· Back to Squad Plan

Squad Plan Privacy Policy

Effective date: 2026-10-13 Last updated: 2026-10-17

This Privacy Policy explains what Squad Plan ("we", "us") collects when you use Squad Plan, why we collect it, and the choices you have. Please also read our Terms of Service and Cookie Policy.

1. What we collect

Account information

  • If you sign up with email: your first name, your email address and your confirmation that you are 13 or older. You choose your password after you tap the link in the verify email. We store your password only in scrambled (hashed) form. We never store it as plain text.
  • Google sign-in is switched off for now. If we add it later, signing in with Google would give us your name, email address and Google account id, as Google shares them with us.

Plan information

  • What you enter to make a plan: city, dates or trip length, group size, who is coming (an age range: just the two of you, grown-ups 21+, some under 21, or with kids under 13), occasion, activities you pick, any "other" text, and any personal notes.
  • For paid users: the "Make it yours" details, such as how detailed the plan should be, what the plan means to you, and what you need from it (for example a budget cap or dietary needs).

Voting information

  • For each vote: the name you choose to give (optional), the plan option you picked (A, B or C), and a random browser id that we create and store in your browser.

Place reports (signed-in users)

  • If you report a place as closed, we store the place name, the city, your user id and the time. We hide a place once 3 people, whose accounts are each at least 7 days old, have reported it.

Feedback information (Plus members)

  • If you review a plan: which plan you went with, your star rating, what went well, what could have been better, and any places you asked us to skip. We use it only to tailor your own future plans. For example, we leave out places you skipped and, when AI is on, we share your notes with the AI that writes your plans. You can see and delete it on your Account page.

Payment information

  • Plus is coming soon. We are not taking payments yet, so we do not collect payment details today.
  • When paid plans open, Stripe will handle payments. We will not see or store your full card number. We will store your Stripe customer id and your subscription status (for example active or cancelled), so we know whether you can use paid features.

Sign-up and abuse checks

  • We keep simple daily counters of emails sent, plans made and map lookups. We use them to stop abuse.
  • Email addresses appear in these counters only as a one-way hash.
  • These abuse counters keep scrambled (hashed) internet addresses, email addresses and email domains for about 2 to 3 days. Password-reset link records are kept for about 3 days.
  • Old counters are deleted automatically.

Technical information

  • Each sign-in session keeps the IP address and browser type it was started from until the session ends. Old sessions and sign-ups that were never verified are deleted automatically.
  • Server logs: the time, the pages or actions requested, error messages, IP address, and browser and device type. We use them to keep the Service running and secure.

Browser storage and preferences

  • Your choices on the consent screen and in cookie settings.
  • A record in your browser, for each vote link, of the name and choice you voted. We keep it so you can change your vote.
  • Your unfinished planner answers. These stay in your browser's session storage and are cleared when you close the tab.
  • The random browser id described under voting information.

See our Cookie Policy for the full list.

2. How we use information

We use your information to:

  • create your account and let you sign in;
  • create your plans from map data and, when it is switched on, AI (see section 3);
  • let your friends vote, show you the results, and let you change your own vote;
  • hide places that people report as closed;
  • enforce the free limit of 5 plans per week and the paid features;
  • stop abuse, including with the daily counters described in section 1;
  • process subscriptions through Stripe once paid plans open, and send you important account or billing messages;
  • send emails such as verifying your address and resetting your password;
  • keep the Service secure, find and fix problems, and prevent abuse;
  • comply with the law.

We do not use your information for advertising, and we do not build advertising profiles.

3. AI processing

When AI planning is switched on, we send the plan details you enter to Anthropic, which provides the AI model. This includes any personal notes or "Make it yours" details you add. For Plus members, we also send short summaries of your past feedback (your star ratings and what went well or could be better), so the AI can tailor your plans.

When AI planning is off, plans come from map data, and nothing is sent to Anthropic. Anthropic uses this information only to generate your plans. Under Anthropic's commercial API terms, inputs sent through the API are not used to train its models. See our AI notice for more detail.

Please do not put sensitive information, such as health details, passwords or identification numbers, into plan details or notes.

4. Who we share information with

We share information only with the service providers we need to run Squad Plan:

  • Cloudflare: hosting the website and server.
  • Turso: our database.
  • Brevo: sending verification and password-reset emails.
  • Geoapify: finding real places in the city you enter. We send only the city name, never your account details.
  • Stripe: payments and subscriptions.
  • Anthropic: AI generation of plans.
  • Google: not used today. Google sign-in is switched off for now. We may add it later, and we would update this policy first.

We may also share information if the law requires it, to protect people's safety, or as part of a business sale. If we sell the business, we will tell you.

We do not sell your personal information.

5. Cookies and similar storage

We use only essential cookies and browser storage. See our Cookie Policy for the full list. We do not use advertising or tracking cookies.

6. How long we keep information

  • Account information and plans: while your account is open. Plans you create stay with your account so you can see them again.
  • Voting information: for as long as the plan it belongs to is kept.
  • Browser vote record: until you clear your browser data.
  • Planner draft: until you close the tab.
  • Place reports: kept while your account exists and deleted with it.
  • Sign-up and abuse counters: contain only counts and one-way codes, not readable email addresses, and are kept only as long as needed to stop abuse.
  • Feedback information: until you delete it on your Account page, or until the plan it belongs to or your account is deleted.
  • Payment status: as long as needed for billing records and tax or legal obligations.
  • Technical logs: kept for a limited time for security and troubleshooting, then deleted.
  • After you delete your account: we delete your account and plan information within 30 days, except where we must keep some information for legal, tax or security reasons.

7. Your rights and choices

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct information that is wrong;
  • delete your account and personal information;
  • export a copy of your information in a common format;
  • withdraw consent where we rely on consent.

To use these rights, email hello@squadplan.co. You can also delete some plan information inside the app. We may need to check your identity before we act on a request. You can also complain to your local data protection authority.

8. Children

Squad Plan is for people aged 13 and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, email hello@squadplan.co and we will delete it.

People aged 13 to 17 may buy a paid subscription only with a parent or guardian's permission and payment method.

9. Security

We use reasonable measures to protect your information. These include encryption in transit, hashed passwords, and secret keys stored in secure settings rather than in our code. No system is perfectly secure, so we cannot guarantee absolute security. Tell us right away if you think your account has been misused.

10. International transfers

Our service providers may store or process information in the United States and other countries where they operate. When we transfer information, we rely on the safeguards that the providers offer for such transfers.

11. Changes to this policy

We may update this Privacy Policy. We update this page when what we collect changes, and the date at the top shows the latest version. If a change is important, we will tell you before it takes effect.

12. Contact

Squad Plan Email: hello@squadplan.co