Privacy policy
Last Updated: 10/12/2025
Plana cares about your privacy. The following Privacy Policy outlines how our company (“Plana” or “we” or “our company”) may disclose, use, and process personal information collected within our company, and through our website, our mobile ap, and any other websites we own and operate that link to this Privacy Notice (the “sites”), and related content, and any other functionality we offer (collectively, the “Services”). We reserve the right to modify this Privacy Policy from time to time. We will notify you by email or through the App if the changes are material. In some cases, you will be given the choice to accept the changes made to the policy. If you do not accept the terms of the updated Privacy Policy, please do not use the Services.
Personal data we collect from you
Personal data is collected from you when you interact with the Services. This can be directly from you or from other sources and third parties.
General Information
When you sign up to use the Services, we may collect personal data such as your name, email address, usage data, phone number, year and month of birth, password, place of residence and location information, including language and time zone. Additionally, we may infer your sex and/or gender by your use of the Services.
Usage data may include information, including: Your electronic device’s Internet Protocol address (ex. IP address), browser version, browser type, the pages of our website that you visit, the time and date of your visit, unique device identifiers, the time you spent on those pages, and other diagnostic data.
You might also choose to input information, such as the name you would like us to call you, or your first name. Only you decide whether to provide this information and withholding it will have no effect on the use of the Services should you decide not to enter this information.
When utilizing the Services, you may opt to provide personal information about yourself, including but not limited to your weight, height, or pregnancy details (if you choose the pregnancy feature), other related symptoms and phases of your menstrual cycle, general health and well-being, or additional data relating to your physical and mental wellness, water consumption, and sleep duration.
Personal data we automatically collect
Device Information
This includes details such as the device model, the operating system type and version, unique identifiers for the device, enabled accessibility features (such as display settings, hearing aids compatibility, and physical or motor assistance options), information on the mobile network operator, and storage capacity or version of the device's operating system.
Location data
This includes your IP address, which provides an approximate location (not exact), as well as details about your time zone or your mobile service provider.
Usage information
This encompasses data regarding your interactions with the Services, such as how often you use them, the specific areas and features you access, payment transaction details (excluding complete payment card numbers), and your engagement with certain functionalities.
To gather this information and more, we may utilize cookies and similar technologies. For further details, please refer to our Cookie Policy.
Data from third-party sources
We may receive personal information about you from outside parties. For instance, we might collect data from third-party sources to enhance or supplement your current information, which helps us tailor your experience and conduct statistical analysis.
Our disclosure of personal information and how we use your personal data
Depending on the features of the Services you engage with, we may process your personal data under one or more of the following legal grounds (with some examples provided):
Legitimate Interests
We may utilize your personal data when it aligns with our legitimate interests aimed at improving the management of our Services. Examples include:
- Identifying and resolving software issues;
- Distinguishing real user interactions with the Services from automated bots;
- Monitoring the App’s performance and reliability;
- Keeping you informed about your subscription details;
- Conducting security assessments to safeguard the Services;
- Analyzing aggregated usage patterns of the App.
Contractual Obligations
We might process your personal data to meet our contractual commitments, such as managing your Plana account and handling other administrative tasks.
Your Consent
You may allow us to process your data for the purpose of delivering the Services.
Legal Compliance
We may be required to process certain personal data to adhere to relevant laws and regulations. Please note that the processing of personal data is conducted in accordance with applicable laws and regulations.
We provide further examples of our legitimate interests below. When using this legal ground, we first assess our genuine interest in managing and running our business. We also evaluate the potential effects on your rights to ensure that we only use the minimum amount of your data for the purpose at issue and that our interests do not take precedence over yours.
Below, we outlined the purposes for which we process your personal data and our lawful bases for doing so, including some basic examples:
Purpose of Processing: Promotions communications for Services
Legal Basis for Processing: Consent
Example: If you give consent and we use your personal data, we can post a comment or review on our website.
Purpose of processing: To monitor and analyze trends, activities, and usage in connection with the Plana App
Legal basis for processing: Legitimate interest
Example: We may analyze a user's browsing activity in the App to ensure the App functions as intended in response to their interactions, identify and fix issues, and improve the user experience.
Purpose of processing: To send you satisfaction surveys, administrative messages, technical notices and updates, and security alerts
Legal basis for processing: Legitimate interest
Example: To request that you update the App to ensure you have access to the latest features.
Purpose of processing: To review App content, feedback and complaints raised to ensure accuracy of content in the App
Legal basis for processing: Legitimate interest
Example: We may process your email and name to review support requests that require review by our staff.
Purpose of processing: To respond to user comments, requests, and questions to provide customer service
Legal basis for processing: Legitimate interest
Example: We may process your name and email to reply to your support request or to contact you about a specific question or query that you raised.
Purpose of processing: For the customization of service and product offerings and making our recommendations to you, for example, through emails or push notifications, including third-party products and offerings
Legal basis for processing: Consent
Example: We may offer a discount.
Principles of Processing
No sale of personal data
We are committed to protecting your personal information and will not sell or rent it for financial gain. Your personal data will only be shared in accordance with the terms outlined in this Privacy Policy. We may share your information with our service providers who assist us in delivering our Services as detailed in this policy.
Data minimization and purpose limitation
We will only handle personal data in a manner that aligns with the purposes for which it was collected or authorized by you. Additionally, we will not gather, access, use or disclose any more personal information than is necessary for those stated purposes.
User privacy rights
We value your privacy and are committed to safeguarding your personal information.
Right to access
You have the right to request what personal data we process about you, to access all your personal data and to receive a copy of it, including in a structured and portable form.
Right to rectification
You have the right to request the correction of inaccurate or incomplete personal data that we hold.
Right to Erasure
You have the right to request the erasure of your personal data at any time. Erasing personal data may affect your experience using certain features of the Services that rely on historical data.
Right to restrict processing
You have the right to request that we restrict the processing of your personal data.
Right to data portability
You have the right to request your personal data in a portable form, which enables you, for instance, to reuse your data for your individual purposes or different services.
Right to object to the processing of your personal data
You have the right to object to the processing of your personal data, at any time.
Right to withdraw consent
If you have provided consent for the processing of your personal data, you have the right to withdraw that consent at any time.
How to exercise your privacy rights
Please email us at technology@plana.org to exercise your privacy rights.
We will respond to your request within the time frame required by applicable law. Please note that certain rights may be subject to legal exceptions or restrictions. If your request cannot be fulfilled for any reason, we will explain the reason in our response.
Please note that if we receive a request that is either unclear or lacking sufficient detail, we may contact you for additional information to process your request. In some cases, if a request is manifestly unfounded, excessive, or repetitive, we may refuse to fulfill it or charge a flat fee of $6.50 fee to process the request.
To process your request, we may require you to verify your identity. Typically, this will involve confirming that the request is made from the email address associated with your account. If you have not registered an account with us, we may ask for further information to verify your identity and ensure that we are responding appropriately to your request.
Depending on the jurisdiction, you may have the right to file a complaint with your local data protection authority if you believe we have not fully complied with applicable data protection laws.
Links to third-party websites or Services
We will not share your personal data with third parties except as specified within the Privacy Policy.
You become a Plana user, and with your consent, we start sharing the following personal data to to promote the Services.
- Your subscription status
- You age group
- Technical identifiers: IP address, user agent, identifier for advertisers, Android ID, Google advertising ID, and similar unique technical identifiers.
You can withdraw your consent and opt out from the sharing of your personal data for marketing purposes in accordance with this subsection at any time through adjusting your device settings in IOS or Android.
Third parties processing your personal data
Data Retention
We gather, access, use and disclose only the minimum amount of data needed to fulfill one of the purposes specified in this Notice of Privacy Practices and we retain personal data only for as long as necessary to fulfill the purposes for which it was collected, in alignment with our legitimate business needs and applicable legal requirements. However, in some cases, we may need to store personal information for extended periods to comply with obligations related to legal, tax, or regulatory requirements established by governing authorities.
When determining the appropriate retention period, we evaluate various factors, including the volume, nature, and sensitivity of the data, the potential risks associated with unauthorized access or disclosure, and whether the intended purposes can be achieved through alternative means. Additionally, we consider legal, regulatory, tax, accounting, and other obligations that may require extended data retention.
Security of personal data
We take the protection of your personal data seriously and implement technical and organizational measures to protect it from misuse, loss, theft, unauthorized access, disclosure, alteration, and destruction. These measures are designed based on the nature of the personal data we process and the risks associated with handling sensitive information. Our security measures include:
- We conduct systematic vulnerability scans and penetration testing to identify and address potential security risks.
- We implement data integrity protections to prevent unauthorized modifications to your personal data.
- Our employees are granted different levels of access based on their roles and only access the minimum amount of your personal data necessary to fulfill limited and necessary purposes required for the operation of the Services. We impose struct responsibility measures on our employees for any disclosure, unauthorized access, destruction, alteration, or misuse of your personal data.
- We periodically conduct data protection impact assessments to ensure that our Services align with privacy best practices and legal standards. We also commit to undertake a privacy audit if there is an event of Plana’s merger or takeover.
User responsibility
To enhance the security of your account, we recommend that you:
- Please protect your password. Do not allow anyone to use your device or share your password with others. You may also decide to add a passcode or enable face ID to access the App for an extra layer of protection.
No security system is flawless. Therefore, we cannot guarantee the absolute security of the Services or rule out interception of your data while it is in the process of being transmitted to us.
Security Breaches
If we learn of a security systems breach, we may attempt to notify you via email or post a notice and will take reasonable steps to remedy the breach as specified in applicable law and this Privacy Policy. If we learn of a potential data breach, together with other actions that are referred to in this Privacy Policy, we will take actions to remedy the breach as appropriate under the circumstances, which may include logging you out from all devices, resetting a password (sending a temporary password), and performing other reasonably necessary activities.
Children’s Privacy
Plana is not intended for use by children under the age of 13. We do not knowingly collect, use, or process personal data from children without verifiable parental consent. If we learn that we have unintentionally collected personal data from a child, we will take immediate steps to delete the information and/or delete the child’s account.
Communication with you
We may communicate with you to provide updates and information or respond to inquiries. We may contact you via email or through other means (like push notifications and pop-ups) to communicate with you about events, offers, information, and Services, that we think may be if interest to you. These communications may be based on the Services you have selected for use.
Opt-out options: You are always able to opt out of receiving certain kinds of emails by clicking the unsubscribe link in an email of the kind from which you wish to unsubscribe. Opting out of certain kinds of emails or notifications will not end your receiving service-related emails that are necessary to your use of the Services. You may also opt of receiving push notifications by adjusting your settings in your device.
Presence on social media
We might use social media platforms to engage with our users and promote Plana. When you interact with us on these platforms, we may process information, such as your username, profile picture, and any comments or posts you make related to Plana, for engagement purposes only.
Contact us
If you have any questions about this Privacy Notice, please contact us at technology@plana.org.