Plectara Privacy Policy

Who We Are

Plectara is a personal health diary and pattern tool. It is not a medical device and does not diagnose or treat conditions. Insights and optional AI are informational only. We do not claim ISO 27001, SOC 2, or HIPAA certification.

Information We Store

Depending on what you use, Plectara may store:

• Diary entries you log — meals, beverages (water, caffeine, or alcohol, if you track them), symptoms, sleep, activity, vitals, weight, medications and supplements, bowel movements, period days (if you track your cycle), Daily Check-In ratings, notes, and similar logs we add
• Optional photos you attach to saved meals
• Preferences, onboarding choices, demographics you provide, tracked conditions, and learned or pinned habits
• Medication schedules, reminders you enable, streaks, and badges
• Medication start dates and other changes you choose to compare symptoms around (such as a diet change, with its name and start date)
• Plans you start from Insights, with their steps, the days you check steps off, and the end-of-plan comparison
• Account identifiers from sign-in (see Account and Sign-In)

The on-device health database is encrypted at rest. Optional photos you attach to saved meals are encrypted at rest in the app sandbox. Those encryption keys are stored in the platform secure store (iOS Keychain / Android Keystore). Sensitive health-adjacent preferences also use that store. The encrypted diary and saved-meal photos are excluded from iCloud Backup on iOS and from Android Auto Backup and device-to-device transfer. Minimized Home Screen widget snapshots, including a small decoded meal thumbnail when a saved meal is pinned, are not inside the encrypted database and can still be included in device backup.

Account and Sign-In

Using Plectara requires an account. We use a sign-in provider (Auth0) with Apple, Google, or email as available. We receive a user identifier and, when the provider supplies them, an email address and name (including Apple Hide My Email). We use this to create and recognize your Plectara account — not for advertising.

We may add other sign-in methods later (including enterprise single sign-on). They attach to the same account model and this policy.

Device unlock such as Face ID or the device passcode, if offered, stays on the device. Biometric templates are not sent to Plectara or the sign-in provider. They only unlock credentials already on the phone. Signing in does not sync your diary in this version.

Online Backup and Cloud SQL (Not in This Version)

This version does not sync your diary to Plectara servers. Online backup is optional and is not required to use the app. A future cloud backup, after a separate, explicit, revocable consent, may store diary records in production Google Cloud SQL so you can restore or use another device. Meal photos stay on the device unless we later add photo backup and update this policy. Until you consent to that backup, diary data stays on this device.

Home Screen Widgets

Quick Log widgets keep a small, privacy-aware snapshot on the device so you can capture without opening the app. Widget content is limited. Medication names are off by default. Widget snapshots are not a cloud backup.

Notifications

Reminders (for example medications or sleep) are optional and controlled in the app. Lock-screen and banner text should not expose sensitive diary detail. We may send account or sync status messages. Product email, if we add it, is for account and product notices — not health advertising.

Insights and AI

Pattern Insights are computed on this device from your diary. Insights are not diagnoses. Optional cloud AI is off until you allow it on a dedicated in-app permission screen. The medical disclaimer does not grant this permission.

When you tap Allow AI Insights, Plectara may send structured on-device findings — codes, labels, metrics, a care-urgency label, and the local summary — to Plectara’s cloud service (Google Cloud). Before anything leaves your device, names you gave meals, activities, symptoms, medications, doses, and conditions are replaced with generic placeholders such as “Food 1” or “Symptom 2”; the app swaps the real names back in on your device when it shows the reply. That service then sends the same findings to OpenAI, a third-party AI provider, so OpenAI can write a plain-language explanation at most once per day when you open the app. If you ask for a plan, the same findings and which finding you picked are sent so OpenAI can draft a short, optional lifestyle experiment; Plectara's cloud service checks the draft for safety before the app shows it, and the plan itself is stored only on this device. When sharing is off, or the finding you pick is one that never leaves this device, Plectara builds a rule-based plan on this device and sends nothing. The end-of-plan comparison of your logs is worked out on this device and never sent. AI chat about recent findings uses the same findings-only context and also sends the question you type and recent chat turns, with names Plectara recognizes replaced the same way. Words you type that Plectara does not recognize as one of your logged names are sent as written. We do not send your full diary, notes, photos, password, any cycle tracking data, or your Energy, Mood, and Stress ratings. Findings about alcohol stay on this device unless you also turn on Include Alcohol in AI Insights, which is off by default. Before-and-after comparisons around other changes you add (such as a diet change) stay on this device and are never sent, including the names you give those changes. Comparisons around a medication start date may be sent with the medication name replaced by a placeholder.

Those explanations and plans are labeled AI-assisted. On-device Insights and rule-based plans still work if you tap Not Now. If you chose Not Now, Insights may offer once or twice more to turn AI Insights on; you can also change explanations, plans, and chat later in Preferences → AI Insights. Delete Account removes on-device AI artifacts and clears the stored permission. OpenAI processes this data as our subprocessor under its API terms. We do not use it for advertising or sell it. Under OpenAI’s current API data-usage policy, API inputs are not used to train OpenAI models. OpenAI’s privacy policy is at openai.com/policies/privacy-policy.

Cycle Tracking

Cycle tracking is optional and offered only when your profile's sex assigned at birth is female. If you turn it on, Plectara stores period days, the flow level you choose, and whether you use hormonal birth control or have reached menopause, on this device only. Cycle findings and next-period estimates are worked out on this device and are never sent to Plectara's cloud service or OpenAI, even when AI explanations, plans, or chat are on. Next-period estimates appear only inside the app, never as notifications. The Home Screen widget tile for cycle tracking shows a neutral label you can rename (default “Daily Log”) and never shows period or flow wording. If you change your profile so cycle tracking no longer applies, the tracker is hidden and your logged period days stay until you delete them.

Beverages

Beverage tracking is optional. If you turn it on, you choose whether to track water, caffeine, or alcohol. Plectara stores each serving's amount and time (or, for amounts you add to a day's total, just the day) in your encrypted diary on this device, and includes them when you export your data. Water is stored as volume, caffeine as milligrams of caffeine, and alcohol as a count of drinks. Meals you tag Caffeine or Alcohol also count as one serving. Patterns Plectara finds, such as caffeine late in the day before poor sleep, are observations, not diagnoses. Water and caffeine findings follow the same AI sharing choice as other findings. Alcohol findings are worked out on this device and are never sent to Plectara's cloud service or OpenAI unless you turn on Include Alcohol in AI Insights (Preferences → AI Insights), which is off by default. The Home Screen widget and watch apps never show alcohol. If you add water or caffeine to Quick Capture (during setup or in Preferences → Quick Capture), the widget and watch apps show only the beverage name, and a tap logs your default serving.

Saved Bowel Movements

You can save a bowel movement you log often (its label, stool type, color, odor, and volume) for one-tap Quick Log. Saved bowel movements are stored in the encrypted database on this device, included when you export your data, and removed by Delete Account. If you pin one, or Plectara learns it as a Habit, the Home Screen widget and watch apps show only the neutral label “Saved Log” — never your label or any bowel wording — and a tap sends only an internal id back to your phone.

Energy, Mood, and Stress

If you choose More Energy, Better Mood, or Less Stress as a goal, the Daily Check-In offers optional 0–10 ratings for Energy, Mood, and Stress. You can skip any of them. These ratings are stored in your encrypted diary on this device and included when you export your data. The patterns Plectara finds in them, and the names of these goals, are worked out on this device and are never sent to Plectara's cloud service or OpenAI, even when AI explanations, plans, or chat are on. Plectara does not diagnose mood or mental health conditions. If your ratings stay very low for Mood or very high for Stress, Insights may suggest reaching out to someone you trust or a clinician; that suggestion is shown only on this device.

Apple Health and Health Connect

If you choose to connect Apple Health (iOS) or Health Connect (Android), Plectara reads — and does not write — the following data from that store, only from the date you started using Plectara, and only while the matching log is turned on:

• Sleep sessions, while sleep tracking is on
• Workouts and activities (including distance when available), while activity tracking is on
• Body weight, while weight tracking is on
• Resting heart rate and blood pressure, while vitals tracking is on
• Menstrual flow, only while cycle tracking is on

Turning a log off stops new imports of that data. Logs already saved stay until you delete them. Turning the log back on includes it again from the date you started using Plectara. We do not delete imported logs when you disconnect Apple Health or Health Connect.

We do not import continuous heart-rate streams, meals, medications, bowel logs, clinical records, or other Health categories.

Imported rows become Plectara diary entries. They count toward logging, streaks, and insights the same as entries you type in. They are labeled so you can see they came from Apple Health or Health Connect. Connecting is optional and skippable. Imported rows stay on this device in this version.

Consent

Health import, live cloud AI, and AI chat are each optional. Account sign-in is required to use Plectara; diary sync is not part of this version. You can skip Health during onboarding and change Health and AI later in Preferences. Cloud AI asks Allow or Don’t Allow on a dedicated screen that names OpenAI before any findings are sent. Disconnecting Health stops new imports. Copies already in Plectara stay until you delete those entries or close your account. After disconnect we will not query Apple Health or Health Connect again. You can also revoke Plectara in the Health or Health Connect apps on your device.

Analytics, Diagnostics, and This Website

Analytics and diagnostic logs, if enabled, may send operational event names and coded parameters to Firebase Analytics. They must not include diary contents, medication names, notes, photos, or similar health free text. Firebase also records screen views and sessions, a random ID for each app install, and an approximate region worked out from your IP address; Plectara does not ask for your location. Plectara turns off Firebase's collection of your device's advertising ID. We do not sell health data. We do not use Apple Health, Health Connect, or diary data for advertising.

If you email support from this website, we receive the address and message you send so we can reply. Do not send sensitive health information.

Service Providers

We use processors only to run Plectara: Auth0 for sign-in; Google Cloud to host the API; OpenAI for optional AI explanations, plans, and chat after you allow it; Apple and Google for Health platforms and Sign In; and Firebase for optional analytics, distribution, or abuse checks that do not include diary contents. They are not given your data to market their own products to you.

Retention

• Diary data, meal photos, profile, and settings stay on your device until you delete them, delete your account, or uninstall the app. This version does not keep a synced diary copy.
• Your sign-in account (Auth0), the daily AI usage counters, and a record of your AI sharing choices (on or off, and which consent version) on our cloud service are kept until you delete your account. The cloud service refuses AI requests unless that record shows you allowed sharing.
• Our cloud service keeps request logs (route, outcome, timing), which do not contain diary content, findings text, or chat messages, for about 30 days.
• If you allow AI explanations, plans, or chat, OpenAI may keep the findings and messages it receives for up to 30 days for abuse monitoring under its API data policy, then deletes them.
• An exported file is kept wherever you choose to save or send it. Plectara removes its temporary copy after sharing, or the next time the app opens.
• Website messages are kept as needed to respond.

Your Rights

You can edit or delete individual diary entries in the app.

Export: Export My Data (Preferences → Account) creates one JSON file with your diary entries, profile (including changes you compare), medications (including start dates), saved meals, activities, and bowel movements, habits, plans, AI chat, consents, and settings, and opens your device's share sheet so you can save or send it. Meal photos are not included. The file is not encrypted, so anyone you share it with can read it. Plectara removes its temporary copy after sharing, or the next time the app opens.

Delete: Delete Account (Preferences → Account) deletes the Auth0 sign-in account and removes diary data, meal photos, the Home Screen widget snapshot, health-import connection, plans, on-device AI artifacts, and reminder schedules on this device. It does not delete files you already exported. The same email can be used to create a new account. If deletion cannot reach Auth0, the app does not say the account was deleted. Without the app, follow the steps on plectara.com/delete-account.

Email support@plectara.com to request access to, correction of, or deletion of personal data we hold on our servers, including GDPR requests, or if Delete Account could not reach Auth0. After cloud backup ships, export and deletion will also cover identifiable Cloud SQL rows linked to your account.

Children

Plectara is not directed at children under 16.

Changes

We will update this policy when our practices change — including photo backup, additional sign-in methods, new AI uses, or when de-identified analysis actually begins — and show the new date above.

Contact

Privacy questions: support@plectara.com. For help using the app, visit product support.