Privacy
Last updated: 21 October 2026
Plan & Pack is run by me, Aarya Bhuva. This page says what I keep, why, who helps me run it, and how to have it removed. Questions: hello@aaryabhuva.com.
If you join the list
I keep your email address, and your phone number and answers if you add them, plus the date you joined. I use them to say hello, to tell you when it’s your turn to try, and to help you set up your first trip. Nothing is sold or shared with marketers. Your details are deleted when you ask, or 12 months after the trial ends, whichever comes first.
If you use the app
- Your account: name, email, how you sign in, home currency, food preferences, and optionally your UPI ID and phone number, so others on your trips can pay you and message you.
- Your trips: the plan, bookings, the people on them, expenses and settle-ups, and any files you add. Only the people on a trip can see it, and guests see less (no booking numbers, files or money). Delete a trip and everything in it is deleted.
- Forwarded emails and uploaded files: kept with the trip so you can open the original later, until you delete them or the trip.
- Private details: anything you save there, such as a passport number, is encrypted and visible only to you, unless you turn on sharing with a trip’s planners. It is never sent to Gemini.
- Documents: I never ask for passport copies. You can link documents from your own Drive or iCloud instead.
Reading your bookings and answering questions
To fill in your trip and answer questions in the planning chat, the text of forwarded emails, uploaded files and your questions is sent to Google’s Gemini service, and place questions to Google Maps. I use Google’s paid service, under which Google doesn’t use this data to improve its products. Google keeps it for a limited time only to detect misuse, and keeps place questions for 30 days to produce the map answers.
Who helps run it
| Service | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | Mumbai, India |
| Vercel | Hosts the website and app | Mumbai, India (pages are served from Vercel’s global network) |
| Cloudflare | Domain, and receives forwarded emails | Global network |
| Resend | Sends emails | Tokyo, Japan |
| Gemini reads bookings and answers questions; Maps finds places | Google’s data centres | |
| PostHog | Counts visits and taps, with no cookies and no email or phone | EU (Frankfurt) |
Your choices
You can ask what I hold about you, ask me to correct it, or have it deleted, by writing to hello@aaryabhuva.com. I’ll reply within 7 days. You can delete trips and files yourself at any time, and you can delete your account yourself in Settings. Trips you own need a new owner or deleting first. Your sign-in, profile, private details and forwarding address are deleted; expenses and payments you shared with others stay in those trips under “Former member”, so everyone’s balances still add up.
Security
Data is encrypted in transit and at rest. Only the people on a trip can read it, enforced in the database itself. Files open through links that expire within minutes.
Changes
If this page changes in a way that matters, I’ll email the people affected before it applies.