What we know, and what happens to it
Kindred Plans asks personal questions — where you're going, what you can't eat, how far you can comfortably walk — because a plan that ignores the answers isn't worth having. This page says what we keep, who else sees it, and what we can and can't take back later. Where the honest answer is “not entirely,” we say that instead of rounding it off.
- Last updated
- Version
- 2026-08-privacy-v1
- Applies in
- United States
Where one answer travels
Say you tell us about a shellfish allergy. Here is every place that answer goes, in order. Most of this page is about the last two steps.
You answer it
In the planner, or in your couple profile. Profile answers are saved to your account so the next plan starts from them instead of from a blank page.
It waits on your device
An unfinished plan is held in your browser's local storage for up to 14 days, so a refresh doesn't lose your progress. That copy never reaches us.
It goes to Google's model
When you generate a plan, your answers are sent from our server to Google Vertex AI (Gemini). To name real, current places rather than invented ones, the model may run Google Search queries.
It is copied into the plan
The finished plan is saved with its own copy of the answers behind it, so the plan still makes sense months later and so swapping a single stop keeps your restrictions.
It can end up in the writing
A plan may explain a choice in its own words — “chosen for the shellfish allergy.” That copy is prose, not a field. It is the one copy we cannot edit out.
Jump to a section
Who we are
Kindred Plans is made by Next Floor Studios LLC in the United States. We serve people in the US, and this notice is written to US privacy law.
For anything on this page — a question, a copy of your information, or a request to delete it — write to admin@nextfloorstudios.com.
We do not have a data protection officer, and we have no representative in the EU or the UK, because we do not operate there.
What we collect
Only what a plan needs, plus the account it belongs to. We don't buy information about you, and nothing is gathered in the background.
- Your account — the email address you sign up with, held by Firebase Authentication, and the date the account was created.
- Your couple profile — the name you give yourselves, your home base, how you like to travel, budget comfort, pace, the small touches that matter to you, and your dietary and accessibility answers.
- Your planning answers — occasion, destination, dates, mood, budget, where you're staying, when you arrive and leave, what to avoid, and anything you write in the free-text notes.
- Your plans — every itinerary we generate for you, kept until you delete it, together with the answers it was built from.
- A token count for each generation, which is how we watch what the AI costs. It records size, not content.
There is no analytics, no advertising, no tracking pixel, no session recorder, and no third-party script running on this site. We are not measuring you.
Dietary and accessibility answers
These are health-adjacent, and we handle them that way.
An allergy, a coeliac diagnosis, diabetes, a halal or kosher requirement, a mobility limit, a service animal — answers like these say something about your health or your beliefs. Under California's privacy law they can count as sensitive personal information, and under Washington's My Health My Data Act information like this can count as consumer health data.
We use them for one thing: building a plan you can actually eat and actually walk. Never to profile you, never for advertising, never for anything you didn't ask for.
We've also chosen to hold this category to a stricter internal standard than US law requires of us — collect the least that works, no secondary use, and a written-down deletion path. That's a decision about how we build, not a claim about which law applies to us.
You can leave these fields empty. The plan will be less useful. It will still work.
Where your answers go
Three Google services. Nothing else, and nobody else.
- Google Cloud — Firebase Authentication, Cloud Firestore and Firebase App Hosting hold your account, your profile and your plans, and serve this site.
- Google Vertex AI (Gemini) — receives your planning answers from our server when you generate a plan or replace a stop, and writes the itinerary. With grounding on, the model runs Google Search queries so it can name real, current places.
- Google Places — receives the place and location text you search for, so lodging and venue suggestions are real addresses rather than plausible-sounding fiction.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. There are no advertising networks, analytics providers, data brokers, affiliate trackers, or marketing tools in this product — not switched off, not present.
Your answers travel with your plans
When a plan is generated, the answers behind it are copied into that plan and stay there.
This is deliberate. A saved plan holds its own copy of the answers it was built from, so editing your profile later never quietly rewrites a plan you already have, and so swapping out a single stop still respects the restrictions the plan was built around.
The consequence is worth knowing: a preference you remove from your profile today is still present in the plans you made before you removed it, and it may be part of the words those plans are written in.
The unfinished draft on your device
A plan you haven't finished is saved in your browser, not on our servers.
While you work through the planner, your answers are kept in your browser's local storage so a refresh or a mis-tap doesn't lose them. It's tied to your account, kept for up to 14 days, and cleared when the plan is saved or when you discard it. Clearing this site's data in your browser removes it straight away.
Because that copy never reaches us, we can't delete it for you — and it can still hold answers you've since removed everywhere else.
Deleting your information
You can delete any plan yourself. Removing details from plans you keep is possible, but it has limits, and we'd rather show you the limits than round them off.
- A plan — delete it from the plan itself. That removes the itinerary, the answers saved with it, and the plan document.
- Profile answers — edit or clear any of them in your profile, whenever you like.
- Your account — write to admin@nextfloorstudios.com from the address on the account. We remove your account, your profile and your plans within 30 days of confirming the request is yours.
Deletion is carried out by hand today. There's no scheduled job sweeping up in the background, so 30 days is a commitment we keep, not a countdown running in the app.
Copies can also remain where no request reaches: an unfinished draft in your browser, tabs you still have open, our provider's backups, and the records Google keeps of AI requests already made.
Your choices
US privacy laws give people rights over information like this. We apply them to anyone who asks, wherever in the US they live.
- Know what we hold about you, and get a copy of it.
- Correct it. Most of it you can edit yourself in your profile.
- Delete it, subject to the limits in the section above.
- Limit how sensitive information is used. For us that's already true — dietary and accessibility answers build your plan and do nothing else.
- Be treated no differently for asking. There's no lesser version of Kindred Plans for people who exercise a right.
Send requests to admin@nextfloorstudios.com from the email address on your account — that's how we check a request is really yours. If we can't match a request to an account, we may not be able to act on it. We answer as quickly as we can, and within the time your state's law allows.
Keeping it safe
Access is scoped to your account, and the AI runs on our server rather than in your browser.
- Your profile and your plans can be read and written only by your signed-in account. The database's own rules enforce that, not just the interface.
- Plan generation runs server-side on Google Cloud credentials. There's no AI key in your browser because there's no AI key at all — the connection is keyless.
- The Google Places key stays on the server, and is restricted to our own domains.
No system is beyond failure. If something happens that affects your information, we'll tell you plainly, and quickly.
Planning with a partner
Today a Kindred Plans account belongs to one person.
There's no partner linking, no plan shared between two accounts, and no separate consent step for a partner. Your profile describes a couple and usually holds answers about both of you — but every one of those answers sits in your account, under your control, and is handled as your data.
If you're entering someone else's dietary or accessibility details, please ask them first. We treat those answers the same way whoever they describe.
Changes to this notice
When this notice changes, the date and version shown with it change too.
Every version carries an identifier — this one is 2026-08-privacy-v1 — so a record of what you were shown can point at the exact words, not just at a page that has since moved on.
Contact
Next Floor Studios LLC, United States.
Write to admin@nextfloorstudios.com. A person reads it.
Next Floor Studios LLC · United States · Version 2026-08-privacy-v1 · Updated August 4, 2026