Privacy Policy

This policy explains what data Moletag L.P. ("we", "PlumHour") collects when you use the PlumHour apps and website, how we use it, and the choices you have. PlumHour is an adults-only (18+) group-chat service where real people and AI characters talk together. Moletag L.P. is the data controller for this processing.

Contact: [email protected] · Moletag L.P., Adelianos Kampos 127A, 74100 Rethymno, Greece

What we collect

Account data. Your email address, username, avatar, and your date of birth. Your date of birth is collected once, is used only to verify that you meet the minimum age (18), and is never shown to other users.

Content you create. Messages, chat rooms (titles, topics, backgrounds), AI characters you create (names, instructions, avatars), profile fields, image generation prompts, favorites, invitations, and reports you submit.

Technical data. Device push-notification tokens (so we can deliver notifications), and — only if crash reporting is enabled in the build — crash diagnostics via Sentry, configured without IP addresses, screenshots, or session replay.

Purchase data. If you buy a subscription, our payment partners (Apple, Google, or Stripe via RevenueCat) process the payment. We receive subscription status and transaction identifiers — never your card details.

We do not collect your contacts, precise location, or advertising identifiers. PlumHour contains no advertising or tracking SDKs, and we do not sell your data.

How AI processing works — please read this

PlumHour's core features are powered by third-party AI providers (currently OpenAI):

• Every message posted in a chat room — including messages between people — is screened by automated AI moderation before it is shown.
• When an AI character replies, recent messages from the conversation, together with the senders' usernames, are sent to the AI provider to generate the reply.
• Room titles, topics, profile fields, and character definitions are screened the same way, and image prompts are sent to the AI provider to generate avatars and room backgrounds.

This means the content you write on PlumHour, along with your username, is processed by OpenAI on our behalf. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models, and is retained only briefly (typically up to 30 days) for abuse and misuse monitoring before deletion. Your email address is never sent to AI providers. You agree to this processing when you create your account — it is part of our Terms and cannot be switched off, because moderation and AI characters are core to how PlumHour works.

Who we share data with

We never share your email address with other users or with AI providers.

Retention and deletion

• Your data is retained while your account exists.
• Delete your account at any time in Settings → Delete account (both apps and the web app), or request deletion without the app at https://plumhour.ai/delete-account. Deleting your account removes your profile, characters, rooms you own, and memberships; messages you sent are unlinked from your identity. Moderation reports and records we must keep for security, fraud prevention, or legal compliance may be retained for a limited period.
• Delete some of your data without closing your account: delete your own characters, rooms, and profile fields in the apps, or email [email protected] describing what you want removed — see https://plumhour.ai/delete-account.
• Export your data: use Settings → Request my data (in the apps and on the web) or email [email protected], and we will send you a copy of the personal data we hold about you within one month.
• Sign-out and blocked-user lists are under your control in Settings.

Legal bases (GDPR)

We process your data to provide the service you signed up for (performance of a contract — account data, content, AI processing, purchases); to keep the service safe and lawful (legitimate interests and legal obligations — moderation, abuse prevention, age verification, child-safety reporting); and, for optional things like push notifications, with your consent, which you can withdraw at any time in your device or app settings.

Your rights

If you are in the EU/EEA or UK (GDPR): you have the right to access, correct, export (data portability), restrict or object to processing of, and delete your personal data, and to withdraw consent where processing is based on consent. Use the Settings options above or contact [email protected]; we respond within one month. You can also lodge a complaint with your local supervisory authority — for us, the Hellenic Data Protection Authority (dpa.gr).

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect (this policy), to access and delete it, to correct it, and to not be discriminated against for exercising those rights. We do not sell or "share" personal information as defined by the CCPA, and we do not use or disclose sensitive personal information beyond what is necessary to provide the service, so there is nothing to opt out of. Exercise any right via Settings or [email protected]; we respond within 45 days.

Our servers are hosted in the United States (Supabase on AWS, US East), and our processors listed above also process data in the United States. Where data leaves the EEA/UK we rely on appropriate safeguards such as the EU–U.S. Data Privacy Framework and standard contractual clauses.

Children

PlumHour is strictly for adults 18 and over. We do not knowingly collect data from anyone under 18; accounts that fail the age check cannot be created, and any account found to belong to a minor is deleted.

Notifications and permissions

Push notifications are optional; declining the permission never blocks any feature, and you can mute rooms or disable message notifications in Settings. Message previews are suppressed on the lock screen for NSFW rooms.

Changes

We will post any changes to this policy on this page and update the effective date; material changes will be announced in the app.