Last updated: 16 August 2026
Terms & Privacy
This page explains how Explosive Planner works, what data we collect, how we use it, who we share it with, and your rights. It is maintained by Explosive Planner Limited. Please review it carefully.
Explosive Planner is available worldwide. We apply a single global privacy standard based on the strictest applicable rules (the EU GDPR), and we grant every user — wherever they live — the core rights described in section 10. Section 11 sets out the extra rights that apply in specific countries and regions.
1. Who we are
Explosive Planner is operated by Explosive Planner Limited. We are the data controller for any personal data processed through the service.
We are established in Ireland, an EU member state. Our lead supervisory authority for EU data protection matters is the Irish Data Protection Commission (DPC). Because we are established in the EU, we do not need to appoint a separate Article 27 EU representative. UK users can contact us directly at the address below.
We are not required to appoint a Data Protection Officer, as we do not carry out large-scale monitoring or process special-category data as a core activity. Privacy requests are handled directly by Explosive Planner Limited.
Contact us for privacy questions, data-subject requests, copyright notices, or security reports at ExplosivePlanner@Gmail.com.
2. What data we collect
We only collect the information we need to run the app and help you plan events. This includes:
- Account data. When you sign up with Google Sign-In, we receive your Google account identifier, name, and email address. When you sign up by email, you provide your email address and any name you choose.
- Event and plan details. Anything you enter while planning — event names, dates, locations, venues, budgets, checklists, guest numbers, notes, holiday destinations, and activity ideas.
- Location and venue information. Location queries, venue names, addresses, place IDs, and map coordinates you provide or select.
- Saved plans. Events, holidays, date nights, nights out, spa days, bored-day plans, checklists, budgets, and collaborator invites you create or save.
- Technical data. IP address, browser type, device information, operating system, timestamps, and cookies or similar identifiers needed to keep the service secure and reliable.
- Communication data. Any messages or support requests you send us.
3. How we use your data
We use your data for the following purposes:
- Creating and authenticating accounts. So you can sign up, sign in, and keep your plans safe.
- Generating AI event plans. Our AI assistant helps draft event ideas, itineraries, checklists, and recommendations based on the details you give it.
- Finding and recommending venues. We send location and venue queries to Google Maps so we can show you nearby places, directions, ratings, and photos.
- Saving your plans. Your events, checklists, budgets, and other content are stored so you can come back to them later.
- Improving and operating the service. Fixing bugs, understanding how features are used, preventing abuse, and keeping the app secure and performant.
- Communicating with you. Sending service updates, responding to support requests, and (only where you consent) marketing messages.
4. Our legal bases for using your data
Where the GDPR, UK GDPR, Swiss FADP, Brazil's LGPD, or a similar law requires us to identify a lawful basis, we rely on the following:
- Performance of a contract. Creating and running your account, saving your plans, and providing the planning features you ask for.
- Consent. Optional marketing or product emails, non-essential cookies and analytics, and any future advertising cookies. You can withdraw consent at any time without affecting processing carried out before withdrawal.
- Legitimate interests. Keeping the service secure, preventing fraud and abuse, fixing bugs, and improving features. We balance these interests against your rights and only rely on them where your interests do not override ours.
- Legal obligation. Meeting accounting, tax, security-incident, and law-enforcement obligations that apply to us.
Special-category data. We do not ask for and do not intentionally collect sensitive data such as health, religious belief, ethnicity, sexual orientation, biometric, or trade-union data. Some plans (for example a spa or beauty day) could imply preferences, so please do not enter health details or other sensitive information into free-text fields. If you choose to include it, you are giving us your explicit consent to store it as part of your plan, and you can delete it at any time.
No automated decisions with legal effect. Our AI produces suggestions only. We do not make automated decisions that produce legal or similarly significant effects on you, and there is no profiling used for that purpose.
5. AI and data minimisation
We use Google Gemini through the Lovable AI Gateway to generate planning suggestions, itineraries, and checklists.
We only send the planning context needed to answer your request. For example, if you ask us to plan a 21st birthday in Dublin for 30 people, the AI receives the request details (event type, location, group size, and any preferences you entered) but not your name, email address, account ID, or other personal identifiers.
We do not use your private event data to train third-party AI models. We do not store or log AI prompts beyond what is needed for troubleshooting and abuse prevention.
5a. AI transparency and accuracy of information
You are interacting with AI. Parts of Explosive Planner — venue and activity suggestions, itineraries, checklists and written summaries — are generated by an AI system (Google Gemini). We label AI-generated content in the app. AI output can be incomplete, out of date, or simply wrong, so please verify prices, availability, capacity, opening hours and booking terms directly with the venue or provider before relying on them.
Which information is live, and which is AI-generated. Weather forecasts, drive times, congestion levels, public-transport routes and disruption notices are retrieved from the Google Weather API and Google Maps Platform at the time you view them — they are not invented by the AI. Venue names, addresses, ratings, phone numbers, websites and photos come from Google Places. AI is used to rank, summarise and suggest, not to fabricate live conditions.
Nearby emergency services are not a safety rating. Where we show the distance to the nearest police station or hospital, that is factual proximity data from Google Places. It is general information only. It is not a risk score, a crime statistic, a safety certification, or any official assessment of a venue, street or area, and it must not be relied on for personal-safety decisions.
AI-generated fitness information is general education, not medical advice. The AI Gym Routine Planner builds general fitness programmes from the goal, experience level, days available, equipment, preferred exercises and session length you enter. AI-generated fitness information is for general educational purposes and isn't medical advice. If you have an injury, medical condition, or other health concern, consult an appropriately qualified professional before exercising. Stop exercising if you experience pain or other concerning symptoms. The planner does not provide rehabilitation, physiotherapy, injury-treatment or diagnostic programmes, and we ask you not to enter injuries, medical conditions or other health details — we do not seek to collect special-category health data, and any such text you submit may be rejected. The gym planner is for adults aged 18 or over.
We do not take bookings. Explosive Planner is a planning tool. We are not a booking agent, travel agent, ticket seller or payment processor. Where we show a website, phone number or map link, you contract directly with that venue or provider on their terms.
Human review. No AI output in this service produces a legal or similarly significant effect on you. If you believe an AI-generated result about you is wrong, email us and a person will review it.
6. Who we share data with
We do not sell your personal data. We only share it with the service providers that make the app work:
- Google — for Google Sign-In authentication and Google Maps Platform (places, maps, geocoding, photos, directions).
- Google Gemini — for AI-generated planning suggestions, via the Lovable AI Gateway. Only anonymised planning context is sent.
- Lovable / Supabase — for authentication, database hosting, and the Lovable AI Gateway. Supabase stores your account data and plans.
- Weather, traffic, and disruption data providers — we may send general location or venue information to providers such as Google Weather, Google Maps, or other public APIs to show weather, travel times, and disruption alerts.
- Professional advisers and authorities — only where strictly required by law or to protect our legal rights.
7. International data transfers
We operate globally, so your data may be processed in countries other than your own — including the United States, the European Union, and other regions where our providers run infrastructure.
Whenever we move personal data out of the EEA, the UK, or Switzerland, we rely on a recognised transfer mechanism:
- Adequacy decisions, where the destination country has been formally recognised as providing equivalent protection.
- Standard Contractual Clauses (including the UK International Data Transfer Addendum and the Swiss addendum), together with supplementary technical measures such as encryption in transit and at rest.
- EU–US Data Privacy Framework certification, where our provider participates in it.
Users elsewhere — including in Brazil, Canada, Australia, New Zealand, Japan, South Korea, South Africa, and India — receive the same protections: we only transfer data to providers bound by contractual confidentiality and security obligations at least equivalent to those required by your local law. You can request a copy of the safeguards we use by emailing us.
8. Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the app is used. Some cookies are strictly necessary for the app to work; others are only set with your consent.
We do not show third-party advertising today. In the future, we may introduce third-party advertising on parts of the site. If we do, those partners may use cookies or similar identifiers to measure ad delivery and performance. We will update this policy and provide any required consent controls before turning those cookies on.
Any analytics we use is limited to understanding app usage and is configured to minimise personal data collection.
9. Data retention
We keep your account and plan data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we need to keep limited records for legal, tax, security, or fraud-prevention reasons.
Technical logs used for security and troubleshooting are kept for up to 90 days.
10. Your rights (available to everyone, worldwide)
We grant the following rights to every user regardless of where you live, even where your local law does not require it. They include the right to:
- Access your data. Request a copy of the personal data we hold about you.
- Correct your data. Update inaccurate or incomplete information.
- Delete your data. Delete your account yourself at any time in Account settings → Delete my account; this immediately and permanently erases your account and all personal data linked to it. You can also ask us by email, subject to legal retention requirements.
- Withdraw consent. Where we rely on your consent, you can withdraw it at any time.
- Object or restrict processing. Ask us to stop or limit certain uses of your data.
- Data portability. Receive your plans and account data in a structured, commonly used, machine-readable format, and ask us to send it to another provider where technically feasible.
- Opt out of marketing. Unsubscribe from optional emails at any time using the link in every message, or by emailing us.
- Non-discrimination. We will never degrade the service, charge you more, or refuse you access because you exercised a privacy right.
- Human review. Ask a person to review anything the AI produced about your plans.
- Complain. Raise a complaint with us first, or go directly to your national privacy regulator (see section 11).
To exercise any of these rights, contact us at ExplosivePlanner@Gmail.com. We aim to respond within 30 days, and always within the time limit your local law requires. Requests are free of charge. We may ask you to confirm your identity — usually by replying from the email address on your account — before we act, and you may use an authorised agent where your local law allows it.
11. Country and region-specific rights
The table below lists the main privacy laws we comply with and the regulator you can complain to. Where a law gives you a right beyond those in section 10, that right applies to you in addition.
| Region | Law | Regulator / notes |
|---|---|---|
| EU / EEA | GDPR | Complain to your national DPA; our lead authority is the Irish Data Protection Commission. |
| United Kingdom | UK GDPR & DPA 2018 | Information Commissioner's Office (ICO). |
| Switzerland | revised FADP | Federal Data Protection and Information Commissioner (FDPIC). |
| California | CCPA / CPRA | Right to know, delete, correct, limit use of sensitive data, and opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we do not process it for cross-context behavioural advertising. |
| Other US states | Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware and similar | Access, correction, deletion, portability, opt-out of targeted advertising and profiling, and an appeal if we refuse a request. Attorney General of your state. |
| Canada | PIPEDA & Quebec Law 25 | Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information du Québec. |
| Brazil | LGPD | Confirmation of processing, anonymisation, and information about data sharing. Autoridade Nacional de Proteção de Dados (ANPD). |
| Australia | Privacy Act 1988 & APPs | Office of the Australian Information Commissioner (OAIC). |
| New Zealand | Privacy Act 2020 | Office of the Privacy Commissioner. |
| Japan | APPI | Personal Information Protection Commission (PPC). |
| South Korea | PIPA | Personal Information Protection Commission (PIPC). |
| India | DPDP Act 2023 | Right to access, correction, erasure, grievance redressal, and to nominate another person to act for you. Data Protection Board of India. |
| South Africa | POPIA | Information Regulator (South Africa). |
| Singapore | PDPA | Personal Data Protection Commission (PDPC). |
| UAE / Saudi Arabia | UAE PDPL / KSA PDPL | Access, correction, deletion, and objection rights via the relevant national authority. |
| China | PIPL | Cyberspace Administration of China. We do not operate infrastructure in mainland China; if you use the service from there, your data is processed abroad with your consent. |
| Elsewhere | Local law, plus our global standard | If your country has no comprehensive privacy law, we still apply the GDPR-level protections set out on this page. |
US "Do Not Sell or Share". We do not sell your personal information and do not share it for cross-context behavioural advertising, so no opt-out link is required today. If that ever changes, we will publish a Do Not Sell or Share My Personal Information control before any such processing begins.
Appeals. If we decline a privacy request, you may appeal by replying to our decision. We will review it and respond in writing, and we will tell you how to escalate to your regulator if you are still unhappy.
12. Payments, subscriptions and refunds
Plans and billing. Explosive Planner offers a free tier and a Premium subscription. Premium is billed monthly at the price shown at the time of purchase. Prices include any applicable VAT and are displayed in Euros for the EU. The exact amount you pay may vary depending on your country and tax rules.
Payment processor. Payments are processed by Paddle.com, who is the Merchant of Record for all transactions. Paddle handles checkout, payment processing, tax, invoicing, refunds, and billing support. The order process on our site is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.
Refund policy. We offer a 30-day money-back guarantee. If you are not satisfied with your Premium subscription, you can request a full refund within 30 days of your order date. Refunds are processed by Paddle. To request a refund, visit paddle.net or contact us at ExplosivePlanner@Gmail.com and we will direct Paddle to handle it.
Cancellations. You can cancel your Premium subscription at any time. Cancellation takes effect at the end of your current billing period, and you will retain Premium access until then. After cancellation, your account reverts to the free tier and any plans above the free limits remain visible but you cannot create new ones until you are within the free allowance.
Changes to pricing. We may change Premium pricing or features from time to time. If we increase the price of your current subscription, we will notify you in advance and the new price will apply only at your next renewal.
13. Children and age limits
Explosive Planner is intended for adults. You must be at least 18 to create an account or use any AI-powered feature, including the AI Gym Routine Planner and AI plan suggestions. The service is not directed at, and is not marketed to, under-18s, and our AI features are provided on that basis under our AI providers' terms.
We do not knowingly collect personal data from anyone under 18, and we do not build profiles of, or serve targeted advertising to, minors. If you believe a minor has given us personal data, email us and we will delete the account and its data promptly.
14. Data breach notification
If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required, within 72 hours of becoming aware of it, in line with the GDPR and equivalent laws elsewhere.
Where the breach is likely to result in a high risk to you, we will also notify you directly by email, without undue delay, describing what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.
15. Terms of Service
Acceptance. By creating an account or using Explosive Planner, you agree to these Terms of Service. If you do not agree, do not use the service.
The service. Explosive Planner is a web application that helps you plan events, discover venues, build itineraries, and manage checklists and budgets. We may offer free and paid features, and we may add, change, or remove features over time.
Acceptable use. You must not use the service unlawfully, for fraud or spam, to infringe anyone's intellectual property, to upload malware, to attack or probe our infrastructure, or to scrape content or third-party data outside what the applicable terms permit. You are responsible for activity under your account.
Intellectual property. Explosive Planner, its branding, software, and documentation are owned by Explosive Planner Limited. You receive a limited, non-exclusive, non-transferable right to use the service for your personal planning. You must not resell, sublicense, or reverse-engineer it.
Service level. The service is provided "as is". We do not guarantee it will be uninterrupted or error-free, and AI-generated suggestions should be verified with the underlying source before you rely on them (for example, opening times, prices, and travel details).
Termination. We may suspend or terminate access for material breach, security or fraud risk, or repeated or serious policy violations. You may stop using the service or delete your account at any time.
Liability. To the fullest extent permitted by law, our aggregate liability for any claim arising from the service is limited to the amount you paid for the service in the twelve months before the claim, or zero if you did not pay for the service during that period. Nothing in these terms limits liability that cannot be excluded by law.
Governing law. These terms are governed by the laws of Ireland and the courts of Ireland have jurisdiction. If you are a consumer, this does not deprive you of the protection of the mandatory consumer-protection laws of the country where you live, and you may bring proceedings in your local courts.
16. Third-party content
Venue photos, place details, ratings, and map data are provided by Google Maps Platform and remain the property of Google and its contributors, used under the Google Maps Platform Terms of Service. We attribute results in-product and do not cache or repackage protected content beyond what those terms permit.
Weather and traffic data may be provided by Google or other public data sources. If you believe content shown in the app infringes your copyright, contact us and we will act on valid notices under applicable law.
17. Data security
Data is encrypted in transit (TLS 1.2+) and at rest. We limit access to production data, use Row-Level Security in the database so users can only access their own data, and log access for security purposes. We do not train third-party AI models on your private event data.
18. Changes to this policy
We may update this page from time to time. If we make material changes, we will notify you by posting the updated version here and, where appropriate, through the app or by email.
19. Contact
Explosive Planner Limited — privacy questions, data-subject requests, copyright notices, and security reports: ExplosivePlanner@Gmail.com.
Please put "Privacy request" in the subject line and tell us which country you are writing from, so we can apply the right deadlines and rights for you.

