PLOSPrivacy Policy
1. What PLOS is
PLOS organizes your documents, bills, subscriptions and reminders. It works without an account and offline.
2. Data that stays on your phone
Files you scan or import, data extracted by on-device OCR, reminders, settings and detected notices. The app's database (your bills, reminders, extracted text and notification events) is encrypted at rest with SQLCipher (AES-256), and Vault documents are encrypted with AES-256-GCM; both keys are protected by the Android Keystore. The other files you scan or import stay in the app's private storage, protected by Android's app sandbox.
3. Notifications (optional feature)
If you turn on "Notification intelligence", PLOS reads the title and text of notifications only from the apps you choose to suggest bills, deliveries or appointments. It discards verification codes. The original text is deleted after 24 hours and never leaves your phone. You can pause, turn off or delete this data at any time.
4. Account and cloud (optional feature, Premium)
If you create an account and turn on sync, we send to your private space: document, bill, subscription and reminder data, and your document files. We do not send OCR text, notifications or the Vault. Access is restricted to your account through per-user security rules.
We use your email address to create your account and to send you confirmation and security messages (for example, to confirm your email or reset your password). These messages are sent from [email protected].
If you choose "Continue with Google", Google gives PLOS your name, email address and profile picture. We use the name and picture only to personalize your profile: the picture is downloaded once and kept on your phone, and it is not uploaded to PLOS servers. Signing in with Google is optional; you can use an email and password instead.
Providers: Supabase (authentication and database), Cloudflare (private file storage and this website), Namecheap (domain email) and Google (Google Play billing and the optional Google sign-in). They process data only on our behalf and under their own privacy terms.
Website: this website does not use cookies, advertising or analytics trackers. Cloudflare, which hosts it, processes technical request data (such as your IP address) to deliver the site and protect it from abuse.
5. International transfers
OTJH LLC is based in the United States. If you turn on sync, your account, database records and files are processed by our providers (Supabase and Cloudflare), whose servers may be outside your country, including in the United States. If you use PLOS from the European Economic Area, the United Kingdom or Switzerland, your data may therefore be transferred outside it. We rely on the data-processing terms and standard contractual clauses these providers offer to protect it. Without an account and sync, nothing leaves your phone.
6. Legal bases
Where the GDPR applies: account and sync data are processed to perform our contract with you (the Terms). Optional features you turn on, such as notification intelligence or analytics, rely on your consent, which you can withdraw at any time in the app. Security, fraud prevention and legal obligations rely on our legitimate interests and legal duties.
7. Payments
Subscriptions are managed by Google Play. PLOS checks your subscription status with Google; it does not receive your payment method.
8. Analytics
Off by default. If you turn it on, only six Premium events are recorded (you can see them on the Privacy screen), with no personal data or content.
9. Your rights
Inside the app you can export your data (ZIP), correct it, delete documents, delete notification data, delete all local data, delete cloud data and delete your account. You can also request deletion on the web: how to delete your account and data. To access, correct, delete, object to or restrict the processing of your data, write to [email protected]; we answer within 30 days. If you are in the EEA or the UK you may also lodge a complaint with your local data-protection authority.
California residents: in the last 12 months, and only if you create an account and turn on sync, we collected these categories of personal information: identifiers (email address, user ID), commercial information (your subscription status and the bills, amounts and reminders you choose to sync) and the files you choose to sync. We use them only to provide the service and we do not disclose them for money or for advertising. We do not sell or share personal information, and you may ask to know, correct or delete it, without being treated differently for doing so, at the same address.
10. Retention
Local data: until you delete it. Notification text: 24 hours. Notification events: 30 days. Trash: 30 days. Cloud: until you delete it or delete your account; after that it is removed from our database and storage within 30 days, and encrypted backups kept by our providers expire on their regular backup schedule.
11. Age
PLOS is intended for adults (18+) and is not directed to children. We do not knowingly collect data from children under 13 (or under 16 where the law sets that age). If you believe a child has created an account, write to us and we will delete it.
12. Changes and contact
We will publish changes on this page, and if a change is important we will tell you in the app or by email before it takes effect. Write to us at [email protected].