How Plans uses your data

Plans is a private personal travel organizer, not a public account service. Only its approved owner can open imported itineraries.

Google and Gmail

Google sign-in establishes your identity. With your permission, Plans uses read-only Gmail access to search recent travel messages, including archived confirmations, and to read candidate confirmations and future updates. It does not send, delete, archive or mark messages as read.

Message bodies are processed in memory to extract reservations. Plans stores booking details, source message identifiers, confirmation references, source subjects and dates. For messages that need review it also stores the sender and a short text excerpt. Email markup does not independently prove a booking. Extracted bookings and changes enter Review for your approval before they can create or replace itinerary records. Unsupported or ambiguous details are not invented into bookings. Email contents are not sent to an external AI parser.

Storage and connected services

The application and its dedicated database are hosted on Cloudflare. Private booking, review and notification-subscription records are encrypted by the application. Google access and refresh tokens are encrypted server-side. Session cookies protect access to your private views. The app has no advertising, public itinerary sharing or third-party analytics.

When flight monitoring is separately configured, only public flight identifiers, dates and route details are sent to the flight-data provider. Passenger names, booking references and email bodies are not sent. Provider snapshots are kept separately from your email-derived itinerary, with an application expiry of less than 24 hours. Flight-data responses are not sent to AI systems.

Notifications

Web Push starts only after you grant permission and register a device. Plans stores its private push endpoint and encryption material to deliver alerts through the browser's push service. Travel updates may be visible on the device's lock screen. Delivery and gate coverage depend on the device and data provider.

Disconnect and delete

Settings lets you disconnect Gmail, remove a receiving device, or delete imported bookings and review items. Disconnecting removes this app's saved Gmail connection tokens and stops imports; it does not erase bookings. Deleting imported data pauses imports until you choose to sync or reconnect. None of these actions changes your Gmail messages.

You can also revoke the app's Google permission in your Google account connections. Deleted server records may remain in the hosting provider's protected backups for its backup-retention period. Browser notifications already delivered remain under your device's controls.

Limited Use

Plans' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Data is used to provide this personal travel organizer, not for advertising, sale or training general AI models.

This tool is operated by its account owner. Questions, corrections and deletion requests should go to that owner. Operational connection and permission status is shown in Settings.