Privacy Policy

Last updated: 22 October 2026

IPlan is a multi-city travel planner app (iOS, Android, and web) operated from Austria. Contact: mohammadrezaimn@gmail.com. By using IPlan you agree to this policy.

1. What we collect

Account. Email, display name, Google or Apple sign-in identifiers if you use those, a password hash for email sign-in (never your raw password), language preference, optional travel profile, and the consent that you accepted these terms.

Trips. Cities, dates, places, restaurants, hotels, and tickets you add; photos or scans of bookings you attach (OCR on Plus); spoken-guide language and notes.

Travel partners. If you invite someone, they must already have an IPlan account. They can see and edit that trip, including cities, days, tickets, and booking photos on it. You can remove them; they can leave. Plus features used on that shared trip are billed to the owner. Their own account is not upgraded, and the shared trip does not count toward their free trip.

Location (optional). If you allow it, GPS to show you on the map, detect arrival, and suggest nearby places. We do not continuously track you in the background for advertising.

Camera and photos (optional). Photograph tickets, hotel bookings, or a place you share on Social. Trip photos stay with that trip. Social posts include the photo, caption, rating, and place name or coordinates you add.

Calendar (optional, on-device). If you allow it, IPlan can write travel and hotel events to your device calendar. Those events live on your device / calendar provider, not as a separate IPlan calendar database.

Purchases. Apple or Google process Plus and trip-pack payments. We receive a receipt / entitlement — not your full card number.

Social. Social is public. Posts, likes, comments, mentions, and your display name are visible to other IPlan users. Connections are a friends list, not a privacy lock. You can delete your own posts and comments, and report or block others.

Device. App version, OS, and crash-style errors needed to run the app. The free plan shows Google AdMob ads (banner on Plus, interstitial about every 30 minutes). Plus removes them. AdMob may use a device advertising identifier and, in the EEA/UK, a consent prompt. We do not sell personal data.

Plus. Place catalogs, routes, and AI guides may be requested from Google (Places / Routes) and OpenAI. Those requests include the query or place context — not your password.

2. How we use it

To sync your trips, run the map and spoken guides, host the public Social feed, process in-app purchases, fix bugs, and keep the service safe (hide reported content, enforce blocks).

Legal bases (EU/EEA/UK): contract, consent (location, camera, calendar), legitimate interests (security, abuse prevention), and legal obligation.

3. Partners

Hosting (Railway / cloud), Apple and Google (sign-in and purchases), Google AdMob (free-plan ads), Google Maps / Places / Routes, OpenAI (Plus guides), and booking / geo partners for outbound links.

Booking sites have their own privacy policies. Some links are affiliate links: if you complete a booking, we may receive a commission. We do not receive your payment card details for those bookings.

4. What we do not do

We do not sell your personal data.
We do not use your Social photos for advertising to third parties.
Social, camera, calendar, and location are not required to create a basic trip.

5. Retention

Account and trips until you delete them or ask us to delete your account. Social posts until you delete them or we hide them after abuse reports. Purchase records as required for accounting and store rules. Backups for a limited period, then overwritten.

6. Your rights (EU/EEA/UK)

You may request access, correction, deletion, restriction, portability, or object to certain processing by emailing us. To close the account entirely, follow Delete your account. You can turn off location, camera, or calendar in system Settings; delete posts and trips in the app; and manage subscriptions in your Apple or Google account. You may lodge a complaint with your local authority (Austria: dsb.gv.at).

7. Children

IPlan is not directed at children under 16. We do not knowingly collect their data. Email us if you believe a child has an account and we will delete it.

8. International transfers

Servers and processors may be outside your country (including the EU and the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Changes

We may update this policy. The “Last updated” date will change. Material changes will be posted in the app or on this page.