Privacy Policy

Who we are

LunchPlot is a group meet-up planner operated from San Diego, California. LunchPlot is the seller of the service and acts as the data controller for the personal data described in this notice — we decide what personal data is collected and why. Questions about privacy? Email contact@lunchplot.com.

What we collect

• Account details — your name, email address, and (if you sign in with Google or Apple) the basic profile information that provider shares with us.
• Plan content — plans you create, titles, times, chosen locations, itineraries, potluck items, votes, and the names, emails, and phone numbers of guests you add.
• Imported contacts — if you import a vCard, CSV, or GroupMe list, we store those contacts in your private contact list so you can invite them later.
• Location — your device location when you search the map near you, and your live position only while you actively choose to share it with a plan.
• Subscription data — subscription status, plan tier, trial and renewal dates. Card numbers never touch our servers.
• Usage data — standard analytics such as pages viewed, approximate region, and device type.

How we use it

To run the Service: create and share plans, show who is coming, search venues, generate AI suggestions and conversation prompts, show live ETAs, send invites, process subscriptions, prevent abuse, and improve the product. We do not sell your personal information, and we do not use your contacts for advertising.

Legal basis for processing

• Performance of a contract — account details, plan content, contacts, and subscription data, so we can provide the Service you signed up for.
• Consent — device and live location sharing, and any non-essential cookies or marketing email. You can withdraw consent at any time.
• Legitimate interests — security, fraud and abuse prevention, service analytics, and product improvement.
• Legal obligation — tax, accounting, and records we are required to keep.

Who can see your data

Plan details are visible to the host and to people invited to that plan, including anyone who opens a shared invite link — treat an invite link as shareable. Your contact list is private to you. Live locations are visible only to people on the same plan.

Live location and retention

Location sharing is opt-in and per plan. Shared positions expire automatically about one hour after they are shared and are removed from our database. You can stop sharing at any time.

Other data is kept while your account is active. Deleting a plan removes its details, attendees, votes, and potluck items. Ask us to delete your account and we will remove your personal data, except records we must keep for tax or legal reasons.

Who we share data with

• Service providers / subprocessors — our cloud database and authentication host, Google Maps and Places for maps, venue search and travel times, AI model providers for concierge and prompt features, and Google Analytics for usage measurement. Your messages to the AI concierge are sent to the model provider to generate a response.
• Merchant of Record — Paddle.com — Paddle is our reseller and Merchant of Record for all orders. We share the data needed for the sale of LunchPlot Plus, subscription management, payments, tax compliance, invoicing, and refunds. Paddle handles payment details directly; card numbers never reach our servers.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encryption at rest on our hosted database, row-level access controls so users can only read their own data and plans they were invited to, authenticated access to all private routes, and restricted internal access to production systems. No system is perfectly secure, but we work to keep these measures current.

Cookies

We use essential cookies and local storage to keep you signed in and to remember preferences such as your selected theme, plus analytics cookies (Google Analytics) to measure usage. You can block or clear cookies in your browser settings; essential ones are required for sign-in to work. We do not use advertising cookies.

Your choices

• Decline or revoke location permission in your browser at any time.
• Delete individual plans, contacts, or potluck entries in the app.
• Request a copy or deletion of your data by emailing contact@lunchplot.com.
• Cancel your subscription at any time from the pricing page.

If you are in California, you may request access to or deletion of your personal information and will not be discriminated against for doing so.

Children

LunchPlot is not intended for children under 13, and we do not knowingly collect their information.

Changes

We may update this policy; the date above shows the latest revision. Significant changes will be highlighted in the app.