Privacy
Last updated: 1 September 2026
Who is responsible
Plönum is an Icelandic app. The controller of your data is the app's publisher, reachable at hello@plonum.app.
What we collect
When you sign in with Google, Apple or an email address we collect your name and email address, plus a profile picture if your sign-in method provides one. We also store your activity in the app: RSVPs, book ratings and recommendations, recipes, the weekly menu and tasks you add.
We additionally store your language setting, your reminder preferences and a device token for notifications so the app can send you push reminders. We do not collect location and we use no third-party trackers.
If the app crashes — or hits an error it survives — it automatically sends an error report to Firebase with technical details: where it went wrong, which action failed, what device you are on and which version of the operating system and app. Our server also records failed requests and keeps them for 30 days. Neither carries your name, your email or anything you have written — only your account identifier. We use this only to fix bugs, never for marketing and never to watch what you do in the app.
How we use it
Your data is used to provide the app's features within your groups and to remind you about what's coming up. We do not sell your data, we do not share it, and we do not use it for advertising.
Marketing email
We only send news or announcements if you explicitly opted in when you signed up. You can withdraw that consent at any time — in the app's settings or by sending us a line. It does not affect how the app works.
Who can see your data
Only members of the groups you belong to can see your name, profile picture and your activity in that group. Nobody outside the group has access.
Where it is stored
Your data is stored securely with Supabase (database and images) and Google Firebase (sign-in, push notifications and error reports). Both act as processors on our behalf.
The data held by Supabase — groups, recipes, tasks, ratings, menus and our error log — is stored in Frankfurt, within Europe. Sign-in and the error reports from the app, however, pass through Google data centres outside Europe, including in the United States, under the EU–US Data Privacy Framework.
How long we keep it
We keep your data for as long as your account is active. If you delete your account it is removed immediately, except for anything we are legally required to retain longer.
Deleting your account
You can delete your account directly in the app, under settings. This removes your account and your data. Content you added to a group (a recipe or a book rating, for example) may remain with the group, no longer linked to you.
Your rights
Under GDPR you have the right to obtain a copy of your data, to have it corrected or erased, to restrict how it is processed, and to object to processing. Write to hello@plonum.app and we will respond within one month. If you believe we are mishandling your data you can complain to the Icelandic Data Protection Authority.
Children
You must be 13 or older to create a regular account.
Children can still take part in a family group, without creating an account. A parent generates a family code and types the child's name themselves. The child enters that code in the app and receives restricted access to that one family — they can rate recipes and edit the weekly menu, but cannot create recipes or other groups.
We collect no personal data from the child. They provide no email address, no phone number and nothing else; the sign-in is anonymous. The only thing stored is the name the parent typed. The parent controls the access and can remove the child from the group at any time.
Changes
If we change this policy we update the date at the top. If a change is significant we will say so in the app.