App: Plank Room Planner (https://plank-room-planner.lovable.app)
Effective date: 19 October 2026
This Privacy Policy explains how we handle personal data when you use Plank Room Planner (the “App”). We keep it deliberately short because we collect very little.
1. Who we are
The App is operated by It Is Leon, a sole proprietorship (eenmanszaak) established in the Netherlands, part of LDV Concepts of Projects.
- Contact / data controller: It Is Leon / LDV Concepts of Projects
- Contact form: Contact – It Is Leon
- Located in: Rotterdam, The Netherlands
For questions about this policy or your personal data, contact us at the email address above.
2. Summary (TL;DR)
- The App is free to use. Without an account, we store nothing about you.
- If you create an account, we store only your email address, display name, and the content you create in the App (your plans).
- If you sign in with Google, we receive only your name, email address, and Google profile picture — nothing else.
- We use Google Analytics to understand how the App is used, in aggregate.
- We never sell your data. We share it only with the service providers strictly needed to run the App.
- You can delete your account and data at any time by contacting us.
3. What data we process, and why
3.1 Use without an account (legal basis: not applicable)
You can use the App without signing in. In that case we store no personal data on our servers. Plans you create without an account exist only in your browser session unless and until you create an account.
3.2 Free account (legal basis: performance of a contract — Art. 6(1)(b) GDPR)
If you sign up with an email address, we process:
- Your email address (to identify your account)
- Your display name
- The plans and content you create and save in the App
3.3 Google single sign-on (legal basis: contract / consent)
If you sign in with Google, Google shares with us only:
- Your name
- Your email address
- Your Google profile picture
We do not request or receive any other Google data (no contacts, no documents, no broader profile access), and we do not post anything to your Google account.
3.4 Google Analytics (legal basis: consent — Art. 6(1)(a) GDPR)
We use Google Analytics to collect aggregated usage statistics (pages viewed, approximate device and region data). This helps us understand which features are used so we can improve the App. Analytics data is not used to identify you personally. You may refuse or withdraw consent for analytics cookies at any time via the cookie banner or your browser settings. See Section 5 for retention settings we recommend enabling.
3.5 Lovable default cookies (legal basis: strictly necessary / limited consent)
The App runs on the Lovable platform, which uses a small number of default cookies needed to make the App function (session and authentication cookies). These are strictly necessary and cannot be switched off.
4. What we do NOT do
- We do not sell, rent, or trade your personal data.
- We do not use your data for advertising or profiling.
- We do not charge money and do not process any payments or financial data.
- We do not collect special categories of personal data (health, religion, etc.).
- We do not knowingly process data of children under 16; if we learn we do, we delete it. (The App is not directed at children.)
5. Who we share data with
We share data only with processors strictly required to operate the App:
| Provider | Purpose | Data |
|---|---|---|
| Google (SSO) | Authentication when you use “Sign in with Google” | Name, email, profile picture |
| Google Analytics | Usage statistics | Aggregated/anonymized usage data |
| Lovable | Hosting and platform operation | Account data, plans, technical logs |
These providers may process data outside the EU. Where they do, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses. We have (or recommend enabling) Google Analytics’ IP anonymization and shortened data-retention settings.
6. How long we keep data
- Account data and plans: kept as long as your account exists. When you delete your account, your data is deleted from our active systems immediately and from backups within 30 days.
- Analytics data: kept according to Google Analytics’ retention settings (maximum 14 months).
- Technical logs: kept no longer than necessary for security and troubleshooting, up to 12 months.
7. Your rights under the GDPR
Since we’re based in the Netherlands, the GDPR (in Dutch: the AVG) applies. You have the right to:
- Access your personal data
- Rectify (correct) your data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability (receive a copy of your data)
- Withdraw consent at any time (e.g. for analytics), without affecting prior processing
To exercise any right, contact us via our contact form. We respond within one month. If you’re unhappy with how we handle your data, you can file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or your local supervisory authority.
8. Security
The App runs over HTTPS. Access to your plans is limited to your account. While no online service can guarantee perfect security, we apply measures appropriate to the (very limited) data we hold. Note: the App is a free planning tool — please do not store sensitive personal information in your plans.
9. Changes
We may update this policy. Material changes will be announced in the App. The current version is always available on this page.
10. Dutch law notice
This policy and our data processing comply with the Uitvoeringswet AVG (the Dutch GDPR Implementation Act). Where this policy refers to Dutch concepts, the Dutch text of the law prevails.