The short answer
What you log is stored on Plum’s servers, encrypted in transit and at rest. It is never sold, never shared with advertisers, never used for ads, and there are no ads. The business is the subscription. You can delete your account and everything in it from inside the app.
What Plum collects
| Account | The email address and name from your Google or Apple sign-in. Used to sign you in and to find your data on a new phone. |
|---|---|
| Birth date | Asked once at setup, so Plum can start from typical cycle numbers for your age before it has learned yours. |
| What you log | Period days and flow, spotting, symptoms, moods, energy, sleep, notes, and any other categories you turn on. This is the health data the privacy policy is about. |
| Purchases | Whether you have Plum Premium and when it renews. Payment itself goes through Apple, so Plum never sees your card. |
| Device token | An identifier Apple issues so Plum can send the reminders you turn on. It is not your phone number or Apple ID. |
| Crash reports | What the app was doing when it failed, with health fields removed before they leave the phone. |
Plum never asks for your contacts, location or photos, and uses no advertising identifier.
Where it lives
On Plum’s servers, encrypted, with a copy on your phone. That is a trade. An on-device tracker can’t leak from a server, and it also can’t back itself up or share with anyone. If you want that trade, Apple’s Cycle Tracking or Euki fit better, and our comparison guide says so.
Who can see it
You. There are no profiles and no feed. Members of a group you turned sharing on for see three things: your last period, your next expected one, and whether you are on it today. Notes, symptoms, moods, phase and fertile window stay yours. Sharing is off for every new group until you switch it on.
What leaves the app, and to whom
| Apple | Payments for Plum Premium and delivery of reminders. Apple handles the card and the receipt. |
|---|---|
| Mixpanel | Usage analytics, meaning screens, taps, app version and locale country, tied to your account ID and never your name or email. What you log is excluded unless you opt in, and IP-address location is switched off. |
| Sentry | Crash reports, with health fields stripped before sending. A screen recording is captured only when an error happens, never during normal use. |
| Superwall | Shows the Premium screen and records whether you subscribed. Gets your account ID and purchase state, not your log. |
That is the whole list, and no ad network, data broker or social platform is on it. At setup you agree to the terms and to Plum using what you log for predictions. Sharing your log with the analytics tools is a separate box, off by default, which you can change later in Security & Privacy.
Deleting it
Delete your account from inside the app and everything logged under it is erased from Plum’s servers. A Premium subscription is cancelled through Apple, under iPhone Settings, your name, then Subscriptions.
Common questions
Is Plum safe to use for period tracking?
Plum shows no ads, never sells personal data, never shares health data with advertisers, and makes money only from an optional subscription. Your data is stored on Plum's servers encrypted in transit and at rest, analytics never receive what you log unless you opt in, and you can delete your account and everything in it from inside the app.
Does Plum sell or share my period data?
No. The privacy policy says Plum will never sell health data or share it with advertisers, and health and cycle data will never be used for advertising. There are no advertising SDKs in the app.
Is my data stored on my phone or on a server?
On Plum's servers, encrypted in transit and at rest, with a copy on your phone for speed. That is what lets your history follow you to a new phone and lets a group see each other's period dates. Plum is not an on-device-only tracker and does not claim to be.
Who can see what I log in Plum?
You. If you join a group and turn sharing on for it, members see your last period, your next expected period, and whether you are on your period today. They never see notes, symptoms, moods, phase or fertile window. Plum has no public profiles and no social feed.
What does Plum send to analytics?
Which screens and buttons get used, the app version, and a country taken from the phone's language setting, tied to an account ID rather than a name or email. What you log, such as period days, symptoms or cycle length, is excluded unless you tick the optional analytics box, which is off by default and can be turned off again in Security & Privacy. Plum does not use IP-address location.
How do I delete my Plum data?
Delete your account from inside the app. That erases your account and everything logged under it from Plum's servers. A Plum Premium subscription is separate. Cancel it in iPhone Settings under your name, then Subscriptions.
