Privacy Policy
Last updated: 13 June 2026
This policy explains what personal data Saturday Plans collects, why, and your rights. The data controller is Saturday Plans, reachable at mary@saturdayplans.com.
1. What we collect
Account data: your email address and password (stored hashed). Pairing data: the link between you and your partner. Content you create: weekend plans, activity ideas, notes, ratings, important dates, and any photos you upload. Technical data: a session cookie to keep you signed in, and minimal server logs for security and reliability.
2. How we use it
We use your data only to provide the Service: to run your account, show shared content to you and your partner, send the emails you have enabled (verification, password reset, and optional reminders), and keep the Service secure. We do not sell your data or use it for advertising or profiling.
3. Legal bases (GDPR)
We process your data to perform our contract with you (providing the Service), on the basis of your consent (optional emails), and our legitimate interest in keeping the Service secure.
4. Who we share it with
We use a small number of processors that act on our instructions: Paddle (payments, as merchant of record), Google Cloud and Neon (hosting and database), and Resend (transactional email). Each receives only what it needs. We use no third-party advertising or analytics trackers, and we self-host our fonts so visiting the site does not call external font servers.
5. International transfers
Our processors may store data outside your country, including in the United States, under appropriate safeguards.
6. Retention
We keep your data while your account is active. If you delete your account, we delete your personal data, except limited records we must retain (for example, billing records held by Paddle for tax purposes).
7. Your rights
Subject to applicable law, you can access, correct, export, or delete your data, and object to or restrict certain processing. To exercise these rights, email mary@saturdayplans.com. You may also complain to your local data-protection authority.
8. Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from children.
9. Changes
We may update this policy; the "last updated" date shows the current version.