Privacy Policy

Last updated: June 2026

Scope & Applicability

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit PlanPerfect.Date, create an account, purchase credits, send an invite, or contact support. If you are in the EEA/UK, this notice complies with the GDPR/UK GDPR.

Categories of Data We Process

  • Identity & contact data: display name and email address.
  • Account & order data: account ID, authentication tokens, credit balance, invite history, and Stripe order references.
  • Invite content: the questions, dates, GIFs, and notes you add to an invite, plus any response from the recipient.
  • Payment data: handled by Stripe — we never see or store full card numbers.
  • Device & usage data: IP address, browser type, OS, timestamps, and pages viewed.
  • No special categories: we do not intentionally collect sensitive data such as health, sexual orientation, or religious beliefs.

Purposes and Legal Bases

We only process personal data where a legal basis applies:

  • Performing a contract (Art. 6(1)(b) GDPR): creating your account, processing orders, delivering credits and invites, and providing support.
  • Legal obligations (Art. 6(1)(c)): tax and accounting record-keeping for purchases.
  • Legitimate interests (Art. 6(1)(f)): securing the service, preventing fraud and abuse, and improving the product through aggregated analytics.
  • Consent (Art. 6(1)(a)): optional marketing emails and non-essential cookies. You can withdraw consent at any time.

Disclosures & Recipients

We do not sell or trade your personal data. We share it only with trusted providers as needed:

  • Payment processing (Stripe).
  • Hosting, database, and infrastructure providers (Lovable Cloud / Supabase, Cloudflare).
  • GIF search via third-party media APIs.
  • Email delivery providers for transactional messages.
  • Authorities, where required by law to protect rights, property, or safety.

International Transfers

Where we transfer EEA/UK personal data to providers outside the EEA/UK, we rely on legal safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs).

Retention

  • Account & invite data: for the life of the account, plus 24 months.
  • Orders & invoices: up to 10 years (statutory tax requirement).
  • Usage logs: up to 12 months.

You can delete your account at any time from Settings, which removes your profile and invites — subject to legal retention requirements for billing records.

Your Rights

Under GDPR you have the right to access, correct, delete, or restrict processing of your data, and to data portability and objection. We do not perform automated decision-making or profiling within the meaning of GDPR Article 22. To exercise your rights, contact us at help@planperfect.date.