Privacy Policy
Last updated: December 17, 2025
Table of Contents
1. Introduction
At CoPlanGo, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our family calendar application. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.
2. Information We Collect
We collect information that you provide directly to us, as well as information automatically collected when you use our services:
Personal Information
- Name and email address
- Profile information (photos, preferences)
- Family member information
- Calendar events and trip plans
- Payment and billing information
Usage Data
- Device information and identifiers
- Log data and analytics
- Location data (with your permission)
- Cookies and similar technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send you technical notices and support messages
- Respond to your comments and questions
- Detect, prevent, and address technical issues and security
- Personalize and improve your experience
4. Information Sharing
We do not sell your personal information. We may share your information only in the following circumstances, and we require service providers to process data on our behalf under appropriate safeguards. Some providers may be located outside your country, and we use lawful transfer mechanisms such as standard contractual clauses when required:
- With family members you've added to your account
- With service providers who assist in our operations
- With payment processors to handle subscriptions and billing
- With analytics providers to understand usage
- For legal compliance and to protect rights
- In connection with a business transfer or merger
- With your explicit consent
Our Service Providers
We work with the following categories of service providers:
- Hosting & Infrastructure: Railway (EU), Supabase (EU/US) - for secure data storage and application hosting
- Payment Processing: Stripe - for subscription billing and payment handling
- Analytics: Google Analytics - for understanding how users interact with our service (with IP anonymization enabled)
- Email Communications: Resend - for transactional emails and notifications
- Push Notifications: Expo - for mobile app notifications
- Error Monitoring: Sentry - for identifying and fixing technical issues
All processors are bound by data processing agreements and must meet our security and privacy requirements.
5. Datensicherheit
Wir implementieren angemessene technische und organisatorische Sicherheitsmaßnahmen zum Schutz Ihrer persönlichen Daten. Dies umfasst Verschlüsselung, sichere Datenspeicherung, regelmäßige Sicherheitsaudits und eingeschränkten Zugang zu persönlichen Daten. Jedoch ist keine Übertragungsmethode über das Internet zu 100% sicher.
6. Datenspeicherung
Wir speichern Ihre persönlichen Daten nur so lange, wie es für die in dieser Richtlinie beschriebenen Zwecke erforderlich ist. Spezifische Aufbewahrungsfristen umfassen:
- Kontodaten (Name, E-Mail, Profil): gespeichert solange Ihr Konto aktiv ist, gelöscht innerhalb von 30 Tagen nach Antrag auf Kontolöschung
- Kalendertermine und Reisedaten: gespeichert solange Ihr Konto aktiv ist, gelöscht bei Kontolöschung
- Zahlungs- und Rechnungsdaten: 7 Jahre nach der Transaktion für Steuer- und rechtliche Compliance aufbewahrt
- Serverprotokolle und Analysen: bis zu 26 Monate aufbewahrt, dann anonymisiert oder gelöscht
- Kundensupport-Kommunikation: bis zu 3 Jahre nach Abschluss aufbewahrt
- Sicherungsdaten: bis zu 90 Tage aufbewahrt, dann dauerhaft gelöscht
Nach Ablauf der Aufbewahrungsfrist löschen oder anonymisieren wir Ihre Daten. Sie können eine frühere Löschung beantragen, indem Sie uns kontaktieren, vorbehaltlich gesetzlicher Aufbewahrungspflichten.
7. Your Privacy Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Object to processing of your data
- Export your data (data portability)
- Withdraw consent at any time
9. Children's Privacy
Our service is designed for families, including children. We comply with COPPA (Children's Online Privacy Protection Act), GDPR-K, and similar regulations worldwide.
Parental Consent Verification
Children under 13 cannot create accounts directly. Instead:
- A parent or guardian must create the family account first
- The parent adds child profiles through their verified account
- We verify the parent's identity through payment method verification or email confirmation
- Parents receive email notification when child profiles are created or modified
Information Collected About Children
For child profiles, we collect only:
- Name (can be a nickname)
- Age or birth year (for age-appropriate features)
- Calendar events and activities assigned to them
- Profile picture (optional, set by parent)
Parental Rights
Parents and guardians can at any time:
- Review all information collected about their child
- Request deletion of their child's data
- Refuse further collection or use of their child's information
- Modify or remove their child's profile
- Export their child's data
To exercise these rights, go to Settings > Family Members in the app, or contact us at privacy@coplango.com.
If we learn we collected information from a child without appropriate parental consent, we will delete it promptly. Children's data is never shared with third parties for marketing purposes.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
- Right to Delete: You can request deletion of your personal information, subject to certain exceptions
- Right to Correct: You can request correction of inaccurate personal information
- Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Categories of Personal Information
In the past 12 months, we may have collected the following categories of personal information:
- Identifiers (name, email, account ID)
- Commercial information (subscription history, payment records)
- Internet activity (usage data, device information)
- Geolocation data (with your permission)
- Inferences drawn from the above to personalize your experience
To exercise your California privacy rights, contact us at privacy@coplango.com or use the in-app privacy settings. We will verify your identity before processing your request.
11. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have questions about this Privacy Policy, please contact us:
CoPlanGo
Email: privacy@coplango.com