Privacy Policy
Plum Choice is a private app for sharing movies, shows, books, trips, dinner bills and your safety with people you actually know. This policy explains what information the app collects, why, and what happens to it. The short version: what you share is visible only to the people you share it with, we don't sell your data, and we don't use it for advertising.
What we collect
- Account details. Your name and email address. If you sign up with an email and password, the password is stored in hashed form by our sign-in provider and we never see it; your email is verified with a one-time code. If you use Sign in with Apple, Apple gives us your name and an email address, which can be a private relay address.
- Things you post. Recommendations, ratings, comments, reading progress, trip details (dates, flights, itineraries, votes) and bills you add. Everything you post is visible to the members of the group you post it in, and nowhere else.
- Photos and videos you choose to share. Trip memories, and photos you add to a restaurant or a recipe, are visible only where you share them and kept until you delete them. A receipt photo is read to fill in the items on a bill and is deleted as soon as it has been read.
- Your location, in Plum Safety. While you have asked your safety circle to watch over you, or have sent an SOS, the app shares your precise location and your phone's battery level with the people in your safety circle who have agreed to be in it. Our service also uses it to notice if you have stopped moving, so it can ask if you're OK. It stops the moment you say you are safe or stop sharing, and the route and locations are then deleted. We keep only the times it started and ended.
- Your location, in Plum Go. When you ask for directions from where you are, your starting point is sent to Google to find routes, and we do not store it. While a trip is under way, the app uses your location on your phone to keep your steps and arrival time current. If you choose to share your trip with a Plum Travel group, they see your arrival time and, while you're on the way, where you are. Sharing stops when you arrive or end the trip.
- The Plum Go widget. The widget's map shows roughly where you last used the app. That spot is kept only on your phone and is never sent to us.
- Your location, in Plum Dining, only when you ask. When you tap Use current location, the app sends your approximate location, to within about a mile, with that restaurant search so the results are near you. Google receives it to find the restaurants. We do not store it.
- Your phone number, if you add it in Plum Safety. Shown only to your safety circle, and only while they are watching over you or during an SOS, so they can call you.
- Payment usernames, if you add them. Your Venmo, PayPal or Cash App username, or the phone number or email you use for Apple Cash, shown to people who owe you on a bill, including guests on a bill's guest page, so they can pay you. No money moves through Plum Choice.
- Guests on a bill. Someone at your table without an account can open a bill from its link or QR code. We store their first name, typed by them or by whoever added the bill, and the items they tap. Their browser keeps a random key so that only their phone can change their items. We do not ask guests for an email, a phone number or an account.
- Recipes, goals and what you had, in Plum Table. Your recipes and their photos are yours unless you share one with a group, and then that group's members can see, rate, comment on and save a copy of it. Your daily goals and the servings you mark are private to you. We work out nutrition on our own service from the ingredients you enter; they are not sent to anyone else.
- Fridge and pantry scans. A photo you scan is read by an AI service to list the foods in it, then deleted. Only the list is kept, with your account, and it is not used to train AI models.
- Falls, if you turn on Apple Watch fall alerts. When your Apple Watch detects a hard fall, Plum Safety receives when it happened and how you answered, and if you did not answer, your location, which is shared with your safety circle as an SOS. We keep the time of the fall and how you answered.
- Which parts of the app you use. We note which plums you open, and on which days. We use it to count how many people use each plum, and share only those totals with sponsors, never who you are.
- Optional ZIP code. Only if you enter one to see nearby events. You can remove it at any time.
- Push token. A device identifier that lets us send you notifications. Removed automatically if your device stops accepting them.
- Crash reports. If the app crashes, technical diagnostics (device model, OS version, what the code was doing) are collected so we can fix it. Crash reports are not used to identify you.
We do not collect your contacts or your browsing activity. We use your location only for Plum Safety, Plum Go and finding restaurants near you in Plum Dining, and only as described above. There is no advertising tracking in the app, and nothing follows you to other apps or websites.
Plum Safety and emergencies
Plum Safety alerts the people in your safety circle. It does not contact emergency services. In an emergency, call your local emergency number: 911 in the US and Canada, 999 in the UK, 112 in Ireland, 000 in Australia and 111 in New Zealand. Every Plum Safety alert screen has a button that dials the right one for where your phone is.
When Plum Safety prepares a text to your circle, it opens Messages on your own phone. You choose whether to send it, it goes from your phone number, and your carrier's usual charges apply. Phone numbers you add for your circle stay on your phone.
How we use it
- To run the app: showing your picks and posts to your groups, computing your personal recommendations, sending the notifications and optional weekly email digest you'd expect.
- To keep the community safe: reviewing content that users report and enforcing our Terms of Service.
- To fix problems, using crash reports and server logs.
Who else is involved
We use a small set of service providers to operate Plum Choice. They process data only to provide their service to us:
- Amazon Web Services. Hosting, storage, sign-in and email delivery. Amazon's receipt reader (Textract) reads a receipt photo to find its items.
- Apple. Sign in with Apple, if you use it; Apple Maps, which draws the maps and gives turn-by-turn directions; Apple's push service, which delivers updates to your Lock Screen cards; and Siri, which handles the phrases you speak to it, such as "Plum walk", under Apple's privacy policy.
- Google. Finding routes, places and weather forecasts for Plum Go, Plum Dining and Plum Travel. Google receives the places and starting points needed for each request.
- Transit agencies. Live train times come from public feeds, such as New York's MTA. We send them nothing about you.
- Expo. Delivering push notifications to your device.
- Sentry. Receiving crash reports.
- Anthropic. Certain features (like describing a show you half-remember, or pasting a flight confirmation to fill in your travel details) send the text you provide to an AI model to answer your request. Only the text needed for the feature is sent, never your account details, and it is not used to train AI models.
- TMDB, Apple Books and Open Library. When you search for a title or a book, your search terms go to these services to fetch results.
- Venmo, PayPal, Cash App and Apple Cash. When you tap a pay button, you leave Plum Choice for their app, website or Messages. Plum Choice never handles the payment.
Sponsor messages may appear in the app. A sponsor may appear in one plum and not in others, but everyone who opens that plum sees the same message: we never choose what you see based on who you are. We tell a sponsor how many people use the plum their message appears in, as a total. No personal data is shared with sponsors.
We do not sell personal information, and we do not share it with anyone for advertising or marketing purposes.
Who can see what you post
Plum Choice is built on private groups. Your recommendations, comments, trip plans, and other posts are visible to the members of the group you posted them in. There is no public feed. You can block another member at any time (their content disappears for you), and you can report content that breaks the rules using the ⚑ flag.
Deleting your data
You can delete your account any time from Profile, then Delete account. This removes your profile, lists, recommendations and comments everywhere, your safety circle and your place in other people's circles, and any location still being shared. Groups you created are closed for everyone in them. You can leave someone's safety circle, or remove someone from yours, at any time. Backup copies age out of our systems on a rolling basis. You can also email us (address below) to ask what data we hold about you or to request deletion.
Children
Plum Choice is for adults 18 and over, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, contact us and we will remove it.
Security
Data travels over encrypted connections (HTTPS) and is stored with Amazon Web Services. Passwords are hashed by AWS Cognito and are never visible to us. No system is perfectly secure, but we keep the surface small: we collect little, and we share less.
Changes to this policy
If this policy changes in a meaningful way, we'll note it in the app's What's New and update the date at the top of this page.
Contact
Mailquotes.com LLC
Email: kevin@dmsorlando.com