Privacy Policy

Version 1.0 · Effective date: October 22, 2026

The short version: we collect only what's needed to plan your trips, we never sell your data, and loyalty membership numbers you enter stay in your account and are never shared with the AI that builds your plans. You can delete your entire account yourself at any time.

1. About This Policy

Plonk ("Plonk", "we", "us") operates the Plonk Travel app and website. This policy explains what personal information we collect, how we use and share it, and how you can delete it.

Questions, requests, or deletion help: info@plonktravel.com.

2. Information We Collect

Account information: your email address and name, collected when you create an account (or provided by Google if you sign in with Google).

Traveler profile (all optional): display name, short bio, profile photo, home airport, passport nationality, loyalty program names and membership numbers, dietary restrictions, accessibility or mobility needs, typical group size, and travel preferences.

Trip information: destinations, travel dates, origin and return locations, how you're getting there, what you've already booked (which may include confirmation numbers), where you're staying, interests, and any notes you give us. When you ask for a plan, we generate an itinerary for you and store it, along with any places you add and any ratings or comments you leave about it.

Saved places: places you save for future trips, including your notes about them.

Social and collaboration information: friend connections, group-trip memberships and invitations, notifications, badges, and "kudos" left on your badges.

Payment information: payments are processed by our payment provider (Base44 Payments). We never receive or store your card details. We keep a record of your purchases: the plan, amount, currency, your email, and order identifiers.

Referrals: if you join through a friend's referral link, we store both email addresses and the reward codes issued.

Usage information: we count app visits and record simple events (for example, that a trip was generated) without names, emails, or message content. Our hosting provider processes standard technical information such as IP address and browser type as part of serving the app.

3. How We Use Information

We use your information to create and improve your itineraries, personalize recommendations (including honoring dietary, accessibility, and loyalty-program details you give us), send you daily briefings and reminders while you're traveling, operate social and group-trip features, process purchases and fulfill them, prevent abuse, and send service emails. You can turn individual email types off in your account settings at any time.

4. AI Features & Data Sharing

Your plans are generated by AI services accessed through our service platform (Base44), which uses third-party AI providers. To generate, adjust, and verify your plans, we send trip details (destination, dates, group size, budget and interests, your notes, and booking status) plus the profile details you've chosen to share, such as dietary restrictions, accessibility needs, home airport, passport nationality, and loyalty program names. Membership numbers you enter stay in your account and are never sent to the AI or any other service.

Depending on our service platform's plan, data processed through AI features may be used to improve AI models. We do not make claims about the AI providers' internal retention of individual requests.

We do not sell your personal information.

5. Other Service Providers

Base44: our service platform, which provides hosting, sign-in, data storage, private file storage, email delivery, and basic app analytics.

Google Maps Platform: we send place, venue, and neighborhood names to search for real venues, verify map pins, and display photos and maps. Google also receives your IP address when maps load in your browser.

Open-Meteo: we send your destination city name to determine its time zone, so daily briefings arrive at the right local time.

Base44 Payments: if you're signed in, we pre-fill your email on the checkout page; the payment provider collects the name, email, and address you enter there, and processes your payment.

Email delivery: daily briefings, reminders, and notification emails are sent only to registered app users' addresses, with per-type opt-outs in your account settings.

6. Public Sharing

If you use a share link, anyone with it can view a sanitized version of your itinerary: destination, dates, group size, and day plans with photos — never your confirmation numbers, loyalty details, personal notes, or packing list. Free-tier shares show only the first day.

If you share your badge-profile link, visitors see your display name, bio, badges, and kudos counts. Your trip list is visible only to you and accepted friends.

Group-trip members see the trip plan and each other's additions.

7. Retention

We keep your information while your account is active. Revision snapshots are capped and abuse-prevention counters reset on a rolling daily cycle.

Purchase records, including the buyer email shown on them, are retained for transaction purposes — refunds, accounting, and order lookup — and are not used to fulfill any in-app feature.

Itinerary photos are hosted by Google. Your profile photo is stored in private storage that requires signed access; deleting your account deletes the profile record that references it.

8. Deleting Your Account

You can delete your account yourself at any time from Account → Delete my account. Deletion is permanent: every trip, your profile, saved places, feedback, notifications, friend connections, group memberships and invites, badges, kudos, and referral records are removed, and you'll receive a confirmation email. If anything fails during deletion, the app tells you and lets you retry.

We also request removal of your sign-in record at that time; in the rare case automatic removal isn't possible, it is removed shortly after — your personal data is already gone.

You can also request deletion or a copy of your data by emailing info@plonktravel.com.

9. Security

Your data is transmitted over encrypted connections, protected by role-based access controls and server-side authorization checks, and share or join links use unguessable tokens. Payment card data is handled entirely by our payment provider and never touches our systems.

10. Children

Plonk is not directed to children under 13, and we do not knowingly collect their personal information.

11. Changes to This Policy

We'll post any changes here and update the effective date. If a change is significant, we'll notify you in the app or by email.

12. Contact

Questions or requests: info@plonktravel.com