Privacy policy.

This privacy policy explains what Plumate collects about you, why, who else sees it, how long we keep it and how you can delete it. It covers the Plumate Android app and the website at plumate.john221wick.in. Plumate is a social app for adults where you meet strangers one at a time in Space, chat with Friends in Circle, post Cards and play in Clusters. It is not a dating site.

• Who we are
• What we collect
• How we use it
• Who can see what
• Who else handles it
• Security
• How long we keep it
• Deleting your account
• Your choices and rights
• Age
• Changes
• Contact

1. Who we are

Plumate is run by Plumate ("we", "us"). We decide what happens to your data and are responsible for it. For anything about your data, including requests and complaints, write to support@pomegrenade.space. That address also reaches the person who handles privacy grievances.

2. What we collect

What you give us

• Your account: your email address and password. The password is stored only as a one-way hash, so we cannot read it.
• Your profile: display name, username, date of birth, gender (male, female or beyond), and, if you add them, a photo and a bio. You also choose who can see your profile.
• What you send and post: messages in chats, groups, Chatspace and Space matches, with any photos, videos, voice notes, files, links or Cards in them, and your reactions; stories; Cards (posts, clips and Scrolls), drafts and comments; Cluster posts and settings.
• Your people: Friends, friend requests, the Clusters you are in, ask to join or subscribe to, and the people you block.
• Reports you make about people, Cards or Clusters.

What we record as you use Plumate

• Activity: likes, saves and shares; who viewed a story and when; when a message was delivered and read; when you were last online. Typing indicators are passed on live and not stored.
• Space and the game: your matches, your moves and decisions in them, the levels you reach, your XP, Gems, achievements, and your Cluster's league, rank, Plums and Clash results.
• Calls: who called whom, when and for how long, shown as a line in the chat. The sound and picture of a call are never recorded or stored.
• Devices: for each device you sign in on, its IP address and its browser or device name, kept with that sign-in; and, on a phone, the token that lets us send it notifications. Like most websites, our servers also log each request (IP address, time and the address asked for) for security and to fix problems.

What stays on your phone

The app keeps your sign-in, your theme and cover colours, copies of drafts you are uploading, and which stories you have seen on the phone itself. Stories you post are also kept in a folder on your phone (.pomegranate/Status) and removed there when they end.

Phone permissions

The app asks for these only when you use the feature that needs them:

• Camera: video calls, and photos and videos you choose to take.
• Microphone: calls, voice notes and videos.
• Photos and videos: only the ones you pick to post or send.
• Notifications: messages, calls and activity.
• Install updates: lets the app install a newer version of itself that you downloaded from our website.

We don't access your contacts, location, call log or text messages.

3. How we use it

• To run Plumate: to show your profile, deliver your messages and posts, pair you in Space, connect calls, rank Clusters and send you notifications. We need this data to give you the service you signed up for.
• To keep it safe: to check that everyone is 18 or older, look into reports, freeze accounts that break the rules, and stop spam and abuse. We do this because it is in your interest and ours that Plumate stays safe.
• With your permission: the camera, microphone, photos and notifications. You can take this back at any time in your phone's settings.
• When the law requires it.

We don't sell your data, use it for advertising, build advertising profiles, or let other companies track you through Plumate. We don't train AI models on what you post or send.

4. Who can see what

• Other people on Plumate see your profile as your privacy setting allows. In Space a match partner sees only a stand-in name at first: your name at level 3, and your photo and full profile at level 6.
• People in a chat see its messages; your Friends see your stories; a Cluster's members see its Chatspace and posts, and its Owner and Admins see drafts waiting for approval; Cards you publish can be seen by other users, and the Clashboard shows Clusters' names and scores.
• Our moderators see reports and what was reported, including a copy of a Space match's conversation when a match is reported.

5. Who else handles it

We use a few services to run Plumate. Each gets only what it needs:

• Hosting: Plumate's database and uploads are on servers we rent from hosting companies and run ourselves. Photos and videos are resized and compressed on a second server of ours.
• Google Firebase Cloud Messaging delivers notifications to Android phones. It gets your phone's notification token and what the notification says, such as a sender's name and a message preview. Notifications from Space matches never name your match.
• Cloudflare and Google help two devices find each other to start a call, so they see the devices' IP addresses. When a direct connection is not possible, the call is relayed through Cloudflare, still encrypted, so Cloudflare cannot hear or see it.
• Google Fonts: the website loads its typefaces from Google, which sees your IP address and browser when it does.
• Sites you link to: when you send a link, our server, not your device, visits the page to make its preview (YouTube previews come from YouTube). The site sees our server, not you. Previews are kept for six hours.
• The law: we share data when the law requires it, or when it is needed to protect someone from serious harm.
• A change of ownership: if Plumate is ever sold or merged, your data would go to the new owner under this policy, and we would tell you first.

6. Security

• Everything between your device and our servers travels encrypted (HTTPS).
• Passwords are stored only as one-way hashes.
• Calls are encrypted end to end between the two devices. Messages, photos and posts are stored on our servers and are not end-to-end encrypted.
• Only the people who run Plumate can reach the servers, and moderators see only what was reported.

No service can promise perfect security. If you find a problem, please tell us at support@pomegrenade.space. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

7. How long we keep it

• Your account and profile: until you delete your account.
• Messages: kept so a chat stays whole for everyone in it. You can delete one for everyone within two days of sending it.
• Stories: 24 hours, with who viewed them. Then they are deleted.
• Posts, Cards and comments: until you or a moderator deletes them.
• Link previews: six hours.
• Sign-ins: until you sign out or the sign-in expires.
• Notification tokens: until you sign out of the app, delete your account, or the token stops working.
• Server logs: a short time, for security and fixing problems.
• Reports: kept for safety, including after the account involved is deleted, so we can stop people who were removed for abuse from coming back.

8. Deleting your account

You can delete your account at any time: in the app from your Dashboard, or on the website at plumate.john221wick.in/delete-account. It happens at once and cannot be undone. Your profile, posts, Cards, comments, stories, Friends and sign-ins go. Messages you sent stay in the other person's chat, shown as from "Deleted account", so their conversation stays whole.

Delete your account, and see what goes and what stays

9. Your choices and rights

• Change your name, photo, bio and who can see your profile, in Profile & settings.
• Delete a message for everyone, or a post, Card, comment or story; block people; leave a Cluster.
• Turn off notifications or any permission in your phone's settings.
• Delete your account.
• Ask us for a copy of your data, to correct or delete something, or anything else about your data, at support@pomegrenade.space. We reply within 30 days.

Depending on where you live, you may have more rights under laws such as India's Digital Personal Data Protection Act or Europe's GDPR, and you can complain to your data protection authority. In India that is the Data Protection Board of India. Please write to us first so we can try to put it right.

10. Age

Plumate is only for people aged 18 or older. We ask for your date of birth when you sign up and refuse anyone younger. If we learn that someone under 18 has an account, we delete it. If you think that has happened, tell us at support@pomegrenade.space.

11. Changes

If we change this policy, we will update this page and its date. If a change matters to how your data is used, we will also tell you in the app before it takes effect. Our servers may be in a country other than yours; wherever they are, this policy applies.

12. Contact

Plumate
Email: support@pomegrenade.space
Website: plumate.john221wick.in