planamis currently sends only transactional emails. It does not send promotional email campaigns.
5. Legal grounds and authorization
Where applicable, Planamis processes personal data based on:
- Your prior, express, and informed authorization or consent
- The need to provide the service you request and perform our agreement with you
- Legitimate interests in securing, maintaining, and improving Planamis, where those interests do not override your rights
- Compliance with legal obligations
- Protection of users and others where permitted by law
You may withdraw consent or authorization where processing relies on it. Withdrawal does not affect processing already performed lawfully and may not apply where processing is required to provide a requested service or comply with law.
7. International data transfers
Planamis is operated from Colombia, while some service providers may process data in the United States or other countries. Those countries may have different data protection laws.
Where required, Planamis will use appropriate safeguards and lawful transfer mechanisms. By using Planamis and providing authorization where required, you understand that your information may be processed outside your country of residence.
8. Retention and deletion
We retain:
- Account information while your account remains active
- Legal acceptance history until the related account or temporary guest record is deleted
- Shared-space content until the relevant account or space is deleted
- Guest information and participation while the associated space exists
- Security, login, and hashed device records for up to 12 months, unless a longer period is reasonably required for an active investigation or legal obligation
- Laravel Nightwatch monitoring data for its configured retention period, normally up to 90 days
- Other information only as long as necessary for the purposes described in this policy or to meet legal obligations
You may delete your account through Settings → Profile → Delete account. Deletion removes your account from active application records and immediately schedules associated private files for deletion. Deleted information may remain in encrypted or access-controlled backups for up to 30 days, after which it is overwritten or deleted according to the backup lifecycle.
Some limited information may be retained when required by law, necessary to resolve disputes, protect security, or establish or defend legal claims.
10. Security
Planamis uses reasonable technical and organizational safeguards, including encrypted connections, hashed credentials, access controls, monitoring, and restricted administrative access.
No online service can guarantee absolute security. You are responsible for protecting your password, PIN, recovery codes, and invite links and for avoiding unnecessary sensitive information in shared spaces.
11. Your privacy rights
Depending on where you live, you may have the right to:
- Know whether Planamis processes your personal data
- Access and receive a copy of your data
- Correct or update inaccurate data
- Request deletion of data
- Withdraw consent or revoke authorization where permitted
- Object to or restrict certain processing
- Request data portability where applicable
- Ask for information about how your data has been used
- Lodge a complaint with an applicable data protection authority
- Exercise rights without unlawful discrimination
Colombian residents may know, update, rectify, and request deletion of their personal data; request proof of authorization; obtain information about its use; revoke authorization where legally permitted; and submit complaints to the Superintendencia de Industria y Comercio, after first completing the applicable request or complaint procedure with Planamis.
Planamis will generally respond to Colombian information requests within 10 business days and claims within 15 business days, subject to legally permitted extensions.
Residents of the EEA, United Kingdom, and other jurisdictions may have additional rights under their local laws. United States residents may have applicable state rights, including rights relating to access, correction, deletion, portability, and opting out of certain sales or sharing. Planamis does not sell personal data or use it for targeted advertising.
12. How to exercise your rights
Send a request to [email protected] with the subject “Privacy Request.”
Include your name or username, the right you want to exercise, and enough information for us to locate your account. We may request reasonable verification before disclosing, changing, or deleting information. Authorized representatives may be required to provide proof of authority.
13. Children’s privacy
Planamis is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.
14. External services and links
Planamis may link to third-party websites such as Google Maps or Ko-fi. Their privacy practices are governed by their own policies. Planamis is not responsible for the content or independent practices of external services.
15. Changes to this policy
We may update this Privacy Policy to reflect service, provider, or legal changes. We will update the “Last updated” date and provide additional notice when a change materially affects your rights or how personal data is used.
16. Contact
- Stiven Blandon Urrego
- Medellín, Colombia
- [email protected]
- +57 324 6456578
Have a privacy question?
[email protected]