Privacy Policy

1. Overview

PLOS (Personal Life Operating System) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

By using PLOS, you consent to the data practices described in this policy. This policy should be read alongside our Terms & Conditions.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Username and email address
• Password (stored in encrypted/hashed form)
• Profile preferences and settings

2.2 Life Management Data

As you use PLOS, you may voluntarily provide:

• Routines & Habits — Names, schedules, completion records, streaks
• Goals — Goal descriptions, progress, life area assignments
• Journal Entries — Personal notes and reflections
• Health & Wellness — Mood scores, energy levels, sleep logs
• Reminders — Reminder messages, schedules, and delivery preferences

2.3 AI Conversation Data

When you use the AI Chat feature, we collect:

• Messages you send to the AI assistant
• AI-generated responses
• Actions triggered through AI conversations

2.4 Messaging Integration Data

If you connect messaging platforms (Telegram, WhatsApp), we collect:

• Your messaging platform user ID
• Messages exchanged through the integration
• Delivery and read receipts

2.5 Technical Data

We automatically collect:

• Browser type and version
• Device information
• Session data and login timestamps
• Feature usage patterns (anonymized)

3. How We Use Your Information

We use your personal information to:

• Provide the Service — Display your routines, track goals, deliver reminders
• Generate Insights — Analyze your data to provide behavioral signals, balance scores, and trend analysis
• Power AI Features — Provide context to AI assistants for personalized guidance
• Improve the Platform — Understand usage patterns to enhance features (using anonymized data only)
• Send Notifications — Deliver reminders and alerts through your preferred channels
• Maintain Security — Detect and prevent unauthorized access or abuse

We never sell your personal data to third parties. We never use your data for advertising purposes.

4. Data Storage & Security

4.1 Storage

Your data is stored in a secure database. All data is associated with your user account and accessible only through authenticated sessions.

4.2 Security Measures

We implement the following security measures:

• Password hashing using industry-standard algorithms
• Session-based authentication with CSRF protection
• Input validation and sanitization to prevent injection attacks
• Policy enforcement system for action authorization
• Fail-closed security model for sensitive operations

4.3 Data Encryption

Sensitive data fields (such as messaging API tokens) are encrypted at rest. All connections use HTTPS for data in transit.

5. Data Sharing & Third Parties

5.1 We Do Not Sell Data

We do not sell, rent, or trade your personal information to any third party.

5.2 Third-Party Services

We may share limited data with third-party services that are essential to the platform:

• AI Providers — Conversation context sent to AI models (Google Gemini, OpenAI, Anthropic Claude, Ollama) for generating responses
• Messaging Platforms — Reminder content sent to Telegram/WhatsApp for delivery

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect the rights, property, or safety of PLOS, its users, or the public.

6. AI & Data Processing

6.1 How AI Uses Your Data

When you interact with the AI Chat feature, the following data may be shared with AI providers:

• Your current message and recent conversation history
• Routine names, schedules, and completion status (for context)
• Mood, energy, and balance scores (for personalized advice)
• Goal names and progress (for relevant suggestions)

6.2 AI Data Retention

AI providers may temporarily process your conversation data according to their own privacy policies. We recommend reviewing the privacy policies of our AI providers for specific data handling practices.

6.3 Behavioral Insights

PLOS generates behavioral insights (signals) by analyzing patterns in your data. This analysis is performed locally on our servers and does not involve sharing data with external parties.

7. Cookies & Tracking

PLOS uses minimal cookies necessary for platform functionality:

• Session Cookie — Maintains your logged-in state
• CSRF Token — Protects against cross-site request forgery
• User Preferences — Stores display preferences (e.g., time format) in localStorage

We do not use third-party tracking cookies, analytics trackers, or advertising pixels. For more details, see our Cookie Policy.

8. Your Rights

You have the following rights regarding your personal data:

• Access — View all data associated with your account through the platform
• Export — Download your data in CSV or JSON format via the Export feature
• Correction — Edit or update any of your personal information
• Deletion — Delete individual records or request complete account deletion
• Restriction — Pause or deactivate features that process your data
• Objection — Opt out of AI features or behavioral analysis

To exercise any of these rights, use the relevant feature in your account settings or contact us.

9. Data Retention

We retain your data for as long as your account is active. Specifically:

• Active Account — All data is retained and accessible
• Deleted Records — Permanently removed upon deletion (some records may use soft-delete with archival)
• Account Deletion — All associated data is permanently removed within 30 days
• AI Conversations — Chat history is retained for your reference; you can delete individual conversations

10. Children's Privacy

PLOS is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of PLOS after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@plos.app
• Platform: Use the Contact page