Privacy Policy
The short version
- Your baby’s video and sound never reach us. They go straight from one of your phones to another, end-to-end encrypted. We can’t see them, hear them or store them.
- Cry detection runs on the phone by the crib. No recordings are made and no audio is uploaded.
- We keep what the app needs to work: your account, your village and your night reports.
- No ads, no advertising trackers, and we never sell your data.
What we collect
Your account
Your email address, the name you give us (optional), how you sign in (email and password, Google or Apple) and an account ID.
Your village
Which accounts and phones belong to your village, each phone’s model name (for example “Pixel 3”), invite codes (they expire after 10 minutes) and a record of which version of our terms and this policy you agreed to, and when.
Night reports
For each session: when it started and ended, sound levels through the night (numbers, not recordings), when crying was detected, when Plinco soothed, rang a parent or connected someone in your village, and the crib phone’s battery and temperature. This is information about your baby’s night, and only your village can see it.
Calls and notifications
Push notification tokens, so Plinco can ring your phone, and a record of each call (when it rang and whether it was answered).
Purchases
What you bought and when (a PUPgrade or puppies). Payment is handled by Apple or Google; we never see your card.
Crash reports
When the app crashes or hits an error: what went wrong, your phone’s model and operating system, the app version, an installation ID and your account ID, so we can fix it.
On our website
If you sign up for news on plinco.store: your email address, which page or flier brought you, and your browser type. Visits are counted with Cloudflare Web Analytics, which uses no cookies.
What we don’t collect
- Live video and audio. On your home Wi-Fi they travel phone to phone. Away from it (with a PUPgrade or puppies), the encrypted stream may pass through Cloudflare’s relay servers, which cannot decrypt it. The keys exist only on your phones.
- Recordings of any kind. Your voice, when you talk to your baby, is live and never stored.
- Your location, contacts, photos or files. If you save a night report image, it goes to your own photo library, not to us.
- Anything about your baby beyond the night itself. We don’t ask for your baby’s name or birthday.
- Advertising IDs. There are no ads in Plinco.
Two phones connected to each other exchange network (IP) addresses, as any two devices on a network do.
How we use it
- To make Plinco work: connect your phones, ring you when your baby cries, show your night reports and apply what you’ve bought.
- To send account emails: confirming your address, resetting your password, and welcomes and receipts for purchases.
- To fix crashes and keep the service safe from abuse.
- To email you about Plinco’s launch, only if you asked us to on our website.
We don’t use your data for advertising, and we don’t build profiles of you.
Who else sees it
Your village. Members see each other’s names, email addresses and phones, and your village’s night reports.
Companies that run parts of Plinco for us. They process data only to provide their service to us:
- Google Firebase: accounts, the database, push notifications and crash reports
- RevenueCat: purchase records
- Apple and Google: payments, sign-in and notification delivery
- Cloudflare: our website, and relaying encrypted streams away from home Wi-Fi
- Resend: delivering our emails
Your data may be processed in the United States. We share data with anyone else only if the law requires it.
Children
Plinco is for parents and caregivers, and accounts are for adults (18 and over). Your baby is the subject of the video and sound, which stay between your phones. We don’t knowingly collect personal information from children. If you think a child has made an account, email us and we’ll delete it.
How long we keep it
- Your account, village and night reports: for as long as your account exists, so you can look back.
- Invite codes: 10 minutes. Phones that leave a village: dropped after 30 days.
- Crash reports: deleted automatically by Firebase Crashlytics after 90 days.
- Purchase records: kept by Apple, Google and RevenueCat as tax and accounting law requires, even after you delete your account.
Deleting your account
You can ask us to delete your account at any time. Here’s how, and what happens.
Keeping it safe
Everything Plinco sends travels encrypted. Your live stream is end-to-end encrypted. Our database only lets the members of a village read that village’s data.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, correct it, delete it or take a copy. You can change your name in Plinco’s Settings. For anything else, email us and we’ll reply within 30 days. We don’t sell or share personal information for advertising.
Changes
If we change this policy, we’ll update the date above. If the change is significant, we’ll tell you in the app before it takes effect.
Contact
Questions about your privacy: [email protected]