plum · privacy

Privacy Policy

Last updated June 4, 2026

Because plum holds information about your reproductive health, we treat it with particular care — and we never use it for advertising or sell it.

This Privacy Policy describes how Sentient Systems [legal entity to confirm] (“plum,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information about you. It applies when you access or use the plum mobile application, our website, and any other products or services that link to this Privacy Policy (the “Services”), or when you otherwise interact with us, such as through customer support.

plum helps you understand your menstrual cycle and eat in a way that supports each phase. Our separate Consumer Health Data Privacy Policy explains how we handle health data and is incorporated into this Privacy Policy by reference.

This Privacy Policy is effective as of the “Last updated” date above. If we make changes, we will revise that date, and for material changes we will provide additional notice (such as an in-app notice or a notification).

Information we collect

Information you provide to us

Account information. Your name and email address when you create an account. Sign-in credentials (such as your password) are handled by our authentication provider and stored separately from your health data.
Profile information. An optional profile photo and your date of birth (optional; used to confirm you meet our minimum age and to tailor age-aware guidance).
Cycle and reproductive health data. Your period dates, typical cycle and period length, predicted phases and ovulation windows, and any symptoms or notes you choose to log.
Dietary information. Allergies, dietary preferences (for example, vegetarian or vegan), and ingredients you choose to avoid, used to filter recipes so we never surface food you can’t or won’t eat.
Saved content. Recipes and other content you save or interact with in the app.
Communications. Information you provide when you contact support, respond to a survey, or otherwise communicate with us.

Information we collect automatically

Device and usage information. Device type and model, operating system version, app version, language and time zone, and how you interact with the app.
Diagnostics. Crash reports and performance data that help us find and fix problems.
Identifiers. App-instance or device identifiers used to operate, secure, and improve the Services.

Where required by law or platform rules, we will request your permission before collecting certain information (for example, app tracking or analytics identifiers).

Information we collect from other sources

Third-party sign-in. If you create or log in to plum through a third party (such as Apple or Google), we receive certain information from that provider under its authorization process.
Health platforms. If you choose to connect a platform such as Apple Health or Google Health Connect, we may import information you direct us to import (such as menstruation, temperature, or activity data), only with your explicit permission and only for the purposes you authorize.

How we use information

Provide and personalize the Services — tracking your cycle, predicting phases and ovulation, recommending phase-appropriate recipes, and applying your dietary filters.
Sync your data across your devices when you sign in.
Communicate with you — responding to support, sending transactional or service messages, and (where permitted) product updates you can opt out of.
Improve and develop the Services — analyzing usage trends, fixing bugs, and building new features.
Maintain safety, security, and integrity — detecting and preventing fraud, abuse, and security incidents.
Comply with legal obligations and enforce our terms.

We do not use your health data for advertising or marketing, we do not use it for unrelated data-mining, and we do not sell your personal information.

Your choices and rights

Depending on where you live, you may have some or all of the following rights:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your information, including by deleting your account in the app.
Export / portability of your information.
Withdraw consent for processing that relies on consent, at any time.
Opt out of marketing communications.

You can manage much of your information directly in the app (editing your profile, cycle settings, and dietary preferences, and deleting your account). To exercise any right, contact us at privacy@tryplum.app. We will not discriminate against you for exercising your rights. If we deny a request, you may appeal by contacting privacy@tryplum.app.

Data retention and deletion

We retain personal information for as long as necessary to provide the Services and for the other purposes described in this Privacy Policy, then delete or de-identify it. When you delete your account, we delete or de-identify your personal information within a commercially reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies in routine backups are deleted on our standard backup cycle.

Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and least-privilege restrictions for personnel. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children’s privacy

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at privacy@tryplum.app and we will take appropriate steps to delete it.

International data transfers

We may store and process information in the United States and other countries that may have different data-protection laws than your own. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to countries not deemed to provide an adequate level of protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You may request a copy by contacting us.

Region-specific disclosures

European Economic Area, United Kingdom, and Switzerland (GDPR)

We process your personal information on these legal bases: performance of a contract (to provide the Services you request), legitimate interests (to operate, secure, and improve the Services), legal obligation, and consent (including explicit consent for health data, which is special-category data). Where we rely on consent, you may withdraw it at any time. You also have the right to lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

California residents have the rights to know, access, correct, and delete personal information, to opt out of the “sale” or “sharing” of personal information, and to limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising. We treat your reproductive health information as sensitive personal information and use it only to provide the Services you request.

Washington and Nevada (consumer health data)

Residents of Washington (under the My Health My Data Act) and Nevada (under SB370) have specific rights regarding consumer health data. Those rights and our practices are described in our Consumer Health Data Privacy Policy below.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice and, where required, obtain your consent.

Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@tryplum.app
Mailing address: [company mailing address to confirm]

Standalone notice

Consumer Health Data Privacy Policy

Last updated June 4, 2026

This Consumer Health Data Privacy Policy supplements the plum Privacy Policy and provides additional information about how we collect, use, and disclose consumer health data as required by laws including Washington’s My Health My Data Act and Nevada’s SB370. It contains only the information those laws require.

How we store health data

We store your account contact information (such as the email used to sign in) separately from your health data. Your health data is associated with a system-generated account identifier rather than directly with your contact details, which limits the ability to link your health data to your identity.

Categories of consumer health data we collect, and the purposes

Reproductive health information — period start and end dates, cycle and period length, predicted phases and ovulation windows, and any symptoms or notes you log. Purpose: to track your cycle, predict phases, and personalize phase-based nutrition guidance.
Inferences — predicted phase, predicted ovulation, and predicted next period derived from the data above. Purpose: to provide forecasts and recommendations.
Health data from connected platforms (only if you connect them) — such as menstruation, temperature, or activity data. Purpose: to improve the accuracy of your cycle predictions.
Diet- and allergy-related information — allergies and dietary restrictions you provide. Purpose: to filter out recipes you cannot or do not want to eat.

Categories of sources

We collect consumer health data directly from you (through your use of the Services) and, only at your direction, from third-party health platforms you choose to connect (such as Apple Health or Google Health Connect).

Categories of consumer health data we share

We share consumer health data only with the categories of recipients listed below, and only as needed to provide the Services or as you direct. We do not sell consumer health data, and we do not share it for advertising.

Categories of third parties and specific affiliates

Processors / service providers acting on our behalf under contract: cloud hosting and storage, authentication, analytics, crash-reporting, and customer-support providers. [specific processors to list once engaged]
Health platforms you connect, at your direction (for example, Apple Health or Google Health Connect).
Parties to a corporate transaction, such as a successor entity in a merger, acquisition, financing, or sale of assets.
Specific affiliates: plum currently has no affiliates. We will update this notice and obtain any required consent before sharing consumer health data with an affiliate.

Consent

Except where collection is necessary to provide a product or service you have requested, we collect consumer health data only with your affirmative, opt-in consent for a specified purpose. We obtain a separate affirmative consent before sharing consumer health data with a third party for any purpose that is not strictly necessary to provide the Services. We do not bundle these consents into a single terms-of-service acceptance, and you may withdraw consent at any time.

Your rights

Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data, including a list of the third parties with whom we have shared it.
Withdraw consent to our collection and sharing of your consumer health data.
Delete your consumer health data. When you request deletion, we will delete it and notify our affiliates, processors, and other third parties to whom we have shared it.

We will respond to a verified request within 45 days (extendable once by an additional 45 days when reasonably necessary). Deletion from archived or backup systems may be delayed by up to six months. If we deny your request, you may appeal by emailing privacy@tryplum.app; if your appeal is unsuccessful, you may contact your state Attorney General.

How to exercise your rights

In the app: edit or delete your cycle and health data, or delete your account, in Settings.
By email: contact us at privacy@tryplum.app.

Washington residents may contact the Washington State Attorney General, and Nevada residents may contact the Nevada Attorney General, with concerns about our handling of consumer health data.