The short answer
Plum is a private period tracker for iPhone, and it doesn’t sell your data. It shows no ads, hands nothing you log to an advertiser, and makes its money from one optional subscription. Plum stores what you log on its servers, encrypted in transit and at rest. You can delete your account and everything in it from inside the app. If you want to check any app this way, ours included, our guide to finding a period tracker that doesn’t sell data shows what to look for in a privacy policy.
What Plum collects
| Account | The email address and name from your Google or Apple sign-in. Plum uses them to sign you in and to find your data on a new phone. |
|---|---|
| Birth date | Plum asks once at setup, so it can start from typical cycle numbers for your age before it has learned yours. |
| What you log | Period days and flow, spotting, symptoms, moods, energy, sleep, and any other categories you turn on. There's no free-text note field. This is the health data the privacy policy is about. |
| Purchases | Whether you have Plum Premium and when it renews. Payment itself goes through Apple, so Plum never sees your card. |
| Device token | An identifier Apple issues so Plum can send the reminders you turn on. It isn't your phone number or Apple ID. |
| Crash reports | What the app was doing when it failed, with health fields removed before they leave the phone. |
Plum never asks for your contacts, location or photos, and uses no advertising identifier.
What Apple’s label says
Plum’s App Store listing has a privacy label, and it names seven kinds of data under Data Linked to You. The section above it, Data Used to Track You, is empty. Plum has never asked for permission to track you, so it has no advertising ID to track you with. Read that section of any tracker’s label before you count the length of the rest. We explain ours line by line on what Plum’s App Store privacy label means.
Where it lives
Plum keeps your data on its servers, encrypted, with a copy on your phone. An on-device tracker can’t leak from a server, but it also can’t back itself up or share with anyone. If you’d rather keep everything on the phone, Apple’s Cycle Tracking or Euki fit better, and our comparison guide says so.
Who can see it
You. There are no profiles and no feed. Members of a group you share with see your period days on the group timeline, past and predicted, and whether you’re on your period today. If you track exercise, they also see which days you worked out, never what you did. Symptoms, moods, phase and fertile window stay yours. Sharing is on from the moment you join a group. Every group has its own switch you can turn off whenever you like, and a separate one for exercise days.
What leaves the app, and to whom
| Convex | Runs Plum's servers and database. Your account and everything you log are stored here, encrypted. |
|---|---|
| Apple | Sign in with Apple, payments for Plum Premium and delivery of reminders. Apple handles the card and the receipt. |
| Sign-in, only if you choose Sign in with Google. Google tells Plum your email address. It never gets what you log. | |
| Mixpanel | Usage analytics. It gets screens, taps, app version and locale country, tied to your account ID and never your name or email. It gets what you log only if you turn on Help Improve Plum, which starts off. Plum keeps IP-address location switched off. |
| Sentry | Crash reports, with health fields stripped before sending. It records the screen only when an error happens, never during normal use. |
| Superwall | Shows the Premium screen and records whether you subscribed. It gets your account ID and purchase state but nothing you log. |
| AppsFlyer | Install attribution, so Plum knows which ad, if any, led you to install it. It gets a device ID that Apple limits to one developer's apps, your account ID and the moment you sign up. Plum never asks to track you, so AppsFlyer never gets your advertising ID. It never gets your log either. |
| Expo | App performance, meaning how long launch and each screen take to load. It gets the name of the screen with any dates or codes stripped out, and nothing that identifies you. |
| ChatGPT or Claude | Only if you connect Plum to one of them. The assistant can then read your period dates and predictions and log a period for you. You can disconnect it in Security & Privacy. |
That’s the whole list. No ad network, data broker or social platform is on it. At setup you agree to the terms and to Plum using what you log for predictions. Sharing your log with the analytics tools is a separate box. It’s off by default, and you can change it later in Security & Privacy.
Deleting it
When you delete your account from inside the app, Plum erases everything logged under it from its servers. You cancel a Premium subscription through Apple, in iPhone Settings under your name, then Subscriptions.
Common questions
Is Plum safe to use for period tracking?
Plum shows no ads, never sells personal data, never shares health data with advertisers, and makes money only from an optional subscription. Plum stores your data on its servers, encrypted in transit and at rest. Analytics never receive what you log unless you opt in. You can delete your account and everything in it from inside the app.
Does Plum sell or share my period data?
No. The privacy policy says Plum will never sell health data or share it with advertisers, and health and cycle data will never be used for advertising. There are no advertising SDKs in the app.
What does Plum's App Store privacy label say?
Plum's label lists seven kinds of data under Data Linked to You: Health & Fitness, Purchases, Contact Info, Identifiers, Usage Data, Sensitive Info and Diagnostics. It lists nothing under Data Used to Track You, because Plum never asks for permission to track you and never receives your advertising ID. Read the Data Used to Track You section of any tracker's label first.
Does Plum show ads?
No. There's no advertising anywhere in the app, and no ad network receives anything you log. Plum does use AppsFlyer to measure which ad led to an install, and AppsFlyer never gets your period data. The money comes from Plum Premium, an optional subscription.
Is my data stored on my phone or on a server?
Plum stores your data on its servers, encrypted in transit and at rest, and keeps a copy on your phone for speed. That's what lets your history follow you to a new phone and lets a group see each other's period dates. Plum isn't an on-device-only tracker and doesn't claim to be.
Who can see what I log in Plum?
You. If you join a group, members see your last period, your next expected period, and whether you're on your period today, plus which days you worked out if you track exercise. They never see your symptoms, moods, phase or fertile window. Sharing is on from the moment you join, with a switch per group to turn it off. Plum has no public profiles and no social feed.
What does Plum send to analytics?
Plum sends which screens and buttons get used, the app version, and a country taken from the phone's language setting. It ties these to an account ID rather than a name or email. Plum leaves out what you log, such as period days, symptoms or cycle length, unless you tick the optional analytics box. That box is off by default, and you can turn it off again in Security & Privacy. Plum doesn't use IP-address location.
How do I delete my Plum data?
Delete your account from inside the app. That erases your account and everything logged under it from Plum's servers. A Plum Premium subscription is separate. Cancel it in iPhone Settings under your name, then Subscriptions.
