Privacy Policy

What we collect

PlanFare collects the minimum data needed to provide the service: your email address, trip details (destinations, dates, budgets), expense data, and optional photos. We do not sell your data to third parties.

How data is stored

Your data is stored securely in Supabase (PostgreSQL) with row-level security. Photos are stored in Supabase Storage. All data is encrypted in transit (TLS) and at rest.

Third-party services

• Supabase — database and authentication
• Stripe — payment processing (we never see your card number)
• Anthropic (Claude) — AI features (trip data is sent for processing but not stored by Anthropic)
• Vercel — hosting
• PostHog — product analytics (anonymized usage data)

AI data usage

When you use AI features (chat, paste-and-parse, destination intel), your trip context is sent to Anthropic's Claude API for processing. Anthropic does not use this data for training. The data is processed and discarded.

Your rights

You can export or delete your data at any time. Deleting your account removes all trips, expenses, and associated data permanently. To request data deletion, contact us or use the delete account option in Settings.

Analytics

PlanFare uses PostHog for product analytics. We track anonymous usage events (page views, feature usage, conversion steps) to improve the product. We do not log personally identifiable information in analytics — only hashed identifiers and email domains. You can opt out of analytics by contacting us.

Cookies

PlanFare uses essential cookies for authentication and analytics. Authentication cookies are required for the service to function. Analytics cookies (PostHog) help us understand how the product is used.

Data retention

Your data is retained as long as your account is active. If you delete your account, all associated data (trips, expenses, documents, photos) is permanently removed within 30 days. Stripe retains payment records per their own retention policy.

Contact

For privacy questions, contact khalid@planfare.app.