Privacy Policy
Last revised: November 10, 2026
This explains what Plan for Adventure collects, why, who else sees it, how long we keep it, and how to delete it.
Who we are
Plan for Adventure LLC runs planforadventure.com, app.planforadventure.com and our MCP server. Questions: hello@planforadventure.com.
We don't sell your data, show ads, or use it to train AI models.
What you give us
Your name and email (from your sign-in).
What you make: trips, collections, places, imported files, notes and preferences (vehicle, camping style, party).
Feedback you send, with the page, your screen size, your browser and any screenshots you attach.
Separate from any account: if you join our waitlist or answer our survey, we keep your email and answers until you ask us to remove them, and clear the IP address and browser details after 30 days.
What we record automatically
Each signed-in request and each AI-assistant tool call, with what it asked for, so we can debug and see how features are used. These records belong to your account and are deleted with it.
How many times an IP address opened place details each day, to spot scraping; kept 30 days.
Our server logs (IP address, page, time), kept up to 30 days.
Location
The app uses your device's location only when you ask it to: to show where you are, to follow a route, to find places near you, or to record a track. When you tap Record, the app logs your position on your device, including while your screen is locked, until you pause, finish or discard the recording. A recording stays on your device until it is saved to your account, and then the device copy is deleted. Saved recordings are stored in your account like any track you upload, and you can delete them at any time. Discarded recordings are deleted from your device. We do not record your position when you have not started a recording, or while a recording is paused.
The app asks for location only while you are using it, never "Always". A recording keeps going when you lock the screen or switch apps, and iOS shows its location indicator while it does. The lock screen card for a recording shows its time and distance, not where you are.
Test versions of the app (not the App Store version) also send us, when you finish a recording, a technical log of how the recorder behaved, such as when it started, paused and lost signal. The log has no locations in it. We keep it for up to 30 days to fix problems.
When you ask for a route from where you are, or for places near you, the app sends your position to our server to answer that request. We keep a record of where you've been only when you tap Record. The tracks you save are stored in your account, and you can delete them at any time. The record we keep of that request has no coordinates in it. Our server logs, which may include the request, are deleted within 30 days.
Analytics
We count page views and a few steps toward upgrading (an upgrade prompt shown, the plans screen opened, checkout started, coming back from checkout), with which prompt or plan it was. We also count when satellite imagery is switched on, with the plan and which imagery service it came from, and when sharp imagery falls back to the free one. We use Umami, which we run on our own server. For each visit it notes your browser, device type and rough location (such as the country), worked out from your IP address, which it doesn't keep. It sets no cookies and records no account ID, so these counts can't be tied to you. Shared-link pages aren't counted. When you start a checkout we note which button you came from, alongside that checkout's record.
Services that receive data
| Service | What for, and what it receives |
|---|---|
| Auth0 | Sign-in; your name, email and sign-in method. |
| Only if you sign in with Google; Google learns you signed in to us. | |
| Apple | Only if you sign in with Apple; Apple learns you signed in to us. |
| Stripe | Payments on our website; your name, email, billing address and card (we never see the card number); sales tax. |
| Sentry | Error reports with an account number and plan name, the page, your browser and the app's last few requests (which can include map coordinates), not your name or email. |
| Mapbox | Map images; your browser asks Mapbox for the map area you're viewing. Link previews of a shared place or trip show a Mapbox map of it. |
| Esri (ArcGIS) | The wildfire layer and satellite imagery; your browser asks Esri for fires and imagery in the area you're viewing. |
| U.S. Geological Survey (The National Map) | Satellite imagery on the free plan, and on paid plans when Esri's is unavailable; your browser asks USGS for imagery of the area you're viewing. |
| Open-Meteo and the National Weather Service | Forecasts and alerts for the places you check (just coordinates). |
| OpenStreetMap (Overpass) | Searches for fuel, water and services near a place. Our server sends the map area searched to community-run OpenStreetMap servers, not who is searching. |
| Discord | A copy of each feedback message, with your name, account number, plan, the page, your screen size, the place or trip you had open, your filter preset and any screenshots, posted to our team's channel. |
| Hetzner | Our servers and backups (Germany-based company; our servers are in the US, and encrypted backup copies are kept in Germany). |
| Cloudflare | Our domain and network traffic, and the state map files the app downloads. |
NPS, Recreation.gov and InciWeb: we fetch public data from them; nothing about you is sent.
What we don't do
No selling or renting of personal data, no advertising networks, no tracking cookies. When you connect your own AI assistant, it reads from your account at your direction; what its provider does with that is covered by your agreement with them.
Cookies and your device
Sign-in uses Auth0's own session cookie. The app keeps your settings and an offline copy of your data on your device so it works without signal; signing out clears that copy.
State maps you download in the iPhone and iPad app are saved on your device. The map files stay until you remove them in the app's Offline screen, and stop working if your paid plan ends; the places that come with them, including your own, are cleared when you sign out. Downloading a state map tells our server which state you asked for, and the files come through Cloudflare.
Sharing
A link you share shows what you chose to share to anyone who has it, until you stop sharing or delete your account. If someone made their own copy of what you shared, that copy is theirs and stays when you delete yours. If your paid plan ends, links to your trips, collections and your own places stop working until you resubscribe; links to Adventure Atlas places keep working.
How long we keep things, and deletion
We keep your data while your account exists, including anything on hold after a paid plan ends, so resubscribing can restore it. You can permanently delete on-hold imported datasets yourself in the app, and you can delete the places and tracks you made in the app that stay available on the free plan; once deleted, resubscribing won't bring them back. Delete my account erases everything else. To delete your account, use Delete my account in the app (in your account menu), or email hello@planforadventure.com from your sign-in address and we'll do it. Either way we delete your trips, collections, places, imports, recordings, preferences, usage records and sign-in, and the feedback stored in the app. A subscription ends immediately.
Copies of feedback posted to our team chat (Discord) are kept for product history, including after your account is deleted. We don't add payment details to them.
When you delete your account in the app, we keep a one-way fingerprint of your sign-in ID and the deletion date for 30 days, so an old sign-in can't recreate your account.
We keep only billing records: Stripe keeps its invoices for tax (with the name and address on each invoice); we remove your name and email from your Stripe customer record, and we keep our own record of each checkout without your account.
When a paid plan ends, offline maps and packs are turned off: we delete our copies from our servers, and the copies on your devices stop working the next time the app connects. We keep only the list of the packs you had, so that when you resubscribe we can rebuild your most recently used offline packs, up to 15; you can download the rest, and your offline maps, again.
Our daily backups roll off within 30 days, so deleted data is gone from them by then.
Your choices
Email hello@planforadventure.com to get a copy of your data, correct it, delete it, or ask anything about it. You can also delete your account yourself at any time in the app.
Children
The Service is for adults (18 and over) and isn't directed at children.
Changes
If we change this policy we'll update the date above, and for significant changes we'll tell you in the app or by email.
Contact
Plan for Adventure LLC
Email: hello@planforadventure.com