Legal

Data & Compliance

A full, transparent inventory: every piece of data we process, why we collect it, how long we keep it, what it's used for, and whether it's shared with third parties.

Last updated: 2 August 2026

This is a courtesy translation. The legally binding version of this document is the Spanish one, available at planera.es/datos-cumplimiento.

Minimisation

We only collect what's necessary for the app to work.

Transparency

We declare each piece of data, its purpose and its retention period.

No selling data

We don't sell or disclose your data for advertising.

Control

You can access, export and delete your data whenever you like.

Data inventory

For each category we detail what is collected, why, how long it's kept, what it's used for and who it's shared with.

Email address

What is collected: Your email address, when you register or use "Sign in with Apple" (Apple may provide a private relay email). If you use Apple, also an encrypted session token whose sole purpose is to revoke access when you delete your account.
Why (purpose): Identifying you, signing in, password recovery, account verification and sending you service notices.
Until when (retention): For as long as your account is active. When you delete it, it's instantly and irreversibly anonymised; backups rotate within a maximum of 30 days.
What it's used for: Account access and essential communications. Not used for advertising.
Is it shared with third parties?: Not shared for commercial purposes. Apple is only involved if you use their sign-in.

Name and profile data

What is collected: Username and, optionally, name, gender, date of birth, profile type (student, professional, personal) and avatar photo.
Why (purpose): Personalising your experience and, if you use the friends layer, identifying you to the people you add.
Until when (retention): For as long as your account is active. You can edit or delete them whenever you like.
What it's used for: Interface personalisation. Optional fields are only stored if you fill them in.
Is it shared with third parties?: Not shared with third parties. Your friends only see your name, username and photo; never your email or the rest of your profile.

Phone number

What is collected: We do not collect your personal phone number. Only a garage's phone number is stored, if you add it as business contact data.
Why (purpose): Solely, where applicable, to display the garage contact you save.
Until when (retention): The garage's phone number, for as long as you keep that garage or your account.
What it's used for: Garage contact data. Your personal phone number isn't used because it isn't requested.
Is it shared with third parties?: Not shared with third parties.

Location / geolocation (Garage feature)

What is collected: Your approximate/precise location with "while using the app" permission, only when you use the garage radar or start a trip. Not collected in the background, and no history of your movements is kept. The "location" field on a calendar event is free text you type, not GPS.
Why (purpose): Centring the map near you and calculating the distance and estimated arrival time at the garage.
Until when (retention): Used in the moment and not stored on our servers as location data. Only the coordinates of the garages you save persist.
What it's used for: Map display and route/ETA calculation. Based on your consent, revocable in your device settings.
Is it shared with third parties?: OpenFreeMap (maps) and OSRM (routes) receive the coordinates needed to display the map or calculate the route.

Vehicles and maintenance (Garage)

What is collected: Vehicle data you enter: nickname, make, model, year, number plate, VIN, fuel type, transmission, body type, mileage, MOT and insurance dates and notes; maintenance records (date, mileage, cost, parts, warranty), plans/reminders and saved garages (name, phone, address, coordinates, rating).
Why (purpose): Helping you manage your vehicles and their maintenance, alerting you to due dates, and showing your garages.
Until when (retention): For as long as your account is active. Deleted immediately when you delete your account; backups rotate within a maximum of 30 days.
What it's used for: Providing the Garage feature and generating maintenance reminders and plans.
Is it shared with third parties?: Not shared. Stays private to your account.

User content

What is collected: Tasks, subtasks, subjects, grades and marks, events, exams, habits, streak, shopping lists, training routines and workout sessions (including, if you choose to log it, your body weight linked to each session), focus sessions (duration, linked task and alert preferences), academic programmes, flashcard decks and cards, recipes (ingredients, steps, timings and servings) and your weekly menu.
Why (purpose): This is the app's main function: storing and organising what you create and syncing it across your devices.
Until when (retention): For as long as your account is active. Deleted immediately from the database when you delete your account; backups rotate and disappear within a maximum of 30 days.
What it's used for: Providing the service and calculating personal stats (averages, streaks, training volume).
Is it shared with third parties?: Not shared. Stays private to your account.

Photos, images and files

What is collected: Avatar and custom photos for your task icons (from the camera or your photo library).
Why (purpose): Personalising your profile and your content within the app.
Until when (retention): For as long as you keep the image or your account. Deleted when you remove them or close your account.
What it's used for: Display within the app. Camera/photo library permission is only requested when you use the feature.
Is it shared with third parties?: Not shared with third parties.

Payment and subscription data

What is collected: Subscription identifier (RevenueCat), status (active, cancelled, expired) and source. We do NOT store card details or payment methods.
Why (purpose): Activating and verifying the Pro subscription and applying each plan's limits.
Until when (retention): For as long as the subscription is active; billing data is retained by Apple, Google and RevenueCat according to their own periods and tax obligations.
What it's used for: Subscription management. Billing is processed by the Apple App Store or Google Play.
Is it shared with third parties?: Apple, Google and RevenueCat, as processors of the payment and subscription.

Error and performance analytics

What is collected: Crash reports, technical traces and app performance metrics, via Sentry. Anonymised where possible.
Why (purpose): Detecting and fixing bugs, and keeping the app stable and fast.
Until when (retention): Up to 90 days for diagnostic purposes.
What it's used for: Technical diagnostics. Not advertising or marketing-behaviour analytics.
Is it shared with third parties?: Sentry, as our technical monitoring provider.

Technical device data

What is collected: Device type, operating system, browser identifier (user agent) and platform.
Why (purpose): Ensuring compatibility, delivering notifications and diagnosing issues.
Until when (retention): For as long as the session or its associated token is active.
What it's used for: Technical operation and security. Not used as a unique identifier for advertising.
Is it shared with third parties?: Infrastructure and notification providers (e.g. Expo), to the extent strictly necessary.

IP address and security logs

What is collected: IP address of your last sign-in and access audit logs (action, date, IP and user agent).
Why (purpose): Protecting your account, detecting unauthorised access and preventing fraud.
Until when (retention): For as long as necessary to ensure security and handle any claims.
What it's used for: Security and compliance. Not used for commercial purposes.
Is it shared with third parties?: Not shared, except when legally required by a competent authority.

Push notifications

What is collected: Your device's notification token, only if you enable notifications.
Why (purpose): Sending you reminders for tasks, exams, breaks, the end of focus sessions, and app notices.
Until when (retention): For as long as you keep notifications enabled. You can revoke them in your device settings.
What it's used for: Notification delivery. Based on your consent.
Is it shared with third parties?: Apple (APNs), Google (FCM) and the delivery service (Expo), to deliver the notifications.

Focus mode and alarms

What is collected: Session duration, linked task (optional), alert preferences (alert on finish and persistent alarm) and, on iPhone with iOS 26+, authorisation to schedule native alarms and timers (AlarmKit). The timer and the alert are managed on the device.
Why (purpose): Letting you use a focus timer and alert you — with sound and on screen — when the session ends, even if the device has the system's Focus mode on (on iPhone with AlarmKit).
Until when (retention): Preferences and the active session are kept for as long as you use the feature or your account. Scheduled alarms are managed by the operating system until you cancel, stop them, or they finish.
What it's used for: Focus timer, countdown Live Activity and alerts on finish. Based on your consent for alarms and/or notifications.
Is it shared with third parties?: On iPhone, Apple manages AlarmKit and the associated Live Activities on the device. We don't sell or share this data with commercial third parties.

Live Activities and Dynamic Island

What is collected: Real-time status shown on the Lock Screen or the Dynamic Island: focus timer, workout rest timer or trip to the garage (when you turn on those features).
Why (purpose): Showing you the countdown or progress without opening the app.
Until when (retention): For as long as the activity is ongoing. Removed when the session, rest or trip ends.
What it's used for: Visual presentation on iOS. Not used for advertising purposes.
Is it shared with third parties?: Processed by Apple on the device. Not shared with third parties.

Friends and blocks

What is collected: Who you have an accepted friendship with, pending requests and blocks, with their date. Only if you use the friends layer, which is optional.
Why (purpose): Letting you chat and share content with people you choose, and enforcing blocks.
Until when (retention): For as long as the relationship exists. Deleting it removes the record; a block is kept so it keeps having effect.
What it's used for: Running the social layer. Finding you requires your exact username: there's no directory or fuzzy search.
Is it shared with third parties?: Not shared with third parties.

Chat messages and photos

What is collected: The content of the messages you send and receive, their date, and the photos you send through the chat. Also how far you've read in each conversation.
Why (purpose): Delivering your messages and keeping the thread synced across your devices.
Until when (retention): Until you or the other person delete them, or until one of the two accounts is deleted. Deleting a message removes it for both parties.
What it's used for: Not end-to-end encrypted: they travel encrypted in transit and are stored on the server, so we are technically able to read them. On your device, the local copy is stored encrypted. Never used for advertising or to train models.
Is it shared with third parties?: With the recipient, which is the whole point of the feature. With no one else.

Online status and "typing…"

What is collected: Whether you have the app open and whether you're typing in a conversation.
Why (purpose): Showing the other person that you're there, like in any chat.
Until when (retention): Not stored: calculated on the fly while the connection is open and disappears when it closes.
What it's used for: Only within the chat, and only the person you're talking to can see it.
Is it shared with third parties?: Not shared with third parties.

Shared lists and vehicles

What is collected: Which shopping list, task list or vehicle you've shared, and with whom.
Why (purpose): Giving that person real-time read and edit access while the share stays active.
Until when (retention): For as long as the share lasts. Access is revoked immediately when you stop sharing, block, or stop being friends.
What it's used for: Sharing a vehicle means showing everything saved about it, including the number plate and chassis number. Recipes and routines travel as a copy, not as live access, and without the photo.
Is it shared with third parties?: With the specific person you choose. With no one else.

Image for sharing outside

What is collected: Nothing on our part: the recipe image is generated on your device and doesn't pass through our servers.
Why (purpose): So you can show off a recipe on your socials in a nice format.
Until when (retention): We don't retain it.
What it's used for: You choose which app to send it to via the system's share menu.
Is it shared with third parties?: From that point on, the policy of the app you choose applies (Instagram, WhatsApp, whichever). Planera doesn't post anything on your behalf or access your accounts.

Google Calendar data

What is collected: Only if you connect the integration (Pro): encrypted access tokens and the Google account email.
Why (purpose): Two-way syncing of your events between Planera and Google Calendar.
Until when (retention): For as long as the integration is active. Deleted when you disconnect it or close your account.
What it's used for: Calendar syncing. Based on your consent, revocable at any time.
Is it shared with third parties?: Google, exclusively for the sync you enable.

Providers that process data

These processors only access the data essential to perform their function, under contract in accordance with Art. 28 of the GDPR. Some may process data outside the European Economic Area; in that case, the European Commission's Standard Contractual Clauses or other valid safeguards apply.

Apple (AlarmKit / Live Activities) Native alarms, timers and Live Activities on iPhone when you authorise them.

Apple App Store App distribution, in-app payments and notifications (APNs).

Google Play App distribution, in-app payments and notifications (FCM).

RevenueCat Subscription management and validation.

Sentry Error and performance monitoring.

Google Google Calendar sync (optional).

OpenFreeMap Maps for the Garage feature (map tiles).

OSRM Route calculation to the garage (receives coordinates).

Expo Push notification delivery infrastructure.

More detail on legal bases and rights in our Privacy Policy.

Your data, your control

Access, export or delete your data.

Exercise your rights of access, rectification, erasure, portability, objection and restriction whenever you like. We will respond within a maximum of one month.

privacidad@planera.es Open app