Back home

Your information, explained clearly

Privacy Policy

This policy explains what Planamis collects, why it is used, who can receive it, and the choices available to you.

Effective date:
July 16, 2026
Last updated:
July 16, 2026

1. Who we are

Planamis is a shared planning and hangout application operated by Stiven Blandon Urrego, located in Medellín, Colombia.

For purposes of applicable data protection laws, Stiven Blandon Urrego is the controller responsible for personal data processed through Planamis.

  • Privacy contact: [email protected]
  • Telephone: +57 324 6456578
  • Location: Medellín, Colombia

2. Scope

This Privacy Policy explains how Planamis collects, uses, stores, discloses, and protects personal data when you use the Planamis website, application, shared spaces, guest access, and related services.

Planamis is intended for people aged 16 or older. It is not directed to children under 16.

3. Information we collect

Depending on how you use Planamis, we may process the following information.

Account and profile information

  • Name, username, email address, language preference, and account settings
  • Google account identifier when you sign in with Google
  • Passwords and PINs in hashed form
  • Email verification, two-factor authentication, suspension, and login status
  • Legal-policy acceptance versions, timestamps, acceptance source, and HMAC-SHA256 hashed IP and user-agent identifiers. Planamis does not store raw IP addresses in acceptance history

Guest and invitation information

  • Temporary guest usernames
  • Email addresses used to send invitations
  • Participation associated with a shared space

Shared-space content

Planamis does not currently request your device’s precise GPS location. Coordinates may be stored when you select a place through a map or place-search feature.

  • Space titles, planning details, dates, reminders, notes, messages, polls, votes, links, game activity, reports, ratings, and member information
  • Restaurant menu URLs, uploaded menu files, menu items, selections, and related notes
  • Places selected through Google Maps or Places, including names, addresses, map links, and coordinates of selected places
  • AI-generated outing ideas and the information used to request them

Expense and payment-coordination information

Planamis uses this information only to help participants coordinate expenses. Planamis does not hold funds, initiate transfers, or collect payment-card or online-banking credentials.

  • Expense descriptions, amounts, currencies, participants, splits, settlement status, and confirmations
  • Optional payment identifiers, financial institution names, Bre-B keys, and payment QR images that you choose to share

Technical and security information

  • IP address, browser and device information, session identifiers, cookies, login time, activity logs, and diagnostic information
  • Hashed IP and user-agent identifiers used for security, abuse prevention, and administrative audit records
  • Error, performance, and request information collected through Laravel Nightwatch

Communications

  • Messages you send concerning support, privacy, account deletion, or legal requests
  • Transactional email records, such as invitations, reminders, verification messages, and password resets

AI processing information

When you request an AI-generated idea or menu extraction, Planamis may send the relevant prompt, planning context, menu text, menu file, or retrieved webpage content to OpenRouter and a selected model provider. Planamis configures these requests to use endpoints that support Zero Data Retention. You should not include confidential or unnecessary personal data in AI prompts or uploaded menus.

Planamis does not use AI to make legal, employment, credit, insurance, or similarly significant decisions about you.

4. How we use information

We use personal data to:

  • Create, authenticate, and maintain accounts
  • Provide PIN, password, guest, and Google sign-in
  • Create and operate shared spaces
  • Display shared content to authorized participants
  • Coordinate plans, polls, notes, messages, games, menus, places, reminders, expenses, and settlements
  • Generate AI-assisted ideas and extract menu information
  • Send invitations and other transactional communications
  • Provide support and respond to privacy requests
  • Detect abuse, investigate reports, secure accounts, and enforce service rules
  • Monitor reliability, diagnose errors, and improve performance
  • Comply with legal obligations and protect users, Planamis, and the public

Planamis does not sell personal data. Planamis does not share personal data with data brokers or advertisers and does not use personal data for targeted advertising.

Planamis currently sends only transactional emails. It does not send promotional email campaigns.

6. How information is shared

Other Planamis participants

Content you add to a shared space may be visible to its owner, members, guests, and other authorized participants. This may include your username, messages, votes, expenses, payment-coordination details, and other contributions.

Service providers

These providers process information to perform services for Planamis and are subject to their own contractual and legal obligations.

  • Laravel Cloud, for application hosting, database infrastructure, storage, and related operations
  • Laravel Nightwatch, for error reporting, performance monitoring, and operational diagnostics
  • Resend, for transactional email delivery
  • Google, for Google sign-in and Maps and Places functionality
  • Geocoded.me, for city and location searches
  • Bunny Fonts and Google Fonts, for interface font and resource delivery
  • OpenRouter and selected AI model providers, for AI requests using Zero Data Retention compatible endpoints

Authorities and safety disclosures

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or abuse, protect safety, or defend legal rights.

Business changes

If Planamis is incorporated, reorganized, financed, acquired, or transferred, information may be transferred as part of that transaction, subject to appropriate confidentiality and continued protection.

7. International data transfers

Planamis is operated from Colombia, while some service providers may process data in the United States or other countries. Those countries may have different data protection laws.

Where required, Planamis will use appropriate safeguards and lawful transfer mechanisms. By using Planamis and providing authorization where required, you understand that your information may be processed outside your country of residence.

8. Retention and deletion

We retain:

  • Account information while your account remains active
  • Legal acceptance history until the related account or temporary guest record is deleted
  • Shared-space content until the relevant account or space is deleted
  • Guest information and participation while the associated space exists
  • Security, login, and hashed device records for up to 12 months, unless a longer period is reasonably required for an active investigation or legal obligation
  • Laravel Nightwatch monitoring data for its configured retention period, normally up to 90 days
  • Other information only as long as necessary for the purposes described in this policy or to meet legal obligations

You may delete your account through Settings → Profile → Delete account. Deletion removes your account from active application records and immediately schedules associated private files for deletion. Deleted information may remain in encrypted or access-controlled backups for up to 30 days, after which it is overwritten or deleted according to the backup lifecycle.

Some limited information may be retained when required by law, necessary to resolve disputes, protect security, or establish or defend legal claims.

9. Cookies and similar technologies

Planamis uses essential cookies and browser storage for authentication, security, session continuity, language, appearance, and interface preferences.

Planamis does not currently activate Google Analytics, advertising cookies, or marketing trackers. Before activating non-essential analytics or tracking, Planamis will update this policy and request consent where required.

Browser settings may allow you to block or delete cookies, but blocking essential cookies may prevent parts of Planamis from working.

10. Security

Planamis uses reasonable technical and organizational safeguards, including encrypted connections, hashed credentials, access controls, monitoring, and restricted administrative access.

No online service can guarantee absolute security. You are responsible for protecting your password, PIN, recovery codes, and invite links and for avoiding unnecessary sensitive information in shared spaces.

11. Your privacy rights

Depending on where you live, you may have the right to:

  • Know whether Planamis processes your personal data
  • Access and receive a copy of your data
  • Correct or update inaccurate data
  • Request deletion of data
  • Withdraw consent or revoke authorization where permitted
  • Object to or restrict certain processing
  • Request data portability where applicable
  • Ask for information about how your data has been used
  • Lodge a complaint with an applicable data protection authority
  • Exercise rights without unlawful discrimination

Colombian residents may know, update, rectify, and request deletion of their personal data; request proof of authorization; obtain information about its use; revoke authorization where legally permitted; and submit complaints to the Superintendencia de Industria y Comercio, after first completing the applicable request or complaint procedure with Planamis.

Planamis will generally respond to Colombian information requests within 10 business days and claims within 15 business days, subject to legally permitted extensions.

Residents of the EEA, United Kingdom, and other jurisdictions may have additional rights under their local laws. United States residents may have applicable state rights, including rights relating to access, correction, deletion, portability, and opting out of certain sales or sharing. Planamis does not sell personal data or use it for targeted advertising.

12. How to exercise your rights

Send a request to [email protected] with the subject “Privacy Request.”

Include your name or username, the right you want to exercise, and enough information for us to locate your account. We may request reasonable verification before disclosing, changing, or deleting information. Authorized representatives may be required to provide proof of authority.

13. Children’s privacy

Planamis is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate.

14. External services and links

Planamis may link to third-party websites such as Google Maps or Ko-fi. Their privacy practices are governed by their own policies. Planamis is not responsible for the content or independent practices of external services.

15. Changes to this policy

We may update this Privacy Policy to reflect service, provider, or legal changes. We will update the “Last updated” date and provide additional notice when a change materially affects your rights or how personal data is used.

16. Contact

Have a privacy question?

[email protected]