Privacy Policy

Effective Date: September 20, 2026

1. Introduction and Scope

This Privacy Policy applies to the Planrove mobile application (“Planrove” or the “App”) and the services provided through Planrove.

Planrove is a travel planning application that helps users organize trips, daily itineraries, places, routes, budgets, reservations, packing lists, files and attachments, shared trips, and AI-assisted travel planning.

This Privacy Policy explains:

In this Privacy Policy, “we,” “us,” and “our” refer to the operator of Planrove identified in the Contact Us section.

2. Guest Use and Registered Accounts

Planrove supports guest use and registered accounts.

2.1 Guest Use

When you use Planrove without signing in, Planrove creates a guest session so you can access functions available to guests without providing an email address or creating a registered account.

To maintain guest access, Planrove processes:

The random identifier is not an advertising identifier and is not a hardware identifier such as an IMEI, device serial number, or MAC address.

Planrove does not use the guest identifier to track you across other apps or websites.

Guest access is limited to the functions available to guests. Creating and saving trips, uploading attachments, using AI functions, participating in shared trips, and synchronizing data across devices require a registered account.

2.2 Registered Accounts

You can create a registered Planrove account by signing in with Google or Apple.

A registered account provides access to functions including:

Planrove uses Firebase Authentication to support account authentication.

Planrove does not receive or store your Google password or Apple password.

3. Information Planrove Collects and Processes

3.1 Account Information

When you sign in with Google or Apple, Planrove processes information required to create, identify, authenticate, and manage your account.

This information includes:

If you use Sign in with Apple and choose Apple's private email relay feature, Planrove receives the relay email address provided by Apple instead of your original email address.

Planrove also processes login credentials required to authenticate your account and maintain your signed-in session.

Login credentials are stored using protected storage provided by your device.

When you sign out, locally stored login credentials and account-session information are cleared from that device.

Planrove does not use login credentials for advertising or tracking.

3.2 Trip and Travel Planning Information

When you or an authorized trip member creates or edits a trip, Planrove processes information entered or saved in that trip.

This information includes:

Planrove uses this information to provide trip planning, organization, statistics, synchronization, collaboration, recovery, and related travel-planning functions.

Planrove does not use these trip-planning fields to collect payment card numbers, card security codes, online banking passwords, or other payment authentication credentials.

3.3 Shared Trips and Member Information

When you create, join, or participate in a shared trip, Planrove processes information required to identify trip members and manage access.

This information includes:

Members of a shared trip can access trip information and member information according to the permissions assigned to them.

Information added to a shared trip by an authorized member is available to other authorized members according to their access permissions.

Shared-trip information includes:

3.4 Real-Time Collaboration Information

When multiple members use the same trip at the same time, Planrove temporarily processes information required to provide real-time collaboration.

This information includes:

Planrove uses this information only to provide real-time collaboration.

Planrove does not retain real-time editing information as a permanent collaboration history.

Planrove does not collect or store unfinished text solely for the purpose of showing another member's editing position.

3.5 Trip Invitation Information

When you invite another person to a trip, Planrove processes:

The invitee's email address is used to identify the intended recipient, associate the invitation with the correct account, and provide the correct access after the invitation is accepted.

Planrove protects invitation credentials so that they are not stored on the server in directly reusable form.

Invitation links provide access to the invitation process. You should share an invitation link only with the person you intend to invite.

Planrove does not upload your device contacts when you invite another person. Only the contact information that you actively enter for the invitation is processed.

Invitation information is retained only while it is required to create, verify, manage, revoke, or resolve the invitation and related trip membership.

3.6 Location Information

Planrove accesses your location only when you actively use a function that requires your current location and grant location permission.

Location information includes:

Planrove uses location information to:

Planrove accesses location only while you use the relevant location function.

Planrove does not perform background location tracking.

Planrove does not continuously track your location.

Planrove does not create or maintain a separate history of your movements.

When you use nearby-place search, place search, address lookup, or route planning, the location information required to complete your request is sent to Planrove's servers and then to the map service provider.

These requests are not maintained as a separate location-history profile.

If you choose to save a place to a trip, the place name, address, coordinates, and related information become part of that trip and remain stored with the trip until the corresponding trip information is deleted.

You can revoke location permission through your device settings. After permission is revoked, functions that require your current location stop working. Other Planrove functions remain available.

3.7 Files, Documents, Images, and Attachments

When you choose to upload a document, image, file, attachment, or trip cover, Planrove processes:

Files are selected through the file-selection interface provided by your device.

Planrove does not scan files stored on your device in the background.

Planrove does not require unrestricted access to your entire device storage or photo library to provide file-upload functions.

When you select an image or document through the system file-selection interface, Planrove processes only the content you selected for the function you requested.

Uploaded files are stored with the relevant trip or workspace and follow the same retention and deletion rules as the associated trip information.

3.8 Images, Faces, Hands, and Biometric Information

Images selected by users can contain faces, hands, or other physical characteristics.

Planrove processes such images only as user-selected files, attachments, or trip covers.

Planrove does not use uploaded images to:

Planrove does not extract facial features, hand features, or other physical characteristics for biometric identification.

Planrove does not sell facial data, hand data, biometric data, or information derived from these characteristics.

Planrove does not share facial or hand characteristics with third parties for identity recognition, behavioral advertising, profiling, or biometric analysis.

Planrove does not use facial or hand characteristics contained in uploaded images to train facial-recognition, identity-recognition, or biometric-identification models.

If an image containing a face, hand, or other physical characteristic is uploaded as a trip attachment or trip cover, the image is stored and deleted under the same rules that apply to other uploaded files.

3.9 AI Assistant Information

Using the Planrove AI assistant requires a registered account.

Planrove uses DeepSeek as its AI service provider.

When you use the AI assistant, Planrove processes:

To generate an AI response, Planrove sends your prompt together with relevant trip information required to answer the request to DeepSeek through Planrove's servers.

Information sent to the AI service includes the relevant parts of:

This information is sent to DeepSeek for the purpose of:

AI service credentials are stored on Planrove's servers and are not included in the Planrove mobile application.

Planrove stores AI conversation information so you can continue conversations and review previous results.

Planrove does not use your trip information or AI conversations to train its own models outside your account.

AI suggestions do not automatically modify your actual trip information.

If an AI suggestion contains a proposed change to a budget, packing list, reservation, itinerary, or other trip information, the change is applied only after you review and confirm it.

DeepSeek processes information submitted to its service according to DeepSeek's own privacy policy and service terms.

3.10 Synchronization and Service Operation Information

Planrove processes service information required to:

This information includes synchronization status, information about changes made to your data, read status, and service records required to operate these functions.

Planrove uses this information only for service operation, synchronization, security, reliability, and data integrity.

This information is retained only for the period required to support these purposes and is deleted or anonymized when it is no longer required.

3.11 Information Stored on Your Device

Planrove stores certain information locally on your device to:

Locally stored information includes:

Sensitive local information is protected using secure storage and encryption.

Locally stored trip information is protected using encryption.

Information used to protect encrypted local data is stored separately using secure device storage.

Clearing local cache removes locally stored cache and pending synchronization information.

Clearing local cache does not delete information already stored on Planrove's servers.

Signing out clears local login and session information.

Signing out does not delete your Planrove account or trip information stored on Planrove's servers.

After successful account deletion, local information associated with the deleted account is cleared as part of the account deletion process.

Uninstalling Planrove removes local application data according to the application-removal process provided by your device operating system.

4. Information Planrove Does Not Collect or Use

Planrove does not collect or use advertising identifiers such as IDFA or GAID for advertising or cross-app tracking.

Planrove does not use the following information for device fingerprinting:

Planrove does not access or upload:

Planrove does not perform background location tracking.

Planrove does not maintain a continuous location history.

Planrove does not request direct camera or microphone access for the functions described in this Privacy Policy.

Planrove does not require unrestricted access to your photo library.

Images selected through the system file-selection interface are processed only for the file, attachment, or trip-cover function that you request.

Planrove does not use third-party advertising SDKs.

Planrove does not use behavioral advertising systems to track users across unrelated apps or websites.

Planrove does not use your trip information or AI conversations to train its own models outside your account.

Planrove does not upload third-party contact information other than contact information that you actively enter for a trip invitation.

Planrove does not collect push-notification information or use push notifications.

5. Device Permissions

Planrove requests device permissions only when they are required for a function that you actively use.

5.1 Location

Planrove requests location permission when you use a feature that requires your current location.

If you deny or revoke location permission, functions that depend on your current location stop working.

Other trip-planning functions remain available.

5.2 File Selection

When you choose an attachment, document, image, or trip cover, Planrove uses the system file-selection interface provided by your device.

You decide which file or image is provided to Planrove.

Planrove does not require unrestricted access to all files stored on your device.

5.3 Internet Access

An internet connection is required for functions including:

6. How Planrove Uses Information

Planrove uses information for the following purposes:

Planrove does not use personal information to create behavioral advertising profiles.

Planrove does not use personal information for cross-app or cross-website advertising tracking.

7. Third-Party Services and Information Sharing

Planrove uses third-party services to provide specific functions.

Planrove provides each service provider only with information required to provide the relevant function.

7.1 Google Firebase Authentication

Planrove uses Google Firebase Authentication for account authentication and identity verification.

Information processed through Firebase includes:

Google processes this information according to its own privacy policy and service terms.

7.2 Google Sign-In

When you choose Google Sign-In, Google authenticates your Google account and provides the account information that you authorize for use with Planrove.

Planrove does not receive your Google password.

7.3 Sign in with Apple

When you choose Sign in with Apple, Apple authenticates your Apple account and provides the information required to create and identify your Planrove account.

If you choose Apple's private email relay feature, Planrove receives the relay email address provided by Apple.

Planrove does not receive your Apple password.

7.4 Mapbox

Planrove uses Mapbox to provide:

When you use these functions, Mapbox processes information required to complete your request.

This information includes:

Place-search, address-lookup, and route requests are sent through Planrove's servers to Mapbox.

Mapbox processes information according to its own privacy policy and service terms.

7.5 DeepSeek

Planrove uses DeepSeek to provide AI-assisted travel planning.

Planrove sends DeepSeek:

This information is used to generate AI travel-planning responses, suggestions, route analysis, alternative plans, and trip-completeness checks.

DeepSeek processes information according to its own privacy policy and service terms.

7.6 Other Users in Shared Trips

When you participate in a shared trip, information contained in that trip is available to other authorized trip members according to their access permissions.

This information includes:

You should not add information to a shared trip that you do not want other authorized members of that trip to access.

7.7 Operating System Services

Planrove uses functions provided by your device operating system when you:

The operating system processes the information required to complete the action that you initiate.

7.8 Planrove Service Infrastructure

Planrove uses servers and file storage to provide:

Information transferred between Planrove and its servers is protected using encrypted connections.

Access to account and trip information requires authentication and authorization.

Information is separated according to the relevant account, trip, or workspace to control access.

8. Sale, Advertising, and Tracking

Planrove does not sell your personal information.

Planrove does not rent your personal information.

Planrove does not sell facial information, hand information, biometric information, trip information, AI conversation information, uploaded files, or location information.

Planrove does not share your personal information with third parties for behavioral advertising.

Planrove does not use your information to track you across unrelated apps or websites for advertising purposes.

Planrove does not use advertising identifiers for behavioral advertising or cross-app tracking.

Information is provided to service providers only for the purposes described in this Privacy Policy.

Planrove discloses information when disclosure is required by law, a court order, or another valid legal process.

9. Data Retention

Planrove retains information only for the period required to provide the relevant service, maintain account and trip functions, protect users and the service, maintain data integrity, comply with legal obligations, and resolve disputes.

The retention rules for different categories of information are described below.

9.1 Guest Information

Guest-session information is retained while it is required to provide and maintain guest access.

It is removed when it is no longer required for the guest session and related service operation.

9.2 Account Information

Account information is retained while your Planrove account remains active.

After account deletion, account information is deleted or anonymized.

Planrove retains only the minimum information that remains necessary for security, legal compliance, dispute handling, fraud prevention, or protection of other users' information.

Information retained for these purposes is not used to restore deleted trip content or for advertising.

9.3 Trip and Shared-Trip Information

Trip information is retained while the related trip or account remains active.

Shared-trip information remains available while the shared trip exists and authorized members retain access.

When a trip or account is deleted, related information is deleted, removed, or anonymized according to the ownership and shared-access rules that apply to the trip.

9.4 Files, Images, and Attachments

Uploaded files, images, attachments, and trip covers are retained while they remain associated with an active trip or account.

When the corresponding trip or account information is deleted, files covered by that deletion are also deleted.

Images containing faces, hands, or other physical characteristics follow the same retention and deletion rules as other uploaded files.

9.5 AI Conversations and Suggestions

AI conversations and suggestions are retained while they are required to provide conversation history and AI-assisted travel-planning functions.

They are deleted when the related account or trip information is deleted, except for information that remains necessary for security or legal obligations.

9.6 Location Information

Location requests used to provide map and location functions are not retained as a separate history of your movements.

Places that you actively save remain part of the relevant trip until the corresponding trip information is deleted.

9.7 Real-Time Collaboration Information

Information used only for online status, cursor indicators, and real-time editing indicators is processed temporarily.

It is not retained as a permanent collaboration history.

9.8 Invitation Information

Invitation information is retained only while required to create, verify, manage, revoke, or resolve an invitation and the related trip membership.

Information that is no longer required for these purposes is removed.

9.9 Synchronization and Service Records

Synchronization, security, and service-operation records are retained only for the period required to maintain data consistency, prevent duplicate operations, restore supported operations, protect the service, and resolve service issues.

They are deleted or anonymized when they are no longer required for those purposes.

9.10 Information Stored on Your Device

Local cache and offline information remain on your device while required to provide offline access, loading performance, synchronization, and account functions.

You can clear local cache through Planrove's data-management functions.

Signing out clears local login and session information.

Successful account deletion clears local information associated with the deleted account.

Uninstalling Planrove removes local application data according to your device operating system.

10. Your Privacy Rights and Controls

You have the right to manage information associated with your Planrove account.

10.1 Access

You can view information available through your Planrove account and trips.

You can also contact us to request access to personal information associated with your account.

10.2 Correction

You can edit information directly through the relevant Planrove functions.

If information cannot be corrected directly in Planrove, you can contact us to request correction.

10.3 Deletion of Trip Information

You can edit or delete trip information through the relevant Planrove functions, including:

Deletion of shared-trip information is subject to the ownership and access rules of that trip.

10.4 Location Permission

You can revoke Planrove's location permission through your device settings.

After permission is revoked, Planrove stops accessing your current location.

10.5 Clear Local Cache

You can clear locally stored cache through Planrove's data-management functions.

Clearing local cache does not delete information already stored on Planrove's servers.

10.6 Sign Out

Signing out clears login and session information stored locally on your device.

Signing out does not delete your Planrove account or trip information stored on Planrove's servers.

10.7 Data Copy and Export

You can contact us to request a copy or export of information associated with your account.

Planrove verifies the account associated with the request before providing account information.

10.8 Restriction and Privacy Complaints

You can contact us to submit a request regarding restriction of data processing, another privacy right provided by the law governing your request, or a privacy-related complaint.

Valid privacy requests are handled within the period required by the law governing the request.

11. Account Deletion

Planrove provides an in-app account deletion function.

You can access account deletion through:

Privacy Center → Data & Account → Delete Account

Planrove requires confirmation before an account deletion request is submitted.

After account deletion is successfully completed:

If you own a shared trip that still contains other active members, Planrove does not complete account deletion while you remain the owner of that shared trip.

Before deleting your account, you need to transfer ownership of that shared trip to another member or remove the other active members.

This protects trip information that other members still rely on.

If Planrove does not receive confirmation that server-side account deletion has succeeded, Planrove does not clear the corresponding local account information in advance.

You can submit the account deletion request again after connectivity is restored.

Planrove provides a public account deletion request page for users who need to submit a deletion request outside the App:

Account Deletion URL: https://docs.google.com/forms/d/e/1FAIpQLSfQLdsZoS93_4VV375euSx95st6_8NyBbpFDONJ5i6pwo562g/viewform?usp=dialog

You can also contact us to submit an account deletion request.

Planrove verifies that the request relates to the relevant account before completing deletion.

12. Clearing Local Cache, Signing Out, and Deleting an Account

These actions have different effects.

Clearing Local Cache

Clearing local cache removes temporary information, cached files, and pending synchronization information stored locally on your device.

It does not delete your Planrove account.

It does not delete trip information already stored on Planrove's servers.

Signing Out

Signing out removes local login credentials and account-session information.

It does not delete your Planrove account.

It does not delete trip information stored on Planrove's servers.

Deleting Your Account

Deleting your account removes the Planrove account and account-related information covered by the account deletion process.

Shared-trip information that must remain available to other active members is removed from your account or anonymized rather than deleted in a way that destroys information belonging to other members.

13. Data Security

Planrove uses technical and organizational safeguards to protect information against unauthorized access, loss, misuse, disclosure, and alteration.

These safeguards include:

Planrove does not receive or store your Google password or Apple password.

Planrove does not write authentication credentials to application logs.

No data storage or transmission system eliminates every security risk. Planrove uses the safeguards described above to reduce these risks and protect information processed through the service.

14. International Data Processing

Planrove uses service providers with international service infrastructure, including Google Firebase, Google Sign-In, Apple, Mapbox, and DeepSeek.

When you use a function supported by one of these providers, the information required to provide that function is processed through the relevant provider's infrastructure.

Planrove limits information provided to each service provider to the information required to provide the relevant function.

Each provider processes information according to its own privacy policy, service terms, contractual requirements, and security practices.

15. Children's Privacy

Planrove is intended for travel-planning users and is not directed to children who are not legally permitted to use the service independently.

If the law governing a child's use of Planrove requires consent from a parent or legal guardian, that consent must be obtained before the child uses Planrove.

Planrove does not knowingly collect children's personal information in violation of the law governing the child's use of the service.

If Planrove confirms that a child's personal information has been collected without the legally required consent, the information is deleted.

Parents and legal guardians can contact us regarding a child's personal information.

16. Changes to This Privacy Policy

Planrove updates this Privacy Policy when its data practices, privacy-related service functions, third-party service providers, or legal obligations change in a way that affects the information described in this Privacy Policy.

Routine application updates, bug fixes, performance improvements, and interface changes that do not change Planrove's data practices do not require a change to this Privacy Policy.

When a change materially affects:

Planrove updates this Privacy Policy and provides notice through the App or another appropriate communication channel.

The effective date displayed at the beginning of this Privacy Policy identifies the current policy.

17. Contact Us

If you have questions about this Privacy Policy, Planrove's handling of personal information, your privacy rights, account deletion, data access, correction, export, or a privacy-related complaint, contact:

PT OCTA PRIME CONSULTING

Email: octaapp2026@gmail.com