Your data, in plain English.

What we keep

• Your first name and phone number, so friends know who is asking and you can sign in.
• Your hangs and asks: the title, time, place or link, any photo, and what your friends answered.
• The names and numbers of the friends you ask, so their answers reach you.
• Your phone’s notification address, so “Moni’s down” can reach you when the app is closed.
• Your “did it happen?” answers. They tell us whether Plantain is actually getting people together.
• Your friends list, who you have seen, and who lives far away stay on your phone. They never come to us.

What we never do

• We never sell your data, and we never share it for ads.
• No ad networks, no trackers, and no tracking of what you tap. Not in the app, and not on the pages your friends open.
• Plantain only looks up the names you type, on your phone, and never uploads your Contacts. Only the people you pick leave your phone.
• If you turn on the calendar, Plantain reads it on your phone to show your month next to your hangs, and never uploads it. A flyer you share in is read on your phone too, to find the day and place.
• We never text anyone for you. Every text goes out from your own Messages.

Who helps us run it

• Supabase keeps your data in its database, which runs on Amazon’s cloud.
• Vercel serves the pages your friends open, and keeps the ordinary server logs any website keeps.
• Twilio texts you your sign-in code.
• Apple delivers notifications, so they pass through Apple on their way to your phone.

They handle your data only to run Plantain for us, and each is held to the same protection we promise here.

How it is protected

• Everything travels over encrypted connections, and what is stored is encrypted at rest.
• The database only shows you your own hangs and replies. That is enforced in the database itself, not just in the app.
• Your friends’ links are long random addresses nobody can guess. Those pages stay out of search engines and are never saved by browsers.
• A photo you add lives at a long, random address. Anyone who has that exact link can open it, which is how your friend sees it on their page.

One honest limit: this is not end-to-end encrypted. Plantain can technically read what is stored, which is also how a friend can answer from a link with no app and no account.

How long we keep it

• Hangs and asks, and the friends’ names and numbers on them, are deleted 90 days after the plan.
• Delete a hang yourself any time, and it is gone.
• Delete your account and everything of yours is erased right away: your hangs, asks, photos and answers, and any invite your friends sent to your number.

Backups can hold a copy for a short while before they roll off.

If a friend sent you a hang

• You did not sign up for anything. We keep your first name, your number and your answer so your friend can see it, then delete them 90 days after the plan.
• No account, no app, no tracking. Want it gone sooner? Tap “Report this” at the bottom of your page and the link shuts off right away, or ask the friend who sent it to delete the hang.