Privacy Policy
This policy covers the Plastelin app, website and support.
Who is responsible for your data
Plastelin is operated by Iuvenalii Khlopkov, who is responsible for the personal data processed by Plastelin. Contact: support@plastelin.app.
Your local archive
Your entries, attachments and their history are stored on your device. The first release keeps the archive locally on this iPhone; archive synchronization is deferred. Our account and billing server does not host your archive. Exported files and backups are under your control. If you save an export or backup to a cloud storage service, that service processes the copy under its own terms.
Cloud AI
After you accept the cloud AI disclosure and use an AI feature, your message, relevant archive entries, and a receipt photo or document you select are sent through Plastelin’s server to OpenAI or Google, depending on the task. Context may include People names, email addresses, phone numbers and relationships; financial amounts and payment methods; and habit names, measured progress, targets and history. Habits may describe health, exercise or religious practices. Selected receipt images may include purchase and payment details. Event context may include a place or address you entered. General AI consent enables eligible spaces; some spaces have separate exclusion controls. Habits uses the general consent without a separate exclusion switch. Spaces prohibited from cloud processing remain excluded. You can stop new cloud AI requests by signing out of your Plastelin account. Signing out does not recall data already sent and does not cancel your Apple subscription. Your local archive remains available for manual use.
Account, purchases and usage records
Apple verifies sign-in and handles payment. When the app connects to our API, Cloudflare processes connection information, including IP addresses, to deliver and protect requests. We check the country supplied by Cloudflare to determine whether an AI provider is available in your region. We process account and installation identifiers, sign-in credentials, purchase identifiers, subscription status and usage allowances to link your access and prevent duplicate grants. When Apple handles a subscription payment, it does not share your Apple password or payment-card details with us. Usage records include request status, model, token counts and cost estimates; they do not contain your messages, receipt images or archive entries. Account and installation lookups use keyed hashes; credentials and transaction identifiers are encrypted. Purchase-link identifiers are also retained. These records remain personal data.
Optional app analytics and diagnostics
App analytics and diagnostics are on by default. Previously saved settings, including an off setting, remain in effect. You can turn collection off in app Settings. This setting is separate from website analytics and cloud AI. PostHog receives coded feature actions, screen identifiers, operation results, technical errors, app and operating-system versions, device information, app language and subscription-plan category. Usage events use a random identifier that rotates; diagnostics use separate event identifiers. PostHog receives connection information and may infer the network country for usage events. Crash reports can include technical stacks and recent coded app activity. We exclude archive content, entered text, account and purchase identifiers, advertising identifiers and session replay. Turning collection off blocks new sending but cannot recall data already sent. If already started, native crash monitoring may remain installed until the current app process ends. After re-enabling collection, native crash sending requires the app to start in a new process.
Website and support
Cloudflare processes connection information, including your IP address and request details, to deliver and protect this website. Website analytics is temporarily paused. We do not load Google Analytics 4 or Cloudflare Web Analytics, send new analytics requests or show an analytics consent banner or settings control. Previously saved analytics choices remain in your browser. If you email support@plastelin.app, we and our email service process your address, message and attachments to handle your request. Share only the information needed to explain the problem.
Optional website performance measurement
Website performance measurement is temporarily paused. We do not load Cloudflare Web Analytics or send new performance measurements. Reports collected before the pause remain subject to Cloudflare’s processing and retention rules.
Why we process data
We process account, purchase and service data to provide the functions you request. Optional cloud AI is enabled with your consent. App analytics helps us understand which features are used; diagnostics helps us investigate failures and improve reliability. You can turn collection off in app Settings; website analytics is temporarily paused. Security and duplicate-grant checks serve our legitimate interest in protecting the service; correspondence is used to answer your request. We may also retain information required by law. Where consent is the legal basis, you can withdraw it without affecting earlier lawful processing.
Service providers and processing locations
Apple provides sign-in and purchases. If you choose iCloud as the destination for an exported file or backup, Apple also stores that copy; this is separate from archive synchronization. Cloudflare runs our API and website. PostHog processes optional app analytics and crash diagnostics through its EU ingestion endpoint. OpenAI or Google processes cloud AI requests. Website collection through Google Analytics and Cloudflare Web Analytics is temporarily paused. Data sent before the pause remains subject to those providers’ rules. Data may be processed outside your country, including in the United States. Each provider has its own processing and retention rules. OpenAI API inputs are not used for model training by default; abuse-monitoring records may be retained for up to 30 days, with exceptions. We disable OpenAI response storage, which does not mean zero provider retention. Google’s Gemini API terms distinguish paid and unpaid services and describe their separate data-use rules. You can contact us for information about recipients and transfer arrangements.
How long records are kept
Detailed metadata of completed, reconciled AI requests is scheduled for deletion seven days after its last update. Daily usage totals are kept for 30 days. Unsettled operations remain until reconciliation. Apple notification deduplication records have a 181-day limit. Active account data is kept while needed to provide the account. Support correspondence is kept while needed to handle the request and maintain relevant records or meet legal obligations; it does not follow the AI usage schedule. Google Analytics remains configured for two-month user- and event-level data retention; this setting does not limit standard aggregated reports. Previously stored analytics cookies and the choice saved in your browser each retain their 180-day limit. Pausing collection does not delete those cookies or choices and does not remove previously sent data. Technical website data retention depends on hosting, security and legal needs. Provider retention follows the provider’s rules.
Deleting your account
Choose Delete account in the app and confirm with Apple. Once accepted, the request closes AI access; token revocation and cleanup may continue in the background. When deletion completes, device links, sign-in credentials and detailed usage history are removed. We retain keyed records of the free allowance claim and purchase identity to prevent duplicate grants or restore a delayed purchase. These records have no automatic expiry. An unexpired paid-period balance is retained for restoration until its period ends. Your local archive stays on the device. Deletion does not cancel an App Store subscription.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to processing and complain to your data-protection authority. Write to support@plastelin.app; we may need to verify your identity. You can also export your archive and delete your account in the app. We cannot remotely delete the archive on your device.
Policy updates
The date above identifies this version. We will explain material changes before they take effect and request fresh consent where required for new optional processing.