Privacy Policy

1. Information We Collect

a. Account information (only if you create an account)

Browsing the Service does not require an account. If you choose to sign in, we collect:

• Email + password sign-up: your name, email address, and password (stored only in a securely hashed form — we never store it in plain text).
• Google Sign-In: your name, email address, and a Google-provided user identifier.
• Sign in with Apple: your name, email address, and an Apple-provided user identifier. Apple may provide a private relay email address instead of your real email; we cannot see your real email in that case.

For signed-in users, we also store your saved prompts and likes, associated with your account. The app may additionally cache your liked state locally on your device.

b. Usage data

We collect aggregate engagement counters such as the number of views, likes, and copies for each prompt. These counters are global/aggregate and are not tied to identifiable users.

c. Device and technical data

When you use the Service, we (and our hosting/infrastructure providers) may automatically receive standard technical information such as IP address, browser or device type, operating system, and request logs. This is used for security, troubleshooting, and to operate the Service.

d. Communications

If you contact us (for example, by email for support), we collect the information you provide, such as your name, email address, and the contents of your message.

e. Cookies and analytics (website only)

Our website uses Google Analytics 4 (GA4), a service provided by Google, to understand how visitors use the site. GA4 sets cookies and collects information such as pages viewed, interactions (for example, copying or liking a prompt), approximate location derived from your IP address, and device/browser characteristics. Google processes this information on our behalf — see Google's Privacy Policy and how Google uses information from sites that use its services. You can opt out using the Google Analytics Opt-out Browser Add-on or your browser's cookie controls. The website may also set a cookie to keep you signed in.

What our mobile app does NOT collect

In contrast to the website, our mobile app contains no third-party analytics or advertising SDKs — it uses no Google Analytics, no ad tracking, no advertising identifier (IDFA), and no App Tracking Transparency, and it sets no cookies. The app requests no access to your camera, photos, location, microphone, or contacts.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including creating and managing accounts and storing your saved prompts and likes;
• Authenticate you and keep your account secure;
• Respond to your inquiries and provide customer support;
• Operate, troubleshoot, secure, and improve the Service.

We do not use your information for advertising, and we do not sell your information.

3. Legal Bases for Processing (GDPR)

This section applies to users in the European Economic Area (EEA) and the United Kingdom and may not apply in all jurisdictions.

• Contract — to provide the Service you request, such as account features (saving and liking prompts).
• Legitimate interests — to secure, maintain, and improve the Service, and to respond to your inquiries.
• Consent — where required, for example where you voluntarily provide information by contacting us. You may withdraw consent at any time.
• Legal obligation — where we must process data to comply with applicable law.

4. Third Parties and Service Providers

We share information only with service providers that help us operate the Service, and only as needed for them to perform their functions:

• Authentication providers: Google (Google Sign-In) and Apple (Sign in with Apple) process sign-in information when you choose those methods. Their handling of your data is governed by their own privacy policies.
• Analytics (website only): Google Analytics 4 (Google) processes website usage data via cookies, as described above. This does not apply to the mobile app.
• Hosting and infrastructure: our API is hosted at api.promptplum.com. Images are stored on Amazon Web Services (AWS) S3 and delivered through the Cloudflare image content delivery network (CDN). These providers may process technical data such as IP addresses and request logs to deliver content.

We may also disclose information if required to do so by law, or to protect the rights, safety, or property of PromptPlum, our users, or others.

5. We Do Not Sell Your Data

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Data Retention

We retain account information and associated data (such as your saved prompts and likes) for as long as your account remains active. When you delete your account (see below), we permanently remove your account and its associated data. We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements, and we may retain aggregate, non-identifying data (such as global engagement counters) indefinitely.

7. How to Access, Correct, and Delete Your Data

• Access and correction: You can review and update certain account information directly in the app or website. For other requests, contact us at the email below.
• Delete your account and data (in-app): You can permanently delete your account and its associated data at any time in the app via Settings → Delete account. This permanently removes your account and the data tied to it (including saved prompts and likes).
• Delete by request: You may also request deletion by contacting us, and we will delete your account and associated data.

8. Security

We take reasonable technical and organizational measures to protect your information, including hashing passwords and using encrypted connections (HTTPS) for data in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13 (or under 16 where a higher age applies under local law), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International Users and Your Rights

The Service may be operated from, and your information processed in, India. By using the Service, you understand that your information may be transferred to and processed in locations that may have different data-protection laws than your own.

• EEA / UK (GDPR): You may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority.
• California (CCPA/CPRA): You may have the right to know what personal information we collect, to request deletion, and not to be discriminated against for exercising these rights. We do not sell your personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes will be communicated through the Service where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at promptplum@gmail.com.