GrandPlan Privacy Policy

Effective date: July 6, 2026
Operator: Kyle Smith, sole proprietor operating GrandPlan (United States)
Contact: privacy@grandplanapp.com

The short version

GrandPlan helps grandparents find safe, kid-friendly places nearby. We built it to collect as little as possible:

• No account, no sign-in. We never ask for your name, email, phone number, or a password.
• No information about children. We don't collect kids' names, photos, birthdays, or anything else. The grandkid age selector (1–5 / 6–10 / 11–16) is a button on your device — it is never stored or sent to us.
• Location is used only while you're using the app, to find places near you. Never in the background.
• No ads and no advertising or tracking SDKs. We don't sell or share your information for advertising.

The rest of this policy explains the details.

Information we collect

Location. With your permission, GrandPlan uses your device's location only while the app is open ("when in use") to find places near you and estimate drive times. If you decline the location permission, you can instead type a ZIP code. Your location or ZIP is sent to our servers to run the search, and the starting point is sent to Google's mapping service to calculate drive time (see "How information is shared"). Location is not tied to your identity and we do not keep a history of where you've been. Precise location is considered "sensitive personal information" under California law; we use it only to provide the app's core features (finding places near you and drive times), never to infer characteristics about you, and we do not sell or share it.

Anonymous device identifier. The app generates a random identifier stored on your device. It contains no personal information and is used to limit abuse (search rate limits) and to attribute any problem reports you choose to send. It is not an advertising identifier.

Usage and analytics data. We collect basic, anonymous information about how the app is used (for example, which category you tapped or that a results screen loaded) to improve the app. Analytics are configured to avoid personal data: no automatic screen-content capture, no session recording, and no precise location or raw screen parameters are included.

Crash and error data. If the app crashes or hits an error, we collect diagnostic information to fix it. This is configured to exclude personal identifiers — we do not attach your IP address, user identity, or request details.

Problem reports and suggestions (only if you send them). If you tap "Report a problem" or "Know a place we should add?", we receive what you submit (for a report: a reason and an optional short note; for a suggestion: the message you send by email). Please don't include personal information in these.

Information we do not collect

• No names, emails, phone numbers, addresses, or passwords.
• No information about children — including no kids' names, photos, or birthdays.
• No photos or videos from you (the app has no upload feature).
• No contacts, calendar, microphone, health, or financial data.
• No advertising identifiers; no data collected for advertising or cross-app tracking.

Children's privacy

GrandPlan is intended for adults — grandparents and other caregivers. It is not directed to children, and we do not knowingly collect personal information from children under 13 (consistent with the Children's Online Privacy Protection Act, COPPA) or any information about specific children. The grandkid age band is a display preference stored only on your device. If you believe a child under 13 has provided us personal information, contact privacy@grandplanapp.com and we will delete it.

How we use information

We use the information above only to: find and rank kid-friendly places near you; show estimated drive times; keep the service reliable and secure (rate limiting, crash fixes); understand and improve how the app is used; and respond to problem reports and suggestions. We do not use it for advertising and we do not sell or "share" it for cross-context behavioral advertising.

How information is shared

We do not sell your information. We share limited data only with service providers that help us run the app, under their terms:

• Supabase — our backend hosting and database (stores cached search/venue data and any problem reports).
• Google Maps Platform — receives your location/ZIP and destination(s) server-side to calculate drive times and to source venue and place information.
• PostHog — anonymous product analytics.
• Sentry — crash and error diagnostics (personal identifiers excluded).
• National Weather Service — weather conditions by area (no personal data sent).
• Tally — if you choose to fill out our optional feedback form (hosted outside the app).
• Apple App Store / Google Play — app distribution and beta testing (TestFlight / Play closed testing).

We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the service.

Data retention

We keep cached venue and search data and any problem reports only as long as needed to run and improve the service. Anonymous analytics and crash data are retained according to our providers' standard retention periods. Because we don't have accounts, most data is not associated with you as an individual.

Your choices and rights

• Location: you control the location permission in your device settings, and can use the ZIP-code path instead at any time.
• Delete your data: in the app, go to Settings → Delete my data to remove the information stored on your device (including your anonymous identifier and your problem reports). You may also email privacy@grandplanapp.com to request deletion.
• California residents (CCPA/CPRA) and residents of other states with privacy laws have the right to know what personal information is collected, to request deletion, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email privacy@grandplanapp.com.

Security

We use industry-standard protections, including encryption in transit (HTTPS) for data sent between the app and our servers and service providers. No method of transmission or storage is completely secure, but we work to protect your information and minimize what we collect in the first place. If a data breach affects your information, we will notify you and the relevant authorities as required by applicable law.

Where information is processed

GrandPlan is operated in the United States and is currently available to U.S. users. Information is processed in the United States.

Changes to this policy

We may update this policy as the app evolves. We'll post the updated version here and revise the "Effective date" above. Material changes will be highlighted in the app or our website.

Contact

Questions or requests: privacy@grandplanapp.com
Accessibility: access@grandplanapp.com