Privacy Policy

Last updated: October 26, 2026

This is an English translation of the Hebrew policy. If the two differ, the Hebrew version prevails.

This policy explains what information PlanToGo collects, why, whom it is shared with, and what your rights are. The service's operator, Nadav Barash, is responsible for the information. Contact: support@plantogo.co.il.

What we collect

• Account details: when you sign in with Google, we receive your name, email address, profile picture and account ID. We never receive your password.
• Details you fill in when signing up: first and last name, mobile phone number, how you heard about us (optional), and whether you agreed to receive marketing messages.
• Phone verification: to use the free import, you verify your phone number with a code sent by SMS. Google (Firebase) sends the message, and the number is linked to your account, so each number gets a free import on one account only.
• Trip content: what you create or edit: days, places, hotels, reminders, notes, and the emails of the people you share with.
• Files for import: a document you upload for import is sent for processing, and the plan created from it is saved in the trip. We do not keep the file itself, only its name, its page count and the import details.
• Usage data: when you joined and last signed in, the number of imports and place completions, and their cost.
• Technical security data: to make sure requests to our servers come from the app and not from automated software, we use Google's reCAPTCHA Enterprise (through Firebase App Check), which collects technical information about the browser and device.

Why we use it

• To run the service: to save and show your trips and sync them between devices and with the people you share with.
• To secure the service, prevent abuse and enforce usage limits, for example one free import per phone number.
• To provide support, contact you about your account, and improve the service.
• To send you updates, tips and offers by email, SMS or WhatsApp, only if you agreed to it. You can withdraw your consent at any time on the "My account" screen in the app or by contacting us, and every such message will include a way to unsubscribe.

We do not sell personal information, use it for other parties' advertising, or pass it to advertisers.

Who it is shared with

We rely on outside providers to run the service. Each receives only what its job needs:

• Google (Firebase and Google Cloud): sign-in, phone verification by SMS, website hosting, the database and the servers. The database is in Europe, and the servers that process imports run in the United States.
• Anthropic (Claude): receives the content of a document you import, and when completing a place, its name and the relevant trip details. Under Anthropic's terms for commercial services, this information is not used to train its models.
• OpenStreetMap (maps and Nominatim): receives place names to locate them on the map, and serves the map tiles. Requests are sent from your browser or from our server.
• Google Maps and Google Calendar: receive information only when you tap a link to navigate or to add to your calendar, and then Google's terms apply.
• Other users: people you share a trip with see its content. If you turned on a public view link, anyone who has the link can see it.
• As required by law: if we are required to by law or by an order of a competent authority.

Some providers process information outside Israel (in Europe and the United States). Using the service includes consent to this transfer.

The Operator has technical access to the information for operations, support and security, and uses it only for those purposes.

Retention and deletion

• Information is kept as long as the account exists. A trip its owner deletes is removed from the service, including all its days, places, hotels and reminders. The account's usage data (such as the import history and the trip names in it) is kept until the account is deleted.
• You can ask us to delete your account and all its information by emailing the address above. We will handle the request within 30 days.

Your rights

Under Israel's Protection of Privacy Law, 5741-1981, you have the right to see the information kept about you and to ask for it to be corrected or deleted. For any such request, email us.

Security

We take reasonable measures to protect the information: an encrypted connection (HTTPS), access rules that let each user see only their own trips and those shared with them, and checks that requests come from the app. Still, no system is completely immune.

Cookies and storage on your device

The app stores information in your browser: your sign-in, a copy of your trips so they work without a connection, and preferences such as the language. We don't use advertising or tracking cookies. Google's security component (reCAPTCHA) may use its own cookies.

Children

The service is not intended for children under 13. Users under 18 may use it with the consent of a parent or guardian.

Changes to this policy

We will update this policy when needed. The current version will be published on this page, and we will announce material changes on the site or in the app.