Privacy policy

The short version: we collect what we need to run plans, keep people safe and handle payments. We never sell your personal data. Your home location is stored rounded to a neighborhood. You can see, download or delete your data.

What we collect

You give us

• Account details: first name, email, password (stored hashed, never readable), birth year and city.
• Profile: anything you add, like photos or the activities you like.
• Phone number: only if you verify your phone. If you also turn on text reminders, we store the number encrypted and use it only for those texts.
• Plans: plans you join, host, cancel and keep; messages in plan chats; photos you add to albums; feedback you leave.
• Reports: what you tell us when you report a problem or contact us.
• Safety records: reports, blocks and removals from plans that involve you, messages our filter holds, card disputes and what our team did about them. Only our team sees them, to spot people who misuse the service.

Created as you use Kept Plans

• Join records: when you join a plan, we save the time, your IP address, the rules shown to you (the free cancel window, and what is kept for a late cancellation or a no-show) and, for activities with real risks, that you confirmed you understood them. We also save when you accepted the terms and when you confirmed your email.
• Check-ins: when you check in, and how (a code, your location at that moment, or the host).
• Location: your home area, rounded to a neighborhood, to show nearby plans. If you turn on “Where the group is”, your live location during that plan only, shared only with that plan’s members.
• Device and usage: basic technical data like browser type and pages visited, used to keep the service working and secure. The cookie policy says whether we use an analytics tool and how to turn it off.

From payment processing

• Card payments are processed by Stripe. We receive a token and limited details such as the card brand and last four digits. We never see or store your full card number.
• For hosts receiving payouts, Stripe handles identity and bank verification.

Why we use it

• To run plans: show you plans, let you join and pay, run check-in, chat and albums.
• To keep people safe: verify age, review reports, act on the guidelines, and help in an emergency.
• To handle money: payments, refunds and payouts, and the records tax and payment rules require. If you dispute a charge with your bank, we use your join record and check-in to answer it.
• To improve Kept Plans: understand which features work, fix bugs, and measure whether paying to join helps people show up. We use aggregated data for this wherever we can.
• To contact you: plan updates, receipts and safety messages. Text reminders and the newsletter only if you opt in.

AI features, in plain words

A few optional features, like the written recap of a plan and some plan suggestions, use AI models run by service providers we contract with. When you use them, we send only what the feature needs: for a recap, the plan details, the itinerary and album captions. We never send payment details, your messages or your exact location. Our contracts do not allow providers to use this data to train their own models. Every AI feature has a plain version that uses no AI, and you can switch AI features off in settings.

When the photo check is on, a small copy of each photo added to a shared album or a profile is checked for things the guidelines do not allow, like nudity or a photo of an ID card. A photo it flags is hidden until a person on our team looks at it. Most come back within a day.

Who sees what

• Other members: your first name and last initial, your profile photos if you add them, and your Kept rate. People in the same plan see that you are going.
• Hosts: the people who joined their plan, and their check-ins. Not your age, email or phone number.
• Venues: only the details of people who choose to share them.
• Service providers: companies that host our systems, process payments, send email and text messages, and provide the AI features above, only as needed to do that work, under contract.
• Your bank, in a card dispute: if you dispute a charge, we share your join record and check-in with Stripe so they can pass it to your bank.
• The law: when we are legally required, or when we believe it is necessary to protect someone’s safety.

We never sell your personal data, and we do not share it for advertising.

How long we keep it

• Account and profile data: while your account is open. Deleted within 30 days after you delete your account.
• Plan chats: closed a few days after the plan; deleted after 12 months.
• Albums: while the album has members. Your photos leave every album when you delete your account.
• Payment records and join records: as long as tax and payment rules require, usually seven years.
• Safety reports: as long as needed to keep people safe, and to stop removed members from returning. Other safety records, like blocks and removals, are deleted after a year.
• Website form messages: up to 24 months.

Your choices and rights

• See and download your data from settings, or ask us for a copy.
• Correct anything that is wrong.
• Delete your account and your data, with the exceptions above.
• Turn off people suggestions, AI features, location sharing and marketing email at any time. Every email that is not about your account or a plan you are in has a one-click unsubscribe link at the bottom.
• Stop text reminders by replying STOP, or switch them off in settings. Switching them off deletes the stored number.
• Depending on where you live, you may have more rights, such as objecting to certain uses. Write to us and we will help.

Security

We protect your data with encryption in transit, hashed passwords, limited staff access, and payment processing that keeps card numbers away from our systems. No system is perfect; if a breach affects you, we will tell you promptly.

Children

Kept Plans is for adults. We do not knowingly collect data from anyone under 18. If you sign up and tell us you are under 18, we refuse the signup and store nothing.

Cookies

See the cookie policy.

Changes

We will update this page when our practices change, and tell you directly about significant changes.

Contact

Questions or requests about your data: support@keptplans.com.