Last updated: March 2026
Privacy Policy
Data Controller
Foxorio s.r.o., Hybernska 1613/38, Prague 1, Czech Republic, ID: 21743681
Contact: office@planeera.com
Data We Collect and Why
1. Account data (email address)
- Legal basis: Contractual necessity (required to create and manage your account)
- Retention: Kept until you delete your account
2. Cycle and health data
Cycle length, period length, last period start, PMS intensity, hormonal contraception type, daily check-ins including energy, productivity, stress, mood, sleep, pain, bleeding.
- Legal basis: Consent (you voluntarily provide this data to receive personalised cycle-synced planning guidance)
- This is sensitive health data under GDPR Article 9. We process it based on your explicit consent given during onboarding.
- Retention: Kept until you delete your account or request data deletion
3. AI chat data
Chat messages with the AI cycle coach.
- Legal basis: Consent (you choose to engage in conversations)
- Retention: Messages auto-clear after 5 minutes of inactivity. Persistent history is not retained.
4. Payment data
Handled entirely by Stripe. We store only your Stripe customer ID and subscription status, never your card details.
- Legal basis: Contractual necessity (required to process your subscription)
- Retention: Kept for accounting purposes for 10 years as required by Czech law
5. Usage analytics
Page views, feature usage, anonymised interaction data.
- Legal basis: Legitimate interest (to understand how the product is used and improve it)
- Collected via PostHog (EU servers)
- Retention: 12 months
Where Your Data Is Stored
- Supabase (EU region servers, Frankfurt, Germany), account data, cycle data, check-ins
- Stripe (EU and US servers), payment processing
- PostHog (EU servers), anonymised analytics
International Data Transfers
- When you use the AI chat feature, your conversation context (cycle data, check-in data) is sent to AI providers to generate responses. This data is processed in real-time and is not retained for training purposes.
Third-Party Services
- Supabase, database and authentication (EU)
- Stripe, payment processing
- AI providers, AI chat generation (data not retained for training)
- PostHog, anonymised usage analytics (EU)
Your Rights Under GDPR
You have the right to:
- Access: Request a copy of all your personal data
- Rectification: Correct any inaccurate data
- Erasure: Request deletion of all your data ("right to be forgotten")
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Request we limit how we process your data
- Object: Object to processing based on legitimate interest
- Withdraw consent: You can withdraw consent at any time by deleting your account or contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, email office@planeera.com. We will respond within 30 days.
Supervisory Authority
You have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ, Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.
Cookies and Local Storage
Planeera uses essential cookies for authentication (Supabase session cookies). We use PostHog for analytics which may use cookies. We do not use advertising cookies or trackers.
Data Deletion
You can delete your account from the Settings page. This permanently removes all your data including cycle profiles, check-ins, and chat history. Payment records are retained for legal accounting requirements.
Children
Planeera is not intended for users under 16 years of age. We do not knowingly collect data from children.
Changes to This Policy
We will notify you of significant changes via email or in-app notification.