← Plananova AI

Privacy Policy

Last updated: 10 October 2026

This Privacy Policy explains how Plananova AI (“Plananova”, “we”, “us”) collects, uses, and protects your information when you use our mobile app and website (together, the “Service”). By using the Service you agree to this policy.

Information we collect

How we use your information

How your data is shared

We do not sell your personal data. To generate personalized plans, the text of a goal you create — together with your chosen timeframe — is sent to Google Gemini, a third-party AI service operated by Google LLC, solely to produce your plan. We ask for your permission in the app before any goal text is sent to this service. We do not send your name, email address, or other account information to the AI service. Google processes this text under its own privacy commitments; see the Gemini API terms and Google Privacy Policy. We otherwise share data only with service providers that help us run the Service (such as hosting), and only as needed to operate it, or where required by law.

If you accept analytics cookies on the website, Google receives data about how you use the website (see Cookies and analytics). It never receives your goals, plans, name, or email address.

Purchases and subscriptions

When you purchase Plananova Pro, the app sends the receipt issued by Apple or Google to our server, which verifies it with that store and records the resulting entitlement against your account. Apple and Google also notify our server when a subscription renews, lapses, or is refunded, so your access stays accurate. These records exist only to determine what your account may use — they are not used for advertising or profiling, and are not shared with anyone else.

Cookies and analytics

The marketing website sets no cookies of its own. The web app at plananova.com/app sets two strictly necessary cookies: a session cookie (plananova-ai-session) and XSRF-TOKEN, which protects its forms; both expire two hours after your last visit. Your browser's local storage also keeps your language choice on the website (pn-lang, pn-lang-dismissed), your cookie choice (zx_consent: accept or reject and its date; you are asked again after six months) and, while you are signed in to the web app, your sign-in token (pn_token), which the web app sends only to our own server. None of these need your consent, because the website cannot work as you set it without them.

The only optional tool is Google Analytics 4, provided by Google Ireland Limited (for visitors in the EEA and Switzerland) and Google LLC (USA). It runs only if you choose “Accept all”, or turn on Analytics under “Preferences”, in the cookie banner; until then no request is sent to Google and no analytics cookie is set. It runs on the website and on the web app's sign-in screen, never once you are signed in, so your goals and plans are never part of it. It measures the pages you visit (with the query string and IDs removed from the address), page titles, the page you came from, when and how long you visit, interactions such as scrolling and outbound link clicks, your browser, device and language, and an approximate location (country, city) derived from your IP address; Google Analytics 4 does not log or store IP addresses. No name, email address, account or user ID is sent to Google, and Google signals and ad personalisation are switched off. It sets the _ga and _ga_<ID> cookies, which stay in your browser for up to two years; Google keeps the analytics data for 14 months, then deletes it.

Legal basis: your consent (GDPR Art. 6(1)(a) and ePrivacy Art. 5(3); for visitors in Türkiye, explicit consent under KVKK Art. 5(1)). The data is processed by Google, including on servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; for visitors in Türkiye the transfer abroad relies on your explicit consent under KVKK Art. 9(6)(a), given knowing that the USA may not offer the same level of protection as Türkiye and that US authorities may be able to access the data.

You can change your choice or withdraw consent at any time with the “Cookie settings” link in the website's footer or on the web app's sign-in screen, or open the cookie settings here. Withdrawing stops Google Analytics and deletes the _ga cookies the site can delete. Rejecting does not affect your use of the Service.

Data retention

We keep your information for as long as your account exists. When you delete your account, your personal data and all associated content are permanently removed (see below).

Deleting your account

In the app: open Settings → Delete account and confirm. This permanently deletes your account together with all of your goals, plans, and check-ins. This action cannot be undone.

By email: if you cannot access the app, email support@plananova.com from your account address and we will delete your account and data.

Your rights

You may access, correct, or delete your personal data at any time through the app, or by contacting us. You may disable reminders in Settings.

Children

The Service is not directed to children under 13, and we do not knowingly collect data from them.

Security

We use industry-standard measures to protect your data in transit and at rest. Passwords are stored hashed and never in plain text.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions? Email support@plananova.com.