Effective 10 July 2026 · Planchanted is operated from the United Kingdom.
What we collect
Account details — your name, email address, and a securely hashed password (or your Google/Microsoft/Apple identity if you sign in with them — we receive only your name and email).
Your holiday plans — trips, bookings, budgets, wishlists and the family members and travellers you add. This is your data; we store it to show it back to you.
Technical basics — IP address and browser details in server logs, kept briefly for security (rate-limiting and abuse prevention).
What we do with it
Run Planchanted for you — that's it. We never sell your data and never share it for advertising.
Send you service emails: login codes, password resets, family invitations, and (later) booking-deadline alerts you've asked for.
Family sharing shows your plans to the family members you invite, with the permissions you choose.
Cookies & storage
No advertising or tracking cookies. The app stores a login token in your browser so you stay signed in. Our
infrastructure provider Cloudflare may set strictly functional cookies for security.
Who touches your data
Our servers (UK/EU-hosted), and Cloudflare as our security and delivery network. When billing launches,
payments will be handled by Stripe and Apple — we never see your card number.
Your rights
You can export your plans (PDF export), correct your details in your account, or ask us to delete your
account and everything in it. UK GDPR rights (access, rectification, erasure, portability, complaint to the ICO)
all apply — just ask.