Privacy Policy

The short version: Plumi is built to keep your baby's data on your device. We don't require an account for local logging. The app has no third-party analytics or ads, and we never sell your data. Care records stay on your device by default. Optional sync and partner sharing (Pro) encrypt those records before upload. iCloud backup, book lookup, ChatGPT entry preparation, sign-in and subscription services also use the internet as described below.

1. Who we are

Plumi is operated by Soner Eker. This Privacy Policy describes how Plumi ("Plumi", "we", "us") handles information in connection with the Plumi mobile application, the Plumi plugin in ChatGPT and the website at plumi.app (together, the "Service"). If you have any questions, contact us at privacy@plumi.app.

2. Data stored on your device

The information you enter into Plumi is stored locally on your device: your baby's profile, logs (feeds, diapers, sleep, growth, health events, milestones), checklists, notes, photos and scanned documents. If you enable sync, our servers hold encrypted copies of care records whose contents we cannot read. Your baby's profile photo and the photos and documents you attach to entries are never uploaded to our servers: they stay on the device that added them and in your backups, and they don't sync to your other devices or to people you share with. Please don't store identity documents or passwords in Plumi.

3. Information we do not collect

• We do not require you to create an account to use the core app.
• We do not include third-party advertising or advertising identifiers.
• We do not embed third-party analytics or tracking SDKs.
• We do not track you across apps or websites, and we do not sell or rent personal data.

4. Sync, partner sharing & backup

With Plumi Pro you can sync your data across your own devices and share a baby's record with a partner or caregiver. This sync is end-to-end encrypted: your data is encrypted on your device with a key that stays on your devices, and our servers hold encrypted care records we cannot read. Account and subscription information is handled separately, as described below. The encryption key is never sent to us. Sharing is per child: you choose which children each person can see and their role. Parents can manage care and settings; caregivers can record care without managing settings. A child you don't share with someone is never delivered to them in any form; they never receive that child's encryption key or data.

You can also keep an encrypted iCloud Drive backup through your own private iCloud account, governed by Apple's Privacy Policy. Sync, sharing and backup are optional. Backups are stored in your private iCloud account and include the photos and documents you attach to entries. Encryption keys can synchronize between your devices through iCloud Keychain.

5. Accounts and subscriptions

Local care tracking does not require an account. Sign in with Apple or Google to purchase, restore or use Plumi Pro, including sync across your devices and sharing with a partner. In that case we store a minimal account record (such as a provider identifier and, where provided, an email address), device push tokens if you enable sync or reminders, and your subscription status. Payments are processed by Apple through the App Store; we do not receive your card details. RevenueCat processes purchase and entitlement information to provide subscription access. Care-record contents are not sent to RevenueCat. Existing purchases made without signing in can be restored after signing in.

Book lookup

If you use Pro book lookup, the app sends an ISBN, an authentication token and a device identifier to our backend. The backend uses the ISBN to request book information from Google Books or Open Library. This lookup requires sign-in and an internet connection.

Photo logging

If you use Pro photo logging on a supported iPhone (iOS 27 with Apple Intelligence), the photo you take or choose is read by Apple Private Cloud Compute to suggest log entries, which you review before anything is saved. The photo is never sent to our servers. Apple processes it under Apple's Privacy Policy and does not keep it. When you save, Plumi attaches the photo to the new entries like any other entry photo: it stays on your device and in your backups, and it doesn't sync. To show roughly how much of Apple's daily limit is left, the app counts on your device how many requests it has made; that count never leaves your device.

Plumi in ChatGPT

If you use the Plumi plugin in ChatGPT, what you write in ChatGPT is handled by OpenAI under OpenAI's Privacy Policy. When ChatGPT asks Plumi to prepare entries, our server processes the entry details supplied to the tool, including care types, amounts, times, any notes and your time zone, to create a review link. These may include health details such as a temperature or a stated medication dose. The plugin does not request or retrieve your baby's name, birth date or other profile details from the app, and it cannot read your existing Plumi journal. Personal information that you include in an entry or note is still processed; do not include names, birth dates, identifying details or medical documents.

Plumi does not store the submitted entry contents. The tool's operational log records its name, entry and dropped-entry counts, and processing time, rather than entry contents. The returned link carries the entries after the # sign, a part of a web address that isn't sent to our web server when you open it. ChatGPT conversations and tool interactions are handled by OpenAI under its own privacy policy and your account settings. Nothing is added to Plumi until you review and save it in the app.

In-app feedback

If you send feedback from Settings, the app sends your answer (how happy you are with Plumi and anything you choose to write), the app version, your device's iOS version, its language and region setting, and an app-generated device identifier. If you are signed in, it is linked to your account and includes your account email, so we can follow up with you. No baby data is added. We deliver it to a private Telegram chat that only the Plumi team can read, and we keep it there only as long as it is useful for improving Plumi. Please leave personal details out of what you write. To ask us to delete a message, email privacy@plumi.app.

6. How information is used

• To provide the Service and the features you use.
• To operate and secure end-to-end-encrypted sync and partner sharing for users who turn them on.
• To manage Pro subscriptions for users who choose to subscribe.
• To respond to you when you contact us.

7. Sharing and service providers

We do not sell your personal data. We share information only with service providers who help us operate the Service, only as needed for those purposes, or where required by law. The providers we currently use:

• Apple: App Store purchases and subscriptions, iCloud backup, Sign in with Apple, push notifications, and Private Cloud Compute for photo logging.
• Google: Sign in with Google, and Google Books for book lookup.
• OpenAI: conversations and tool interactions when you use Plumi in ChatGPT, under OpenAI's Privacy Policy and your account settings. The plugin cannot retrieve your existing Plumi journal or baby profiles.
• Open Library: book lookup when Google Books has no match.
• RevenueCat: subscription status and receipts.
• Hetzner Online GmbH: hosts the servers that relay end-to-end-encrypted sync and sharing data.
• Better Stack: server log and uptime monitoring for those servers.
• Telegram: delivery of in-app feedback to the team.
• Google Analytics: aggregate visit statistics for the plumi.app website only; the app contains no analytics or advertising SDKs.

8. Data retention & deletion

On the free plan, the app shows your most recent month of journal history; older entries stay stored on your device and become visible again with Plumi Pro. The history limit does not delete entries. Growth charts and milestones are always available on every plan. Data stored on your device remains until you delete it or remove the app. You can export your data to CSV at any time. If you contact support or subscribe, we retain related records only as long as needed for those purposes or as required by law. You can delete your account in Settings > Account. For account-data requests, email privacy@plumi.app.

9. Children

Plumi is designed for parents and caregivers to record information about their own children. It is intended for use by adults (18+). The app is not directed to children, and children should not use it directly.

10. Security

On-device data is protected by your device's built-in security. Sync and partner sharing are end-to-end encrypted, so care records stay encrypted in transit and on our servers. We cannot read their contents. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

11. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you. Because most data stays on your device, you can exercise many of these directly in the app. For anything else, contact privacy@plumi.app.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

13. Contact

Questions about privacy? Email us at privacy@plumi.app. This policy works together with our Terms of Service.