Privacy Policy
Effective: 25 September 2026
This policy explains what data Moletag L.P. ("we", "PlumHour") collects when you use the PlumHour apps and website, how we use it, and the choices you have. PlumHour is an adults-only (18+) group-chat service where real people and AI characters talk together. Moletag L.P. is the data controller for this processing.
Contact: [email protected] · Moletag L.P., Adelianos Kampos 127A, 74100 Rethymno, Greece
What we collect
Account data. Your email address, username, avatar, and your date of birth. Your date of birth is collected once, is used only to verify that you meet the minimum age (18), and is never shown to other users.
Content you create. Messages, chat rooms (titles, topics, backgrounds), AI characters you create (names, instructions, avatars), profile fields, image generation prompts, favorites, invitations, and reports you submit.
Technical data. Device push-notification tokens (so we can deliver notifications), and — only if crash reporting is enabled in the build — crash diagnostics via Sentry, configured without IP addresses, screenshots, or session replay.
Purchase data. If you buy a subscription, our payment partners (Apple, Google, or Stripe via RevenueCat) process the payment. We receive subscription status and transaction identifiers — never your card details.
We do not collect your contacts, precise location, or advertising identifiers. PlumHour contains no advertising or tracking SDKs, and we do not sell your data.
How AI processing works — please read this
PlumHour's core features are powered by third-party AI providers (currently OpenAI):
- Every message posted in a chat room — including messages between people — is screened by automated AI moderation before it is shown.
- When an AI character replies, recent messages from the conversation, together with the senders' usernames, are sent to the AI provider to generate the reply.
- Room titles, topics, profile fields, and character definitions are screened the same way, and image prompts are sent to the AI provider to generate avatars and room backgrounds.
This means the content you write on PlumHour, along with your username, is processed by OpenAI on our behalf. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models, and is retained only briefly (typically up to 30 days) for abuse and misuse monitoring before deletion. Your email address is never sent to AI providers. You agree to this processing when you create your account — it is part of our Terms and cannot be switched off, because moderation and AI characters are core to how PlumHour works.
Who we share data with
| Recipient | What | Why |
|---|---|---|
| Supabase | All service data | Hosting: database, authentication, storage, realtime delivery |
| OpenAI | Messages + sender usernames, room/profile/character text, image prompts | AI character replies, content moderation, image generation |
| Google Firebase (FCM) / Apple (APNs) | Push tokens, notification payloads | Delivering push notifications |
| RevenueCat, Apple, Google, Stripe | Purchase and subscription status | Processing subscriptions |
| Sentry (EU region) | Crash diagnostics (no PII, only if enabled) | Fixing crashes |
| Resend | Your email address and the sign-in email itself | Delivering sign-in and account emails |
| Cloudflare | IP address and request metadata when you load the website or web app | Hosting and protecting plumhour.ai and app.plumhour.ai |
| Google Workspace | Whatever you include when you email support | Handling support requests |
| Authorities (e.g. NCMEC) | Content and account data | Only where required by law — see our Child Safety Standards |
We never share your email address with other users or with AI providers.
Retention and deletion
How long we keep each kind of data:
| Data | Kept until |
|---|---|
| Account data (email, username, avatar, date of birth, settings) | You delete your account |
| Messages you send | The room is deleted by its owner. If you delete your account first, the message text stays in the room under the name “Deleted user”, with no link to your account and no avatar |
| Rooms and characters you own (including generated avatars and backgrounds), favorites, invitations, blocks | You delete them, or you delete your account |
| Room memory (a rolling AI summary of a room's conversation used by characters) | The room is deleted |
| Reports you submit or that concern you | 12 months after submission. Reports that are part of an ongoing investigation or a legal request are kept until it closes. Deleting an account does not delete reports, but removes the link to it |
| Device push tokens | You sign out, turn off notifications, or delete your account |
| Purchase and subscription records | Your account is deleted, plus any period required by tax and accounting law |
| Rate-limit and abuse-prevention counters | 25 hours |
| Room activity timestamps (used for “recent rooms”) | 60 days of inactivity |
| Copies held by OpenAI for abuse monitoring | Up to 30 days, then deleted by OpenAI |
| Crash diagnostics (if enabled) | Sentry's standard retention, currently 90 days |
- Delete your account at any time in Settings → Delete account (both apps and the web app), or request deletion without the app at https://plumhour.ai/delete-account. Deleting your account removes your profile, characters, rooms you own, and memberships; messages you sent are unlinked from your identity. Moderation reports and records we must keep for security, fraud prevention, or legal compliance may be retained for a limited period.
- Delete some of your data without closing your account: delete your own characters, rooms, and profile fields in the apps, or email [email protected] describing what you want removed — see https://plumhour.ai/delete-account.
- Export your data: use Settings → Request my data (in the apps and on the web) or email [email protected], and we will send you a copy of the personal data we hold about you within one month.
- Sign-out and blocked-user lists are under your control in Settings.
Legal bases (GDPR)
For each thing we do with your data, this is the legal basis we rely on:
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating your account and signing you in | Email address, sign-in provider identifiers, username, avatar | Performance of a contract (Art. 6(1)(b)) |
| Checking that you are 18 or older | Date of birth | Legal obligation to keep minors off an adults-only service (Art. 6(1)(c)) and our legitimate interest in running an adults-only platform (Art. 6(1)(f)) |
| Delivering chat rooms, messages, and AI character replies | Messages, room and character text, usernames of participants | Performance of a contract (Art. 6(1)(b)) — AI processing is a core part of the service you sign up for |
| Generating avatars and room backgrounds | The image prompts you write | Performance of a contract (Art. 6(1)(b)) |
| Automated moderation of all content before it is shown | Messages, room and character text, profile fields, image prompts | Our legitimate interest in keeping the service safe and lawful for everyone (Art. 6(1)(f)) |
| Handling reports, blocks, suspensions, and bans | Reported content, reporter and reported account identifiers | Legitimate interest in enforcing our Community Guidelines (Art. 6(1)(f)) |
| Reporting child sexual abuse material to authorities | The content and account data concerned | Legal obligation (Art. 6(1)(c)) |
| Processing subscriptions | Subscription status and transaction identifiers | Performance of a contract (Art. 6(1)(b)); retention of records is a legal obligation (Art. 6(1)(c)) |
| Push notifications | Device token, room and sender names, message preview (never for NSFW rooms) | Your consent, given through the device permission and withdrawable in Settings (Art. 6(1)(a)) |
| Crash diagnostics | Crash traces without personal identifiers, only if enabled in the build | Legitimate interest in fixing defects (Art. 6(1)(f)) |
| Rate limiting and abuse prevention | Account identifier and timestamps of actions | Legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Answering your support emails and rights requests | What you send us | Performance of a contract and legal obligation (Art. 6(1)(b), (c)) |
Where we rely on legitimate interests, you can object at any time using the contact details above; we will stop unless we have compelling grounds to continue.
Your rights
If you are in the EU/EEA or UK (GDPR): you have the right to access, correct, export (data portability), restrict or object to processing of, and delete your personal data, and to withdraw consent where processing is based on consent. Use the Settings options above or contact [email protected]; we respond within one month. You can also lodge a complaint with your local supervisory authority — for us, the Hellenic Data Protection Authority (dpa.gr).
If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect (this policy), to access and delete it, to correct it, and to not be discriminated against for exercising those rights. We do not sell or "share" personal information as defined by the CCPA, and we do not use or disclose sensitive personal information beyond what is necessary to provide the service, so there is nothing to opt out of. Exercise any right via Settings or [email protected]; we respond within 45 days.
Our servers are hosted in the United States (Supabase on AWS, US East), and most processors listed above also process data in the United States; crash diagnostics are held in Sentry's EU region. Where data leaves the EEA/UK we rely on appropriate safeguards such as the EU–U.S. Data Privacy Framework and standard contractual clauses.
Children
PlumHour is strictly for adults 18 and over. We do not knowingly collect data from anyone under 18; accounts that fail the age check cannot be created, and any account found to belong to a minor is deleted.
Notifications and permissions
Push notifications are optional; declining the permission never blocks any feature, and you can mute rooms or disable message notifications in Settings. Message previews are suppressed on the lock screen for NSFW rooms.
Changes
We will post any changes to this policy on this page and update the effective date; material changes will be announced in the app.