Privacy policy
Effective date: 2026-08-09
Operator: GrandPlan is operated by Kyle Smith (sole proprietor)
Contact: privacy@grandplanapp.com
The short version
GrandPlan helps grandparents find fun, kid-friendly places nearby. We built it to collect as little as possible:
- No account, no sign-in. The app never asks for your name, email, phone number, or a password. The one place we ask for an email is the optional launch-list form on this website — only if you choose to fill it in (see "Our website" below).
- No information about children. We don't collect kids' names, photos, birthdays, or anything else. The age selector (1–5 / 6–10 / 11–16) is a setting on your device that we never store. We do use the band you pick to choose which places to show you — so it travels with your search and with a Guide question — but it says nothing about any particular child.
- Location is used only while you're using the app, to find places near you. Never in the background.
- No ads and no advertising or tracking SDKs. We don't sell or share your information for advertising.
The rest of this policy explains the details.
Information we collect
Location. With your permission, GrandPlan uses your device's location only while the app is open ("when in use") to find places near you and estimate drive times. If you decline the location permission, you can instead type a city or ZIP code. City names are matched on your device, against a list of US cities that ships inside the app — what reaches our servers is the ZIP code that city resolves to, never what you typed. Your location or ZIP is sent to our servers to run the search, and the starting point is sent to Google's mapping service to calculate drive time (see "How information is shared"). Location is not tied to your identity and we do not keep a history of where you've been. Precise location is considered "sensitive personal information" under California law; we use it only to provide the app's core features (finding places near you and drive times), never to infer characteristics about you, and we do not sell or share it.
Anonymous device identifier. The app generates a random identifier stored on your device. It contains no personal information and is used to limit abuse (search rate limits) and to attribute any problem reports you choose to send. It is not an advertising identifier.
Usage and analytics data. We collect basic, anonymous information about how the app is used (for example, which category you tapped or that a results screen loaded) to improve the app. Analytics are configured to avoid personal data: no automatic screen-content capture, no session recording, and no precise location or raw screen parameters are included.
Crash and error data. If the app crashes or hits an error, we collect diagnostic information to fix it. This is configured to exclude personal identifiers — we do not attach your IP address, user identity, or request details.
Problem reports and suggestions (only if you send them). If you tap "Report a problem" or "Know a place we should add?", we receive what you submit (for a report: a reason and an optional short note; for a suggestion: the message you send by email). Please don't include personal information in these.
Places you save and trips you plan (GrandPlan Pro). If you save a place, we store which place you saved against your anonymous device identifier so it's there next time. If you plan a trip, we also store the trip name you type and the dates you pick. Please don't put personal information in a trip name.
The Guide (GrandPlan Pro). The Guide is a chat feature that answers questions about places to go. When you send a message, we pass it to Anthropic, the company that provides the AI model, along with the age band you've selected and the city you're asking about — so the answer fits. We do not keep your conversation on our servers: it is stored only on your device, and "Start over" or "Delete my data" clears it. Anthropic keeps API messages for a limited period under its own terms to operate and monitor the service. Please don't type personal information into the Guide.
Subscriptions and purchases. If you buy GrandPlan Pro, the purchase is handled by Apple (or Google), and we use RevenueCat to keep track of whether your subscription is active. We receive the product you bought, when it was purchased, and when it expires, tied to your anonymous device identifier. We never see your card, bank details, or billing address — the app store handles payment and never shares that with us.
Our website — the launch list (only if you submit it). Separately from the app, this website has an optional form for hearing when we've covered more places near you. If you choose to submit it, we collect the email address and the town or ZIP code you type in — nothing else, and nothing is collected from you for simply visiting the site. We use them only to email you about GrandPlan availability in your area. We do not sell them, use them for advertising, or add you to any other list, and you can ask us to remove you at any time at privacy@grandplanapp.com. As everywhere else, we collect nothing about children here.
Information we do not collect
- No names, phone numbers, addresses, or passwords — and no email address in the app itself (the website launch-list form above is the only place we ask for one, and only if you submit it).
- No information about children — including no kids' names, photos, or birthdays.
- No photos or videos from you (the app has no upload feature).
- No contacts, calendar, microphone, or health data.
- No payment or financial details — the app store handles purchases and never shares your card, bank details, or billing address with us.
- No advertising identifiers; no data collected for advertising or cross-app tracking.
Children's privacy
GrandPlan is intended for adults — grandparents and other caregivers. It is not directed to children, and we do not knowingly collect personal information from children under 13 (consistent with the Children's Online Privacy Protection Act, COPPA) or any information about specific children. The age band is a preference on your device that we never store. We do send it with your searches and Guide questions so results fit the kids you have with you, but it is a broad range — not a birthday, a name, or anything that identifies a child. If you believe a child under 13 has provided us personal information, contact privacy@grandplanapp.com and we will delete it.
How we use information
We use the information above only to: find and rank kid-friendly places near you; show estimated drive times; keep the service reliable and secure (rate limiting, crash fixes); understand and improve how the app is used; and respond to problem reports and suggestions. We do not use it for advertising and we do not sell or "share" it for cross-context behavioral advertising.
How information is shared
We do not sell your information. We share limited data only with service providers that help us run the app, under their terms:
- Supabase — our backend hosting and database (stores cached search/venue data, any problem reports, and website launch-list signups).
- Google Maps Platform — receives your location/ZIP and destination(s) server-side to calculate drive times and to source venue and place information.
- PostHog — anonymous product analytics.
- Sentry — crash and error diagnostics (personal identifiers excluded).
- Anthropic — provides the AI model behind the Guide; receives the messages you type there, plus your age band and the city in question. Your precise location is never sent.
- RevenueCat — manages GrandPlan Pro subscriptions; receives which product you bought and when it expires, tied to your anonymous device identifier. No payment details.
- National Weather Service — weather conditions by area (no personal data sent).
- Tally — if you choose to fill out our optional feedback form (hosted outside the app).
- Expo — delivers app fixes between App Store releases. When GrandPlan opens it asks Expo's update service whether a newer version is available, sending only the app version, the update version, and which device platform you are on, together with the IP address that any internet request carries. No account, device identifier, or location is sent, and nothing you do in the app is reported.
- Apple App Store / Google Play — app distribution and beta testing (TestFlight / Play closed testing).
We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the service.
Data retention
We keep cached venue and search data and any problem reports only as long as needed to run and improve the service. Anonymous analytics and crash data are retained according to our providers' standard retention periods. Guide conversations are not stored on our servers at all — they live on your device until you clear them — though Anthropic retains API messages for a limited period under its own terms. Saved places and trips stay until you remove them or delete your data. Subscription status is kept while your purchase is active so the app knows you're a Pro member. Because we don't have accounts, most data is not associated with you as an individual. If you joined the launch list on this website, we keep your email and the town or ZIP you gave us until you ask us to remove you, or until we've told you GrandPlan covers your area and no longer need them.
Your choices and rights
- Location: you control the location permission in your device settings, and can type a city or ZIP code instead at any time.
- Delete your data: in the app, go to Settings → Delete my data. This clears what's on your device (including your anonymous identifier and your Guide conversation) and removes what's tied to that identifier on our servers — your problem reports, saved places, planned trips, and subscription record. You may also email privacy@grandplanapp.com to request deletion.
- The Guide: tap "Start over" in the Guide to clear the conversation from your device at any time.
- Launch list: if you submitted the form on this website, email privacy@grandplanapp.com and we'll delete your email address and the town or ZIP code you gave.
- California residents (CCPA/CPRA) and residents of other states with privacy laws have the right to know what personal information is collected, to request deletion, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To make a request, email privacy@grandplanapp.com.
Security
We use industry-standard protections, including encryption in transit (HTTPS) for data sent between the app and our servers and service providers. No method of transmission or storage is completely secure, but we work to protect your information and minimize what we collect in the first place. If a data breach affects your information, we will notify you and the relevant authorities as required by applicable law.
Where information is processed
GrandPlan is operated in the United States and is currently available to U.S. users. Information is processed in the United States.
Changes to this policy
We may update this policy as the app evolves. We'll post the updated version here and revise the "Effective date" above. Material changes will be highlighted in the app or our website.
Contact
Questions or requests: privacy@grandplanapp.com
Accessibility: access@grandplanapp.com