Privacy Policy

1. Information We Collect

a. Account information (only if you create an account)

Browsing the Service does not require an account. If you choose to sign in, we collect:

• Email + password sign-up: your name, email address, and password (stored only in a securely hashed form — we never store it in plain text).
• Google Sign-In: your name, email address, and a Google-provided user identifier.
• Sign in with Apple: your name, email address, and an Apple-provided user identifier. Apple may provide a private relay email address instead of your real email; we cannot see your real email in that case.

For signed-in users, we also store your saved prompts and likes, associated with your account. The app may additionally cache your liked state locally on your device.

b. Usage data

We collect aggregate engagement counters such as the number of views, likes, and copies for each prompt. These counters are global/aggregate and are not tied to identifiable users.

c. Device and technical data

When you use the Service, we (and our hosting/infrastructure providers) may automatically receive standard technical information such as IP address, browser or device type, operating system, and request logs. This is used for security, troubleshooting, and to operate the Service.

d. Communications

If you contact us (for example, by email for support), we collect the information you provide, such as your name, email address, and the contents of your message.

e. Cookies, analytics, and advertising (website only)

Our website uses Google Analytics 4 (GA4), a service provided by Google, to understand how visitors use the site. GA4 sets cookies and collects information such as pages viewed, interactions (for example, copying or liking a prompt), approximate location derived from your IP address, and device/browser characteristics. Google processes this information on our behalf — see Google's Privacy Policy and how Google uses information from sites that use its services. You can opt out using the Google Analytics Opt-out Browser Add-on or your browser's cookie controls. The website may also set a cookie to keep you signed in.

Our website also displays ads served through Google Ad Manager and Google's advertising network (including Ad Exchange). To deliver and measure ads, Google and its advertising partners set and read cookies and similar identifiers on your device — used for ad delivery, frequency capping (limiting how often you see the same ad), and measurement. Depending on your location and settings, the ads you see may be personalized based on this information. You can control or opt out of personalized advertising through Google Ad Settings, the industry tools at aboutads.info and youronlinechoices.eu, or through your browser's cookie controls. Our mobile app shows no ads and sets no advertising cookies.

f. Purchase information (only if you buy Premium)

If you purchase PromptPlum Premium on our website, your payment is handled by third-party payment processors — we never receive or store your card, UPI, or bank details. We receive and store only what we need to activate your purchase: an order/transaction identifier, the product purchased, the amount, and the payment status, associated with your account.

What our mobile app does NOT collect

In contrast to the website, our mobile app contains no third-party analytics or advertising SDKs — it uses no Google Analytics, no ad tracking, no advertising identifier (IDFA), and no App Tracking Transparency, and it sets no cookies. The app requests no access to your camera, photos, location, microphone, or contacts.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including creating and managing accounts and storing your saved prompts and likes;
• Authenticate you and keep your account secure;
• Process your purchases and activate PromptPlum Premium on your account;
• Respond to your inquiries and provide customer support;
• Operate, troubleshoot, secure, and improve the Service;
• Display and measure ads on our website through Google Ad Manager, including limiting how often you see the same ad (the mobile app shows no ads).

We do not sell your personal information for money. Showing ads on our website does involve third-party advertising cookies — see Section 5 and the opt-out options above.

3. Legal Bases for Processing (GDPR)

This section applies to users in the European Economic Area (EEA) and the United Kingdom and may not apply in all jurisdictions.

• Contract — to provide the Service you request, such as account features (saving and liking prompts).
• Legitimate interests — to secure, maintain, and improve the Service, and to respond to your inquiries.
• Consent — where required, for example where you voluntarily provide information by contacting us. You may withdraw consent at any time.
• Legal obligation — where we must process data to comply with applicable law.

4. Third Parties and Service Providers

We share information only with service providers that help us operate the Service, and only as needed for them to perform their functions:

• Authentication providers: Google (Google Sign-In) and Apple (Sign in with Apple) process sign-in information when you choose those methods. Their handling of your data is governed by their own privacy policies.
• Analytics (website only): Google Analytics 4 (Google) processes website usage data via cookies, as described above. This does not apply to the mobile app.
• Advertising (website only): We use Google Ad Managerand Google's advertising network (including Ad Exchange) to display ads on our website. Google and its advertising partners process information such as cookie identifiers, IP address, and ad interactions to deliver, cap, measure, and (where applicable) personalize ads. This does not apply to the mobile app. See how Google uses information from sites that use its services.
• Payment processors: when you buy PromptPlum Premium, your payment is processed by Cashfree Payments (purchases in India) or Dodo Payments (international purchases). They collect and process your payment details under their own privacy policies; we receive only transaction identifiers and payment status — never your card, UPI, or bank details.
• Hosting and infrastructure: our API is hosted at api.promptplum.com. Images are stored on Amazon Web Services (AWS) S3 and delivered through the Cloudflare image content delivery network (CDN). These providers may process technical data such as IP addresses and request logs to deliver content.

We may also disclose information if required to do so by law, or to protect the rights, safety, or property of PromptPlum, our users, or others.

5. Selling and Sharing of Personal Information

We do not sell your personal information for money. However, our website shows ads through Google Ad Manager and Google's advertising partners, who use cookies and similar identifiers to deliver, cap, measure, and personalize ads. Under some privacy laws (such as the California CPRA), using third-party advertising cookies to show personalized ads may be considered "sharing" your information for cross-context behavioral advertising or a "sale." You can opt out of personalized advertising at any time through Google Ad Settings, the tools at aboutads.info, or your browser's cookie controls. Our mobile app does not show ads and does not share information for advertising.

6. Data Retention

We retain account information and associated data (such as your saved prompts and likes) for as long as your account remains active. When you delete your account (see below), we permanently remove your account and its associated data. We may retain limited information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements, and we may retain aggregate, non-identifying data (such as global engagement counters) indefinitely.

7. How to Access, Correct, and Delete Your Data

• Access and correction: You can review and update certain account information directly in the app or website. For other requests, contact us at the email below.
• Delete your account and data (in-app): You can permanently delete your account and its associated data at any time in the app via Settings → Delete account. This permanently removes your account and the data tied to it (including saved prompts and likes).
• Delete by request: You may also request deletion by contacting us, and we will delete your account and associated data.

8. Security

We take reasonable technical and organizational measures to protect your information, including hashing passwords and using encrypted connections (HTTPS) for data in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 13 (or under 16 where a higher age applies under local law), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International Users and Your Rights

The Service may be operated from, and your information processed in, India. By using the Service, you understand that your information may be transferred to and processed in locations that may have different data-protection laws than your own.

• EEA / UK (GDPR): You may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority.
• California (CCPA/CPRA):You may have the right to know what personal information we collect, to request deletion, to opt out of the "sale" or "sharing" of your information, and not to be discriminated against for exercising these rights. We do not sell your information for money; to opt out of personalized advertising, use the controls described in Section 5.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes will be communicated through the Service where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at [email protected].