Last updated: 9 October 2026
YoPlan is a digital platform that allows independent professionals to manage their clients, services and bookings.
The data controller for YoPlan account data (the professional user's data) is Avott Unipessoal Lda, tax ID (NIF) 516498380, registered office at Rua dos Transitários n.º 121, r/c esq., 4455-565 Perafita, Porto, Portugal.
Each professional is responsible for the client data they enter and manage in the application.
About the professional (account):
- Name and email of the Google account used to sign in
- Display name (editable in settings; used in client SMS reminders)
- Preferences (language, timezone, currency, notifications, SMS reminders, calendar sync)
Professionals may enter the following data about their clients:
- Name
- Phone number and/or email
- Additional notes (free text)
The application may also record:
- Booking history (dates, services, locations, amounts, status)
- Where the service was provided (when configured)
- SMS reminder send history (when SMS reminders are enabled)
Data is used to:
- Authenticate the professional and provide the YoPlan service
- Manage bookings between the professional and their clients
- Record service history and summaries of revenue, commissions and profit
- Organise by workplace (where applicable)
- Optional Google Calendar sync
- Optional notifications with a summary of the next day's appointments
- Optional SMS reminders to clients the day before a scheduled appointment (when enabled by the professional)
- Detect and fix technical errors
- Usage and performance analytics, only if you accept analytics cookies (including limited product events from our servers when that consent is stored on your account)
Processing of the professional's account data is based on providing the requested service and, where applicable, legitimate interest in maintaining and improving the platform.
Technical error logging (Sentry) is based on legitimate interest in keeping the service secure and reliable. Error reports may include technical context such as the page URL, device and browser details, and related request metadata needed to diagnose failures.
Usage and performance analytics (PostHog in the browser and on our servers, including Core Web Vitals) and optional session replay (Sentry) are based on your consent, which you can withdraw at any time via Cookie settings.
Processing of client data by the professional is based on:
- The professional's legitimate interest in maintaining an organised relationship with their clients
- Contractual obligations (provision of services)
- Consent, when applicable (e.g. for sending notifications to the professional)
Only the professional who registered the client has access to that client's personal data in YoPlan. Data is not shared with other professionals.
If the professional enables SMS reminders, the client's phone number and a short appointment message are sent to Twilio to deliver the SMS.
Data is kept while the professional maintains an active account. The professional may edit or delete clients, services, locations and appointments at any time, and may close the account in settings, which deletes data stored in YoPlan.
Technical error reports in Sentry are kept for 30 days. When you have accepted analytics, session replay recordings in Sentry are also kept for 30 days.
Analytics data in PostHog (including Core Web Vitals) is kept for 1 year. You can request deletion of your analytics data by contacting us at hello@yoplan.co.
Clients have the right to access, correct, update or request deletion of their data. These rights are exercised with the professional who registered the data.
The professional may close their YoPlan account in the application settings.
For questions about your YoPlan account, how we process your data as a platform user, or to exercise your rights regarding that data, contact us at hello@yoplan.co.
For questions about personal data of clients registered by a professional, contact that professional.
YoPlan uses strictly necessary storage to run the service (for example, login session, language preference, and offline app cache). These do not require consent.
We also store your cookie choice (for example, in local storage) so we do not ask again on every visit.
With your consent, we use analytics tools to understand usage and performance:
- PostHog in the browser (product analytics, page views, and Core Web Vitals performance metrics; loaded only after consent). We identify you by your YoPlan account id, not by email.
- PostHog from our servers (limited product events such as push notification outcomes, SMS reminder outcomes, and Google Calendar sync results). These run only when you have accepted analytics and that choice is saved on your account while you are signed in.
- Sentry browser performance tracing and session replay (loaded only after consent; text is masked and media blocked in replays)
If you accept while signed in, we also store that analytics choice on your account so server events can respect it. Rejecting analytics updates that stored choice so those server events stop, and turns off Sentry performance tracing and session replay. Without consent we do not load browser product analytics or performance metrics, and we do not send those server PostHog events.
Without consent, we still log technical errors through Sentry to diagnose failures. Those reports may include the page URL, device and browser details, and related request metadata. Performance tracing and session replay stay off until you accept analytics.
You can accept or reject analytics cookies in the banner when you first visit, or change your choice at any time via Cookie settings in the site footer.
To provide the service, YoPlan uses:
- Supabase (database, authentication and server functions)
- Google (sign-in and, if enabled, Google Calendar)
- Firebase / Google (push notifications, if enabled)
- Twilio (SMS reminders to clients, if enabled by the professional)
- Vercel (hosting)
- PostHog (product analytics, Core Web Vitals, and limited server events after consent)
- Sentry (technical error logging with diagnostic context; performance tracing and session replay only after consent)
Application data is stored on Supabase infrastructure in the European Union, unless otherwise indicated by the processors above.
For questions about the processing of clients' personal data, contact the responsible professional. You may file a complaint with the Portuguese National Data Protection Commission (CNPD).