Planddit

Privacy Policy

Last updated: January 4, 2026

Privacy Policy

Last Updated: 4 January 2026

 

1. Introduction

Planddit ("we", "us", "our") operates the Planddit event discovery and management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and the Data Protection Act 2018.

 

2. Data Controller

Company: Planddit

Contact: support@planddit.com

Legal Basis: We process personal data under Article 6(1) of the GDPR

 

3. Information We Collect

3.1 Account Information

  • Full name
  • Email address
  • Password (encrypted)
  • User role (user/admin)
  • Date of birth
  • Mobile phone number
  • Profile photograph
  • User interests and preferences

3.2 Event Information

  • Event titles, descriptions, and images you create
  • Event attendance records (RSVPs)
  • Event hosting and co-hosting relationships
  • Event favourites
  • Event reports you submit

3.3 Location Data

  • Precise geolocation (when you use "Near Me" features)
  • Venue addresses and coordinates
  • Preferred locations
  • Search location history

3.4 Usage and Technical Data

  • IP address
  • Browser type and version
  • Device information
  • Pages visited and time spent
  • Search queries and filters applied
  • Blocked content preferences (hosts, venues, categories, titles)

3.5 Communication Data

  • Email communications
  • RSVP notifications
  • Event invitations sent and received

 

4. Google User Data - Specific Disclosures

4.1 Google User Data Accessed

When you connect your Google account to Planddit, we access the following specific types of Google user data:

  • Google Profile Information: Your name, email address, and profile picture from your Google account (used for account creation and authentication)
  • Google Maps/Places Data: Location search results, place details, and geocoding information (used to help you search for event locations and venues)

4.2 How We Use Google User Data

We use Google user data solely for the following purposes:

  • Authentication: To verify your identity and create/access your Planddit account
  • Profile Setup: To pre-fill your account profile with your name and email
  • Location Services: To provide location search functionality when creating or browsing events
  • Event Discovery: To show you relevant nearby events based on location searches
  • Venue Information: To display accurate venue addresses and map data for events

Important: We do not use Google user data for advertising, AI/ML model training, or any purpose not explicitly listed above.

4.3 Google User Data Sharing

We do not share your Google user data with any third parties except:

  • Google Services: We transmit location queries to Google Maps/Places APIs to retrieve location information
  • Infrastructure Providers: Google user data may be stored on secure infrastructure provided by Base44 platform with appropriate data protection agreements in place

We do not:

  • Sell Google user data to third parties
  • Share Google user data with advertisers or data brokers
  • Use Google user data for purposes unrelated to providing the Planddit Service
  • Allow humans to read Google user data except when necessary for security, debugging, or with your explicit consent

4.4 Google User Data Storage & Protection

We protect Google user data through:

  • Encryption: All Google user data is encrypted in transit (HTTPS/TLS) and at rest
  • Access Controls: Strict role-based access controls limit who can access Google user data
  • Secure Infrastructure: Data is stored on secure, industry-standard cloud infrastructure
  • Regular Security Audits: We conduct regular security assessments and monitoring
  • Data Minimisation: We only store Google user data that is necessary for Service functionality

4.5 Google User Data Retention & Deletion

  • Active Accounts: Google user data is retained while your account is active
  • Account Deletion: When you delete your Planddit account, all associated Google user data is permanently deleted within 30 days
  • Right to Delete: You can request deletion of your Google user data at any time by contacting support@planddit.com or deleting your account through profile settings
  • Data Export: You can download a copy of all your data, including Google user data, from your profile settings

4.6 Revoking Google Access

You can revoke Planddit's access to your Google account at any time by:

Note: Revoking access will prevent you from using Google Sign-In and location features until you reconnect.

 

5. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract Performance (Article 6(1)(b)): To provide the Service, manage your account, and facilitate event participation
  • Legitimate Interests (Article 6(1)(f)): To improve our Service, prevent fraud, ensure security, and conduct analytics
  • Consent (Article 6(1)(a)): For location data, Google account access, marketing communications, and optional features (you may withdraw consent at any time)
  • Legal Obligation (Article 6(1)(c)): To comply with legal requirements and respond to lawful requests

 

6. How We Use Your Information

We use your personal data to:

  • Create and manage your account
  • Enable event creation, discovery, and attendance
  • Process RSVPs and manage event capacity
  • Send notifications about events you've RSVP'd to or created
  • Provide location-based event recommendations
  • Enable co-hosting and event collaboration
  • Process event reports and maintain platform safety
  • Facilitate communication between event hosts and attendees
  • Improve Service functionality through analytics
  • Prevent fraud, abuse, and policy violations
  • Comply with legal obligations

 

7. Data Sharing and Disclosure

7.1 Third-Party Services

We share data with the following third parties:

  • Google Maps API: For location services, venue mapping, and directions
  • Google Places API: For location search and address validation
  • Base44 Platform: Infrastructure provider for hosting and database services
  • Email Service Providers: For transactional emails and notifications

7.2 Public Information

The following information is publicly visible:

  • Approved events (title, description, image, location, date, host name)
  • Event attendance counts
  • Your name as an event host or co-host

7.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect rights, property, or safety.

 

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UK and EEA. We ensure adequate safeguards are in place through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where applicable
  • Appropriate technical and organisational security measures

 

9. Data Retention

We retain your personal data for as long as necessary to provide the Service and comply with legal obligations:

  • Active accounts: Data retained while account is active
  • Deleted accounts: Personal data deleted within 30 days, except where legal retention is required
  • Event data: Retained for archived purposes and historical records
  • Legal compliance: Certain data may be retained longer to comply with legal, tax, or regulatory requirements

 

10. Your Rights Under UK GDPR and EU GDPR

You have the following rights:

  • Right of Access (Article 15): Request a copy of your personal data
  • Right to Rectification (Article 16): Correct inaccurate or incomplete data
  • Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
  • Right to Restriction (Article 18): Request limitation of processing
  • Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
  • Right to Object (Article 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  • Right to Lodge a Complaint: Contact the Information Commissioner's Office (ICO) in the UK or your local supervisory authority

To exercise your rights, contact us at support@planddit.com or use the account settings in the app.

 

11. Cookies and Tracking Technologies

We use essential cookies and local storage to:

  • Maintain your login session
  • Remember your preferences (view mode, filters)
  • Store navigation state
  • Improve user experience

You can control cookies through your browser settings. See our Cookies Policy for more details.

 

12. Security Measures

We implement appropriate technical and organisational measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data
  • Password hashing with industry-standard algorithms
  • Access controls and authentication
  • Regular security assessments
  • Secure hosting infrastructure

 

13. Children's Privacy

Our Service is not directed to individuals under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it immediately.

 

14. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

 

15. Data Download and Account Deletion

You can:

  • Download your data: Request a complete copy of your personal data through your profile settings
  • Delete your account: Permanently delete your account and associated data through profile settings or by contacting support@planddit.com

 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy with a new "Last Updated" date
  • Sending an email notification to your registered address
  • Displaying a prominent notice on the Service

 

17. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

Email: support@planddit.com

 

18. Supervisory Authority

If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk

Phone: 0303 123 1113

If you are in the EU, contact your local data protection supervisory authority.