What we keep, and what stays yours.

Plinn is a notebook for the places you love. The notebook lives on your phone and in your iCloud — not on our servers, because we don't have any.

The short version.

Plinn does not run a backend. Everything you save — places, photos, notes, trips, boards — is stored on your device and synced through your private iCloud account, which is encrypted by Apple. We can't see it. We don't sell it. We don't show ads. There is no analytics SDK following you around the app.

The few exceptions are listed below, plainly.

What Plinn collects, and why.

• Saved places & tripsThe reason the app exists. Stored locally, synced via iCloud. Never sent to us.
• Photos you attachOnly the photos you explicitly add to a place. Stored locally and in iCloud.
• Precise locationUsed while the app is open, to show what's nearby and to sort by distance. Never recorded as a history.
• Apple ID identifierProvided by Sign in with Apple. Used to identify your account in iCloud and to recognise friends you share boards with.
• Name & emailFrom your Apple ID, only if you choose to share them at sign-in. Used to display your name on shared boards and trips.
• ContactsOnly if you grant access. Used to suggest people when you share a board. Contacts are read on-device and never uploaded.
• CalendarOnly if you grant access. Used to add trip activities, flights, and check-ins to your calendar.

What Plinn does not do.

No tracking across apps or websites. No advertising identifiers. No analytics that profile you. No selling, sharing, or "monetising" your data with partners. No backend that could be breached, because we don't operate one.

iCloud and CloudKit.

Plinn syncs through Apple's CloudKit. That means your data is stored in your private iCloud container, end-to-end encrypted by Apple, and accessible only by devices signed into your Apple ID. Apple's iCloud privacy policy applies to that storage; it's available at apple.com/legal/privacy.

When you share with friends.

Sharing a board or trip with a friend creates a copy on their device through CloudKit. Your name and the content you shared become visible to them. We don't see this exchange — it happens directly between Apple's iCloud accounts. You can revoke access at any time from the share's settings.

The flight-lookup feature.

When you add a flight to a trip, Plinn queries the public Aviationstack API with the flight number you entered (e.g. "LH123"). No personal data is sent. The flight number is the only thing that leaves your device for that single request.

How to delete your data.

Delete the Plinn app from your device. To remove the iCloud copy as well, open Settings → [your name] → iCloud → Manage Account Storage → Plinn → Delete Data from iCloud. Once deleted from iCloud, the data is gone — we have no copy to restore.

Children.

Plinn is rated 4+ and contains nothing inappropriate for children, but the app's sharing features are designed for adults. We don't knowingly collect data from children under 13. If you believe your child has used the app, deleting the app deletes the data.

Changes to this policy.

If we change anything that materially affects what data Plinn handles, we'll update this page and bump the date below. Older versions are kept in our public Git history.

Contact.

Questions, concerns, or a bug to report: NadineAuer@icloud.com. We read every email.