Privacy Policy

We at Planr AS take privacy seriously. This statement explains what information we collect, why we do it, and how we process it in accordance with the EU General Data Protection Regulation (GDPR) and Norwegian law.

1. Who is the data controller?

Planr AS

Org.no: 935 745 497

Email: hello@planr.team

Website: https://planr.team

2. What personal data do we collect?

We collect and process the following types of personal data:

• Name, email address and account information upon registration

• Payment information (via Stripe – we do not store card data)

• Usage data (how you use the service, e.g. saving sessions, number of logins)

• IP address, browser type and device information

• Any content you add yourself (exercises, training plans, notes)

• Debugging data: In case of technical errors, we may automatically collect information about user actions before the error occurred ("session replay"). This includes clicks, scrolls and navigation, but sensitive data such as passwords and form input is automatically masked. Video content is blocked from recording.

3. How do we use personal data?

Personal data is used to:

• deliver and improve the service

• manage user relationships and payments

• analyze usage patterns (anonymously and aggregated)

• notify about changes, errors or new features

• prevent abuse or unauthorized access

• troubleshoot technical issues and improve service stability

4. Legal basis for processing

We process personal data on the following legal grounds:

• Contract – to fulfill our obligations to you as a user

• Legitimate interest – for operation, security and improvement of the service

• Consent – where required (e.g. for marketing)

5. Third parties and data processors

We use the following third-party providers for operation and analysis:

• Stripe – payment service (stores payment info encrypted)

• Supabase – database and authentication

• OpenAI – generates AI-based training content

• Vercel – hosting and traffic measurement (cookie-free)

• Google Analytics – traffic measurement and analysis (only after consent, data processed in EU/EEA)

• Sentry – error tracking and debugging (including anonymized session replay on errors)

All third-party providers are required to comply with GDPR and have their own data processing agreements.

6. Storage and deletion

We store personal data as long as you have an active account. You can at any time:

• request access to what information we have stored

• request correction or deletion

• request data portability

Upon account deletion, all personal data is removed within a reasonable time, normally within 30 days.

7. Cookies

We use necessary and functional cookies to ensure the service works as intended.

7.1 What types of cookies are used?

• Necessary cookies: ensures login, language selection and general functionality

• Analytics cookies: We use Vercel Analytics for anonymous statistics (without cookies), and Google Analytics for more detailed traffic measurement. Google Analytics is only loaded after you give consent.

• Third-party cookies: some cookies may be set by third parties when using Stripe or embedded video

7.2 Consent

On your first visit to Planr, a consent banner is displayed. You can choose to accept or decline analytics cookies. Vercel Analytics (cookie-free) always runs for basic statistics. Google Analytics is only activated if you accept. You can change your choice at any time by deleting browser data.

7.3 How to avoid cookies?

You can set your browser to block or alert about cookies. Note that some features in Planr may stop working.

7.4 Session Replay for debugging

To improve the service and debug technical issues, we use Sentry Session Replay. This tool records anonymized "replays" of user sessions when errors occur.

• Only about 10% of regular sessions are recorded

• 100% of sessions where errors occur are recorded

• Passwords and other sensitive input are automatically masked

• Video and media elements are blocked from recording

Session replay helps us understand and resolve issues faster, improving the user experience for everyone.

8. Your rights

You have the right to:

• access your personal data

• have incorrect information corrected

• have information deleted ("right to be forgotten")

• object to certain types of processing

• data portability

• complain to the Data Protection Authority (www.datatilsynet.no)

9. Changes to the privacy policy

We may update this policy as needed. You will be notified of significant changes.