Effective date: February 13, 2026 · Last updated: September 30, 2026
Overall summary: We collect only what is needed to run your account and bookings. We do not sell your data. We do not show ads. You can schedule deletion of everything from your dashboard; it runs after 30 days and you can cancel until then. We store data in the EU.
Planned&Go is operated by Dean Wall, based in Ireland. We provide scheduling, day-planning, and client management tools for coaches and their clients.
For GDPR purposes, we are the data controller for coach account data, and a data processor on behalf of coaches for their clients' booking data.
Contact: plannedandgo@gmail.com
| Data | Why | Basis |
|---|---|---|
| Name, email | Create and manage your account | Contract |
| Password (hashed) | Secure authentication | Contract |
| Schedule, tasks, preferences | Core product functionality | Contract |
| Module data (Task DNA, Momentum, Energy, etc.) | Sync your planning data across devices | Contract |
| Booking settings, services | Manage your booking page | Contract |
| IP address | Security, audit logging | Legitimate interest |
| Session records and check-ins | Track sessions with your clients and how they went | Contract |
| Payment links | Let clients pay for a booking | Contract |
| AI session briefs | Prepare for a session. Stored so the brief is there when you open it | Contract |
| Avion assistant conversations | Answer your questions and keep the thread of a conversation | Contract |
| Google, Zoom and Stripe connection tokens | Sync your calendar, create meetings, take payments — only for the services you connect | Contract |
| Data | Why | Basis |
|---|---|---|
| Name, email | Confirm your booking, send reminders | Contract |
| Session notes (optional) | Shared with your coach to prepare | Consent |
| Mood/pulse responses (optional) | Track your wellbeing between sessions | Consent |
| Payment data | Processed by Stripe. We never see your card number. | Contract |
| Intake answers (optional) | Shared with your coach so they can prepare | Consent |
| Client page link | A private link that opens your page without a password | Contract |
We use your data to operate the product. Specifically:
We do not use your data for advertising, profiling, or sale to third parties. We do not display ads in our product.
Connecting Google Calendar is optional. If you connect it, Planned&Go requests the calendar.events permission and uses it for exactly three things:
We store the access and refresh tokens Google issues, and the id of each calendar event we create. We do not store the contents of your other calendar events; they are read when needed to check availability and to display your day, and are not retained on our servers. We never share Google Calendar data with third parties, never use it for advertising, and no human at Planned&Go reads it except to resolve a support issue you have raised. You can disconnect Google Calendar at any time from Settings, which deletes the stored tokens; you can also revoke access from your Google account.
Planned&Go's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Session notes, intake details, booking history and your own text are sent to Anthropic's API to generate session preparation, live session support, post-session summaries and follow-up email drafts, and to answer questions in the Avion assistant. Anthropic processes this data to return a response and, under its API terms, does not train models on it. You control what is sent by controlling what you enter.
What we keep. The results are stored on our side, not generated and forgotten: session briefs are saved so they are there when you open them, and your Avion conversations are kept so the assistant can follow a thread. Both are retained until you delete your account, at which point they go with everything else. When the assistant needs context it sends the most recent 30 turns of a conversation, not its whole history.
Connecting Zoom is optional. If you connect it, Planned&Go creates a meeting for a session when you ask it to, ends or deletes that meeting when the session is cancelled, and stores the meeting id and join link so the session page can open it. Meetings are created with a waiting room, and participants cannot join before you do.
We do not record your sessions. Planned&Go never receives, stores or reads a recording. Until 30 September 2026 the meetings we created were set to record to the cloud automatically; that was wrong, it was never disclosed here, and it is now off. Those recordings went to the coach's own Zoom account, not to us.
If you turn recording on yourself in your Zoom account, the recording is yours: it lives in your Zoom account, under your Zoom retention settings, and it is your responsibility to tell the people in the call. We cannot delete it. Deleting your Planned&Go account removes the meetings we created, but Zoom keeps cloud recordings separately from meetings, so any recording you have made has to be deleted in Zoom. You can disconnect Zoom at any time from Settings, which deletes the stored tokens.
| Service | Purpose | Location |
|---|---|---|
| Supabase (PostgreSQL) | Database hosting | EU |
| Stripe | Payment processing | EU/US (PCI compliant) |
| Railway | Server hosting | EU/US |
| Resend | Transactional emails | US |
| Anthropic | AI processing of session prep, summaries, follow-up drafts and the Avion assistant | US |
| Google (Calendar API) | Calendar sync, only if you connect Google Calendar | US |
| Zoom | Video sessions, only if you connect Zoom | US |
| Sentry | Error monitoring. No session replay: we do not capture your screen or the contents of the page | EU |
| Formspree | The contact form on our marketing site — the name, email and message you send us there | US |
We do not sell, rent, or trade personal data. We share data with these providers only as necessary to operate the service.
Our primary database is hosted by Supabase in the European Union. Some sub-processors (Stripe, hosting) may process data in the United States under Standard Contractual Clauses (SCCs) or equivalent safeguards.
| Data | Retention |
|---|---|
| Coach accounts | Until you delete your account |
| Booking records | Until the coach deletes their account |
| Module sync data | Until you delete your account |
| AI session briefs and Avion conversations | Until you delete your account |
| Audit logs | 90 days, then automatically purged. A sweep runs daily |
| Payment records | Retained by Stripe under its own legal obligations as payment processor. We do not control this period |
| Deletion receipt | Kept after your account is erased. It holds your account id, the date, and a one-way hash of your email — nothing else. It exists because the audit records that would otherwise prove the deletion are themselves deleted |
| Your clients' portal access | Ends when the deletion actually runs, not when you request it. They are emailed once, on that day |
Under the General Data Protection Regulation, you have the right to:
Self-service: You can view and export all your data from your dashboard at any time, and you can schedule deletion of your account from Command Center › Account & Data › Delete my account.
How deletion works. Nothing is deleted on the day you ask. Your account is erased 30 days later, and until then you can log in and use Planned&Go as normal and cancel at any point. Your public booking page closes immediately and stops taking bookings, so no new client data arrives while the clock runs; it reopens if you cancel. Your clients keep their client portal until the deletion actually runs, then lose it, and they are emailed once on that day. You are given a receipt code when you request it, which is how you can ask us later whether the deletion ran. When the 30 days are up it cannot be undone.
You may also ask us to remove the calendar events and Zoom meetings Planned&Go created in your own Google and Zoom accounts. That is a choice at the point of deletion and it is off by default: those are your accounts, and they may be your record of work done.
By email: Contact plannedandgo@gmail.com. We will respond within 30 days.
Complaint: You have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.
We protect your data with:
No system is 100% secure. If we discover a data breach affecting your personal data, we will notify you and the Irish Data Protection Commission within 72 hours as required by GDPR Article 33.
We set two cookies, both strictly necessary:
That is all. We use no analytics, no advertising and no third-party cookies, and we store nothing on your device for measurement. We removed our product analytics entirely in September 2026 rather than ask you to consent to it. Because the only storage we use is strictly necessary to provide the service you asked for, no cookie consent banner is required.
The app also keeps your own planning data in your browser's local storage so it works when you are offline and loads quickly. That is your data on your device, not a tracker, and it is not sent to anyone but us.
Planned&Go is not intended for use by anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this policy from time to time. We will notify you of significant changes by email or through the product. The last updated date at the top always reflects the current version.
For any privacy-related questions or requests:
Dean Wall
Planned&Go
Ireland
plannedandgo@gmail.com