Privacy policy

The controller responsible for processing your data is:

NEW GAME, a simplified joint-stock company (SAS) with share capital of €2, registered with the Paris Trade and Companies Register under number 105 490 080, with its registered office at 66 avenue des Champs-Élysées, 75008 Paris, France.

For any question about your personal data, write to us at hello@plumm-app.com.

Plumm is designed to work entirely on your phone. Your cycle data (period dates, cycle length, symptoms, cervical mucus, pain, mood, contraception, pregnancy) is stored only in the app's private space, on your device — isolated from other apps by iOS and Android, and protected by your phone's storage encryption.

By default, this data does not leave your phone and we have no access to it. Two strictly optional choices can make it transit, and only if YOU enable them: direct transfer to another phone (end-to-end encrypted, unreadable by us) and cloud backup (encrypted in transit and at rest, hosted by our processor so we can restore it for you). As long as you don't enable them, no cycle data leaves your device.

1. Cycle data — stored locally by default (sent only if you enable cloud backup or transfer): • Period dates, cycle length, period length • Symptoms: mood, energy, pain, cervical mucus, spotting, ovulation pain, intimacy • Contraception type and related settings (pill time, insertion date, etc.) • Pregnancy (start date, estimated due date) • First name (optional) and app preferences

2. Pseudonymized technical data (error detection): • Application error logs — no cycle data whatsoever • OS version and device model • No IP address retained, no cookies, no advertising identifiers

3. Data from the “Let's talk” messaging (only if you use it): • The content of the messages you send our team • An anonymous identifier for your device (random UUID, unrelated to your identity) • A notification token (push token) so we can send you a reply

Messaging is optional: as long as you don't use it, none of this data is created or transmitted. No account, no email, no first name is requested — you stay anonymous.

4. Idea board data (only if you post an idea, vote or comment): • The content of your ideas and comments — they are public, visible to all users • Your first name (or 'Anonymous') shown next to your ideas and comments • An anonymous device identifier and a notification token (to alert you when the team replies)

The idea board is optional and public: only share what you're comfortable making visible to the community.

5. Cloud backup data (only if you enable it): • A copy of your cycle data (see point 1), encrypted in transit and at rest, stored on our servers (Supabase) and tied to your account • Your email address (the backup account identifier)

Cloud backup is optional and opt-in: it only exists if you enable it, so you don't lose your history if you change or lose your phone. Unlike the rest, this copy is technically readable by the server (it is not end-to-end encrypted) — that's the deliberate trade-off so we can restore it for you. You can delete it in one tap at any time. For zero data on a server, use direct transfer instead (end-to-end encrypted).

6. Waitlist (only if you leave your email on the website before launch): • Your email address and language, to notify you when the app goes live

This email is used solely to announce the launch, is never resold or used for advertising, and is deleted on request at hello@plumm-app.com.

Your cycle data is health data within the meaning of Article 9 of the GDPR (special category of data). Its processing is based on your explicit consent (Article 9.2.a of the GDPR): by voluntarily entering this information in the app, you expressly consent to its processing for tracking your cycle. You can withdraw this consent at any time by deleting your data or uninstalling the app.

If you are under 15, this processing also requires the consent of the holder(s) of parental authority (Article 45 of the French Data Protection Act).

Messaging is processed on the basis of your consent (you choose to write to us) and our legitimate interest in providing support. Error detection is based on our legitimate interest in ensuring the app works properly.

We keep third parties to a strict minimum. No ads, no analytics trackers (Google Analytics, Facebook Pixel…), no data resale, no commercial profiling.

• •Sentry (Functional Software, Inc., EU hosting) — technical error detection. Receives only pseudonymized error traces, never cycle data.
• •Supabase (Supabase, Inc., United States) — hosts the “Let's talk” messaging, the idea board, the transfer relay (which only holds unreadable ciphertext), and the cloud backup if you enable it. Receives: message content, ideas/votes/comments (public), your display first name, your anonymous device identifier, and — for cloud backup only — an encrypted copy of your cycle data plus your account email.
• •Expo (650 Industries, Inc., United States) — push notification delivery service (messaging replies, reminders). Receives only an anonymous notification token.

These processors act on our instructions and are bound by contractual commitments compliant with the GDPR.

As Supabase and Expo are based in the United States, messaging, idea board and cloud backup data is transferred there. These transfers are governed by appropriate safeguards: the European Commission's Standard Contractual Clauses and, where applicable, the EU—US Data Privacy Framework. You can request a copy of these safeguards at hello@plumm-app.com.

• •Cycle data: kept on your device as long as you use the app. It is permanently deleted as soon as you reset or uninstall the app.
• •Messages: kept for as long as needed to handle your request, then archived for a maximum of 3 years from the last exchange.
• •Device identifier and notification token: kept while your conversation is active, and deleted at the latest when the message thread is archived (3 years maximum).
• •Error logs: kept for a maximum of 90 days, then automatically deleted.
• •Cloud backup (if enabled): kept as long as your account exists, overwritten on each new backup, and deleted immediately when you delete it from the app.

Under the GDPR, you have the following rights: • Access: export all your data via Profile > Privacy > Export my data (JSON format) • Rectification: edit or correct your data directly in the app • Erasure: Profile > Reset app deletes all your local data in 1 tap (irreversible action). The cloud backup is deleted directly in the app (Profile > Cloud backup > Delete my backup). To erase the other data stored on our servers (messaging, ideas, votes and comments, device identifier, notification token), write to us at hello@plumm-app.com: we delete it within 30 days. • Portability: the JSON export is readable and reusable • Objection and withdrawal of consent: you can stop using the app or messaging at any time

To exercise these rights or for any question, write to us at hello@plumm-app.com. You also have the right to lodge a complaint with the CNIL (the French data protection authority — www.cnil.fr).

We may update this policy to reflect legal or technical developments. Any substantial change will be notified within the app. The last update date is shown at the top of this document.