Privacy Policy

• Your account. Your email address, a password if you set one (stored by our sign-in provider as a hash), or your Google sign-in if you use it.
• Your profile. Your first name, handle, photo, short bio and the activities and groups you join. Other members can see these. Your date of birth is private: we use it to check you are 18 or older and to show 21+ plans only to members who are 21 or older.
• A school or work email, if you verify one. The address and the one-time code we send to it, to show a verified mark for that organization.
• What you do in the app. Plans you host or join, RSVPs and check-ins, who you said you met, chapters you organize, reviews, places you add or correct, reports you file, people you block or mute, and your notification settings.
• Messages. The messages you send and receive and when you read them. A deleted message's text is kept 30 days for safety reviews, then removed.
• Coaching. If you coach: your coach profile, listings, credentials (shown as self-reported), photos, availability and the rough point and radius you coach in. If you book: your bookings, times, notes and the reviews you write.
• Organizer tools. If you claim an organization's event listings: the website or calendar you claimed, how you proved it, the check results and dates. If you connect an Eventbrite account: an access token for it, kept encrypted, and the events it lists. Moderators can see your claims, never the token.
• Devices. If you turn on notifications, the push address your browser gives us for that device. We also keep the time zone your device reports and when you last opened the app.
• Recommendations. A summary of the activities you engage with, kept as numbers, used to suggest plans, groups, people and coaches. In the You tab you can turn off personalized suggestions (they then use only distance and time) and people suggestions (you are then never suggested to anyone). Items you mark “Not interested” are kept 180 days.

We ask for your device’s location only when you tap “Use my location”, and never in the background. It is rounded to about 1 km on your device. On Home it is used for that visit only and not stored. When you are choosing your home area (when you sign up or change it), the rounded point becomes your saved home area. We keep a home area as a point rounded to about 1 km and a label; it is private to you and never shown on your profile. Other members see distances only as bands (“1 to 5 mi”), never your location.

Plan addresses are kept with the plan. A host can keep the exact address to the people they approve; until then others see only a rough area.

When you use the map, your device loads map tiles directly from OpenFreeMap, which receives your IP address and the area you are viewing, and place files from GitHub Pages in the same way. We do not log which areas or places you look at. If you add a place, we keep who added it so you can edit or delete your own pin and so moderators can act on abuse; that link is never shown to other members, never published, and is removed when you delete your account (private and pending places are deleted; reviewed public places stay without your name). Place reports and corrections are kept with the reason and the change, and lose your name when you delete your account. To decide which areas of the map to keep, we look at whether any active member’s saved home area falls in a roughly 50 km square; we store only the day this was last true for that square, never who.

To run Activity Planet: show you plans, people and places near you, deliver messages and notifications, handle bookings, and keep the service working. To keep people safe: enforce the age limit, act on reports, block known abusive images, and stop spam and abuse with rate limits. We don’t sell personal data or share it for advertising.

Profile photos and covers are checked against a list of images that were removed for abuse, using fingerprints of the image (hashes), not face recognition. We never use photos for face recognition.

Members see your public profile, the plans you host, and, depending on the plan, that you are going. Someone you block can’t see your profile, your RSVPs or your messages, and you can’t see theirs. A plan’s share page shows its title, description, time, rough area, group, going count and the host’s first name, handle and photo to anyone with the link; never the exact address or the list of who is going.

Moderators can see what is needed to act on a report, including a reported message, and a minimal account record (never your email, date of birth, location, blocks or other messages). Every account record a moderator opens is logged and the log is kept a year.

These services handle data on our behalf, or receive some directly from your device when you use a feature:

• Supabase. Our database, sign-in, file storage and server functions, hosted on Amazon Web Services in the United States. It holds everything described on this page. Recommendations are computed inside Supabase with its built-in text model; your data is not sent to an outside AI service.
• Vercel. Hosts this site and the web app. Like any web host it receives your IP address and the pages you request, and keeps short-lived request logs.
• Resend. Sends our emails (sign-in links when set up, verification codes and the notification emails you choose). It receives your email address and the message.
• Google. Only if you choose Sign in with Google: Google tells us your name and email address, and learns that you signed in to Activity Planet.
• Geoapify. Address and city search. When you type into a place or city search, the text you type and your IP address go to Geoapify, and to rank results near you, the rough point of your saved home. Our servers also send it the addresses of imported venues to place them on the map, with no member data.
• OpenFreeMap. Map tiles. Your device loads them directly, so OpenFreeMap receives your IP address and the area you are viewing.
• GitHub (Pages). Hosts the public place files the map reads, one file per map area, so GitHub receives your IP address and the areas you load, never your hubs or your account.
• OpenStreetMap (Nominatim). Our servers look up the addresses of imported venues when Geoapify isn't available. No member data is sent.
• Ticketmaster and SeatGeek. Sources of public event listings. Our servers search them by map area; they receive no member data. Following one of their links takes you to their site, under their own privacy policy.
• Push services. If you turn on notifications on a device, your browser's push service (run by Apple, Google or Mozilla, depending on the browser) delivers them and receives the notification's text.
• Cloudflare Turnstile. Where it is switched on, a bot check on the public request forms (intimate image removal and listing removal).
• Eventbrite. Only if you connect your own Eventbrite account to list your events: you sign in on Eventbrite, which tells us an access token for your account. We keep that token encrypted in Supabase Vault and use it to read your live events from Eventbrite's API, so Eventbrite receives it with each request. It is deleted with your account; you can also remove Activity Planet in your Eventbrite account settings.
• Cloudflare DNS. Only if you prove you own a website with a DNS record: our servers ask Cloudflare's public DNS for that record on the website's domain. No member data is sent.
• Stripe. Only when in-app payments are available: Stripe handles card payments and coach payouts, under its own privacy policy. We never see or store card numbers; we keep payment ids, amounts and dates.

While your account is open we keep your data so the service works. Some things expire on their own: read notifications after 90 days, plan chats 90 days after the plan, the text of deleted messages after 30 days.

When you delete your account, your profile details, photo, private details, memberships, devices, verified emails, organizer claims, your Eventbrite connection and roles are removed at once, calendars you connected stop, and your sign-in is closed. What we keep afterwards:

You can change your profile, notification settings and suggestions in the app at any time. You can delete your account in the app (You, Delete my account), or by email as described on the account deletion page; deletion is immediate, with no waiting period. To ask for a copy of your data, a correction, or anything else about your data, email support@activityplanet.app from the address on your account. Depending on where you live, you may have further rights, such as to object to some uses or to complain to your local data protection authority.

Activity Planet is for people 18 and older. We don’t knowingly collect data from anyone younger. If you believe someone under 18 is using it, report the account in the app or email us.

Data is encrypted in transit, and access to it is limited by row-level rules in the database, so each person reads only what they are allowed to. No system is perfectly secure. If a breach affects your personal data, we will tell you, and the authorities, as the law where you live requires.

Activity Planet is run from the United States and our main data store is there. If you use it from elsewhere, your data is transferred to and processed in the United States.

When this policy changes, we update the version above and post the new text here before it takes effect.

support@activityplanet.app. Safety concerns: the Safety Center.