Skip to content
plum

Your words. Your space.

Privacy policy

Last updated September 26, 2026

Plum is a companion app for Plum recording hardware, operated by Hero Not Found, Inc. This policy explains how our website, app, and related services handle information.

Information we collect

  • Account information. Your email address and account ID. You sign in using a one-time code sent to your email.
  • Device and setup information. Identifiers, names, status, and firmware versions of linked hardware. During setup, the app uses Bluetooth to communicate with your device and send the Wi-Fi details you enter so it can connect.
  • Recordings and related content. Audio, transcripts, speaker or contact names, and inferred speaker attribution when these are available in your account. Accounts without device data may show empty lists.
  • Usage and diagnostics. When analytics are enabled in the app or service, we collect account IDs, screens viewed, actions, connection events, timing, errors, and app/device details. These analytics are designed to exclude audio, transcript content, email addresses, and credentials. Error reports contain technical diagnostic information.
  • Download link requests. If you ask us to email you the Mac download link, we send your email address to our email delivery provider to deliver that one message. We do not store it or add it to a mailing list.
  • Support messages. Information you send when you contact us, including your email address and the details of your request.
  • Website visits. The landing, developer docs, connection, customer web, and admin websites use PostHog page-view analytics when configured. The browser SDK stores a visitor identifier and sends the page path, hostname, service, and environment. Signed-in customer web visits are linked to the account ID. It does not record form fields, audio, transcripts, or session replays. Cloudflare also processes requests, IP addresses, and network information to deliver and protect these sites.

How we use information

We use information to sign you in, operate and protect your account, connect your hardware, store and play available recordings, generate transcripts and speaker suggestions, respond to requests, diagnose problems, and improve the service.

Service providers and connected apps

Cloudflare hosts our services and stores audio. Supabase provides authentication and our database. Email delivery providers deliver sign-in codes and service messages. Speechmatics processes audio for transcription. PostHog provides usage analytics and error diagnostics when configured. These providers process the information needed to deliver their services.

If you authorize a third-party client, such as an AI assistant connected through the Model Context Protocol (MCP), it can receive information within the permissions you grant. That client handles information under its own privacy policy and terms. You can manage and revoke connected-client access through the Plum sign-in website. Revoking access does not remove copies a client has already received.

We do not sell personal information or use it for targeted advertising. Information may also be disclosed when required by law, to protect rights and safety, or in connection with a business transfer, subject to applicable law.

Storage, permissions, and security

The app temporarily stores audio on your phone for playback. Bluetooth and network access support device setup and communication. You can change app permissions in your device settings; some functions may then be unavailable.

Our services use access controls and encrypted network connections, but Plum is not an end-to-end encrypted service. No system can guarantee absolute security. Service providers may process information outside your home country.

Retention and your choices

Recordings and account information remain stored unless removed; the service currently has no automatic age-based deletion schedule. We retain information to provide the service, handle requests, protect security, and meet legal obligations. Retention may differ for operational logs and provider backups.

To request access, correction, or deletion of your account or information, email team@heronotfound.com. We verify that a request is authorized before acting. We may need to retain limited information where required by law or necessary to address fraud, security, or disputes. We will explain applicable exceptions when responding. Signing out or uninstalling the app does not delete your account or server data.

Depending on your location, you may have additional privacy rights, including rights to object to or restrict processing, withdraw consent, or complain to your local data protection authority. Contact us to exercise applicable rights. We respond as required by applicable law.

Recording other people

Tell people when you are recording and obtain the permissions and consent required where you use Plum. If you believe a recording contains your information and want to make a privacy request, contact us; you do not need a Plum account to ask.

Children

Plum is intended for adults and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and address it.

Updates and contact

We may update this policy as Plum develops. We will update the date on this page and provide additional notice of material changes as required.

Hero Not Found, Inc.
team@heronotfound.com