Privacy Policy

The short version: Plumi is built to keep your baby's data on your device. We don't require an account, we don't run third-party analytics, we don't show ads, and we never sell your data. Care records stay on your device by default. Optional sync and partner sharing (Pro) encrypt those records before upload. iCloud backup, book lookup, sign-in and subscription services also use the internet as described below.

1. Who we are

This Privacy Policy describes how Plumi ("Plumi", "we", "us") handles information in connection with the Plumi mobile application and the website at plumi.app (together, the "Service"). If you have any questions, contact us at privacy@plumi.app.

2. Data stored on your device

The information you enter into Plumi is stored locally on your device: your baby's profile, logs (feeds, diapers, sleep, growth, health events, milestones), checklists, notes and photos. If you enable sync, our servers hold encrypted copies of care records whose contents we cannot read.

3. Information we do not collect

• We do not require you to create an account to use the core app.
• We do not include third-party advertising or advertising identifiers.
• We do not embed third-party analytics or tracking SDKs.
• We do not track you across apps or websites, and we do not sell or rent personal data.

4. Sync, partner sharing & backup

With Plumi Pro you can sync your data across your own devices and share a baby's record with a partner or caregiver. This sync is end-to-end encrypted: your data is encrypted on your device with a key that stays on your devices, and our servers hold encrypted care records we cannot read. Account and subscription information is handled separately, as described below. The encryption key is never sent to us. Sharing is per child: you choose which children each person can see and their role. Parents can manage care and settings; caregivers can record care without managing settings. A child you don't share with someone is never delivered to them in any form; they never receive that child's encryption key or data.

You can also keep an encrypted iCloud Drive backup through your own private iCloud account, governed by Apple's Privacy Policy. Sync, sharing and backup are optional. Backups are stored in your private iCloud account. Encryption keys can synchronize between your devices through iCloud Keychain.

5. Accounts and subscriptions

You only create an account, using Sign in with Apple or Google, if you choose to, for example to sync across your devices, share with a partner, or link your Plumi Pro subscription across devices. In that case we store a minimal account record (such as a provider identifier and, where provided, an email address), device push tokens if you enable sync or reminders, and your subscription status. Payments are processed by Apple through the App Store; we do not receive your card details. RevenueCat processes purchase and entitlement information to provide subscription access. Care-record contents are not sent to RevenueCat. You can purchase Pro without signing in.

Book lookup

If you use Pro book lookup, the app sends an ISBN, an authentication token and a device identifier to our backend. The backend uses the ISBN to request book information from Google Books or Open Library. This lookup requires sign-in and an internet connection.

6. How information is used

• To provide the Service and the features you use.
• To operate and secure end-to-end-encrypted sync and partner sharing for users who turn them on.
• To manage Pro subscriptions for users who choose to subscribe.
• To respond to you when you contact us.

7. Sharing

We do not sell your personal data. We share information only with service providers who help us operate the Service (including Apple for payments and iCloud, RevenueCat for subscriptions, and Google Books or Open Library for book lookup), and only as needed for those purposes, or where required by law.

8. Data retention & deletion

On the free plan, the app shows your most recent month of journal history; older entries stay stored on your device and become visible again with Plumi Pro. The history limit does not delete entries. Growth charts and milestones are always available on every plan. Data stored on your device remains until you delete it or remove the app. You can export your data to CSV at any time. If you contact support or subscribe, we retain related records only as long as needed for those purposes or as required by law. You can delete your account in Settings > Account. For account-data requests, email privacy@plumi.app.

9. Children

Plumi is designed for parents and caregivers to record information about their own children. It is intended for use by adults (18+). The app is not directed to children, and children should not use it directly.

10. Security

On-device data is protected by your device's built-in security. Sync and partner sharing are end-to-end encrypted, so data in transit and on our servers stays ciphertext we can't read. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

11. Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you. Because most data stays on your device, you can exercise many of these directly in the app. For anything else, contact privacy@plumi.app.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

13. Contact

Questions about privacy? Email us at privacy@plumi.app.