This policy covers Plum (listed in the stores as Plum for Kids; the “app”) on Android and iOS. It is separate from the privacy policy for this website, which describes what abd3lraouf.dev collects when you read it. Using the app is also governed by Plum’s terms of service.
1. Who is responsible
The controller of the personal data described here is abd3lraouf, LLC, a Wyoming limited liability company at 30 N Gould St, Ste R, Sheridan, WY 82801, United States.
Email support@abd3lraouf.dev or call +1 (917) 920-5169 with any privacy question, any request described in this policy, or any request a parent makes about a child’s data (section 8). Post to the address above works too, but email is fastest. No data protection officer has been appointed.
2. Parents, children and accounts
Plum is meant to be set up by a parent or guardian. Children do not create accounts, and the app never asks a child for an email address, a password or any way to contact them. The grown-ups’ area, the subscription screen and the first photo on a device open only after a sum a young child cannot work out.
No account is needed to play. Without one, everything in section 3 stays on the device.
Signing in is for Plum Plus sync. A parent with a Plum Plus subscription can sign in with Apple or Google to keep the children’s progress the same on every device. Plum then receives, through Firebase Authentication, what the provider shares: your name, your email address (with Apple, a private relay address if you choose one), the address of your profile photo, and the provider’s account identifier. Plum never receives your password.
3. What Plum keeps
On the device, in the app’s own storage, for every family:
- Child profiles — for each child, up to four: the name or nickname a parent types (optional, up to 24 characters), whether the child is a boy or a girl, which the games use to suit themselves to the child, and an age band.
- Profile photos — if a parent allows photos on the device, a child can take a picture with the camera or pick one from the photo library. It is shrunk to a small picture and kept only in the app’s storage on that device. It is never uploaded, never synced and never seen by the studio, and removing the photo or the child deletes it.
- Progress — stars, stickers, how many times each game was played, the stars on each stage, and which pictures and words a child saw lately, so they are not repeated.
- Settings — the language, the daily play-time limit, whether photos are allowed, and the usage-counts box in section 4.
With Plum Plus sync, a copy of the following is also stored in Google Cloud Firestore under the parent’s account. The database’s access rules let only that account read or change it, and accept new progress only while the subscription is active:
- Each child — the name, boy or girl, and the age band. Never the photo.
- Each device’s progress for each child — stars, plays per game, stickers and stage stars, under a random identifier the app makes for the device.
- Subscription status — whether Plum Plus is active, which plan, and when it renews or ends, copied from the subscription service in section 5.
Plum asks for the camera and the photo library only when a child adds a profile photo, and uses them for nothing else. It collects no audio, video, location or contacts, and beyond the name a parent types for a child, it holds nothing a child writes.
4. Anonymous usage counts
Plum counts how it is used with TelemetryDeck, an analytics service built not to identify anyone. Each count says what happened, never who did it:
- Games and stages — a game opened, with the child’s age band and whether it needed Plum Plus; a stage started or won, and the stars it earned.
- Plum Plus — the subscription screen shown, and whether a purchase or a restore went through, with the plan.
- Sessions — app launches and how long the app is open, with the device type, the operating-system and app versions and the language, which TelemetryDeck adds on its own.
No count carries a child’s name, a photo, an account or anything typed. The identifier TelemetryDeck uses is made on the device for each installation and hashed twice, once on the device and again on TelemetryDeck’s server, so it cannot be traced back to a person, and TelemetryDeck does not store IP addresses. The counts are on by default. Untick Share anonymous stats under Grown-ups, Family, and the app stops sending them and drops any it has not sent yet.
Plum shows no advertising and contains no advertising network. The Android app has no permission to read the advertising identifier, and on iOS it never asks to track you. It has no crash-reporting tool. No data from the app is used for advertising, by the studio or by anyone else.
5. Who else handles it
Personal data from Plum is not sold, and it is not shared for advertising. It is handled by these service providers, each only to provide its own service:
- Google (Firebase) — sign-in for Plum Plus sync, the database in section 3, and the server function that copies the subscription status into it.
- Apple and Google as sign-in providers — only if you choose to sign in with one of them (section 2).
- Apple App Store and Google Play — take the payment for a subscription. Plum never sees your card or billing details.
- RevenueCat — keeps track of subscriptions for the app: an identifier RevenueCat creates for the installation (the account identifier once a parent signs in), the store receipt, the product, the price, currency and country of a purchase, its transaction identifier, and the platform.
- TelemetryDeck — the anonymous usage counts in section 4.
- Cloudflare — routes email sent to support@abd3lraouf.dev, and hosts the web version of this policy.
Personal data may also be disclosed where the law requires it, to protect the safety of a child or anyone else, or to establish or defend a legal claim, and it may pass to a successor if the app or the company is sold or reorganised, under protections at least equal to these.
6. How long it is kept
- On the device — until you remove the child or the photo, or delete the app.
- Synced copies — until you remove the child while signed in, which deletes its copy too, or until the account is deleted (section 7).
- Usage counts — for the retention period of the studio’s TelemetryDeck plan, currently three months, then deleted by TelemetryDeck.
- Subscription and transaction records — for as long as tax and accounting law requires.
- Email and phone correspondence — for as long as it takes to answer, and no more than 24 months after that.
7. Getting a copy and deleting your data
On the device. Under Grown-ups, Family, removing a child deletes its profile, progress and photo from the device, and its synced copy if you are signed in. Deleting the app erases everything it kept on the device.
The account. Signing out keeps the children on the device and stops syncing. To get a copy of what is stored under the parent account, or to have the account and everything under it deleted, email support@abd3lraouf.dev or call +1 (917) 920-5169, including if the app is no longer installed. Requests are answered within one month.
Deleting the account does not cancel a subscription: cancel it in the App Store or Google Play, or it will keep renewing. Transaction records the law requires to be kept are retained for that period.
8. Children’s privacy
Plum is made for children, so what it holds about a child is kept to what is listed in section 3, entered by a parent, plus the anonymous counts in section 4. A child’s photo never leaves the device. Plum has no chat, no messaging and no way for a child to post or share anything with other people, and it does not show advertising of any kind.
A parent or guardian can at any time see what Plum holds about their child under Grown-ups, Family, correct the name there, have it deleted (section 7), and stop any further collection by removing the child’s profile and unticking the box in section 4. Under the United States Children’s Online Privacy Protection Act, the GDPR and similar laws, a parent can also make any of these requests by emailing support@abd3lraouf.dev or calling +1 (917) 920-5169. You may be asked for enough information to be sure you are the parent on the account.
9. Your rights
Depending on where you live — under the GDPR in the European Economic Area, its UK equivalent, and United States state laws such as California’s — you may have the right to access the personal data held about you, to correct it, to have it deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw consent at any time without affecting what happened before. You will not be treated differently for using any of them.
Plum does not sell or share personal information as California law defines those terms, and does not use it for targeted advertising.
Use the controls in the app, email support@abd3lraouf.dev, or call +1 (917) 920-5169. Requests are answered within one month. You also have the right to complain to a data protection authority, normally the one where you live or work.
Legal basis. Under the GDPR, providing the app, its subscription and Plum Plus sync rests on contract (Article 6(1)(b)); the anonymous usage counts, to the extent they are personal data at all, and the prevention of abuse on legitimate interests (Article 6(1)(f)); and keeping transaction records on legal obligation (Article 6(1)(c)).
10. Where the data is
The database behind Plum Plus sync is hosted by Google in the European Union, and TelemetryDeck’s servers are in Germany and the Netherlands. Google, RevenueCat and the other providers above may process data in the United States and in other countries; where data leaves the European Economic Area, the United Kingdom or Switzerland, it is protected by the safeguards each provider offers, such as the European Commission’s Standard Contractual Clauses.
11. Security
Data travels over encrypted connections; what the app keeps on the device sits in its own private storage, which other apps cannot read; and the database lets each account reach only its own records. No system is perfectly secure, and if a breach ever affects data described here, it will be handled and reported as the law requires.
12. Changes to this policy
When this policy changes, the date at the top changes with it. A material change will be announced in the app before it takes effect.