Privacy Policy
Plumee ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Plumee mobile application and related services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
1. Information We Collect
We collect information you provide directly to us and information collected automatically:
- Account & profile data: your name (we store your full last name on our servers, even where the app displays only your last initial to other users), email address, date of birth, gender (optional), and a profile photo if you choose to add one.
- Goal & action content: the goals and actions you create, your stated motivation and deadline, and the free-text answers you give about a goal (why it matters, what "done" looks like, the time you can commit).
- Reflections & ratings: the journal-style reflections you write and the difficulty ratings you give when you complete an action or goal. You can mark a reflection private; private reflections are excluded from the AI features described in section 3.
- Photos: a profile avatar and photos you attach to completed actions.
- Community & social content: forum posts, replies and voice notes you publish; chat messages; and the backing relationships you form (goals you back, goals other people back for you) and related in-app activity.
- Usage & device data: features used, goals and actions created, streaks, and timestamps; and your device type, operating system version, app version, and crash diagnostics. This is tied to a randomly-generated analytics identifier, not to your name.
- Technical data: your IP address is processed transiently by our servers to rate-limit requests and protect the Service; we do not store it in a user profile.
- Notification preferences: whether you have enabled reminders and your reminder schedule. Reminders are delivered on your device; we do not operate a remote push-notification service.
We do not collect precise location, your contacts, or advertising identifiers, and Plumee contains no third-party advertising.
2. How We Use Your Information
We process your personal data on the following legal bases (where the GDPR applies): to perform our contract with you (running the Service), with your consent (analytics, optional reminders), and for our legitimate interests (securing, debugging, and improving the Service). Specifically, we use your information:
- To create and manage your account and provide the Service.
- To generate personalised action suggestions and coaching (see section 3).
- To power community features — backing, forums, and chat.
- To deliver reminders you have enabled.
- To monitor and improve app performance, diagnose crashes, and fix bugs.
- To understand aggregate usage patterns and improve the Service.
- To comply with legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
3. AI Features and What We Send
To suggest your next action and generate coaching, we send relevant parts of your goal content to OpenRouter (and the underlying AI model provider it routes to), which also generates the text embeddings we use to find relevant suggestions. The content sent can include: your goal title, your motivation and deadline, your onboarding answers about the goal, the text and difficulty rating of actions you have completed, your (non-private) reflections, and the chat-thread discussion on that goal. To surface what has worked for people with similar goals, an AI suggestion may also draw on other users' non-private reflection text; anything you mark private is excluded. We do not send your name, email address, or date of birth to these AI services.
4. Third-Party Services
We rely on the following processors, each governed by its own privacy policy:
- Clerk (clerk.com/privacy) — authentication and identity management. Clerk stores your email address and manages sign-in sessions on our behalf.
- Google and Apple (Sign in with) — if you choose to sign in with Google or Apple, that provider authenticates you and shares your name and email address (or, for Apple's Hide My Email, a private relay address) with us via Clerk. Their handling of your data is governed by Google's and Apple's privacy policies.
- PostHog (posthog.com/privacy) — product analytics, processed in the US. We identify events with a random identifier rather than your name, and you can opt out of analytics in the app or by contacting us.
- Sentry (sentry.io/privacy) — crash reporting and error monitoring. We configure Sentry to scrub personal data from error reports.
- OpenRouter (openrouter.ai/privacy) — the AI provider described in section 3.
- Fly.io (fly.io/legal/privacy-policy) — cloud hosting for our application servers and database, where your account and content data is stored.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. You can delete your account at any time from the app; when you do, we delete or anonymise your personal data within 30 days, except where we are required to retain certain information for legal or legitimate business purposes.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information against accidental loss, misuse, and unauthorised access. However, no transmission over the internet is completely secure, and we cannot guarantee the absolute security of your data.
7. Children's Privacy
The Service is intended for users aged 13 and older, and we require a date of birth during onboarding to enforce this minimum age. We do not knowingly collect personal information from anyone under 13. If we become aware that a user under 13 has provided personal information, we will delete it promptly.
8. Your Rights and Choices
Depending on where you live, you may have some or all of the following rights:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your personal data ("right to be forgotten") — available in-app via Delete account.
- Opt out of analytics tracking, in the app or by contacting us.
- Data portability (receive your data in a machine-readable format).
- Object to or restrict certain processing, and withdraw consent at any time.
California residents (CCPA/CPRA): we do not sell or share your personal information as those terms are defined under California law, and we honor Global Privacy Control (GPC) signals as a valid opt-out of sale/sharing. You have the right to know, delete, correct, and to be free from discrimination for exercising these rights.
To exercise any of these rights, email us at support@plumee.app. We will respond within 30 days.
9. International Transfers
Your data may be processed in countries other than the one in which you reside, including the United States, by us and the processors listed in section 4. Where we transfer data out of the UK/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data receives an adequate level of protection.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via in-app notification or email. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise your rights,
please contact us at:
Email: support@plumee.app