Pluck — Privacy Policy

Last updated: July 2, 2026

Pluck ("the app", "we") turns photos, screenshots, and typed notes about events into calendar events. This policy explains what data the app handles, why, and what never leaves your device. We built Pluck to work without accounts and without advertising identifiers, and to keep as much as possible on your device.

The short version

Your events, drafts, and settings are stored on your device, not on our servers.
When you scan an image, that image is uploaded once to our secure parsing service to extract the event details, then the result is returned to your device. We use OpenAI as the AI processor for this step.
We collect anonymous usage analytics and crash reports to keep the app working well. There are no user accounts and we don't know who you are.
We do not track you across apps, do not use advertising identifiers, and do not sell data to anyone.

Data we process, and why

Data	Where it goes	Why
Event photos / screenshots you scan	Uploaded over HTTPS to our parsing service (Google Cloud / Firebase), which forwards them to OpenAI's API to extract event fields; the extracted text is returned to your device. Images are processed to answer your request and are not used by us to build profiles. OpenAI processes API data per its API data usage policies (not used to train models).	The core feature: turning a picture into an editable calendar event.
Events, drafts, categories, settings	Stored locally on your device (a local database). Synced only to the device calendar you choose (Google or Apple calendar on your device), never to our servers.	Your event library and calendar sync.
Anonymous install identifier	Firebase Anonymous Authentication creates a random per-install ID, sent with each scan.	Rate-limiting and abuse prevention on the parsing service. It identifies an install, not a person, and resets if you reinstall.
Usage analytics	Google Firebase Analytics and Amplitude receive anonymous events (e.g. "scan completed", screen views) and device-level identifiers scoped to the app (no advertising ID).	Understanding which features work so we can improve the app.
Crash data	Firebase Crashlytics receives crash traces and device model / OS version.	Finding and fixing bugs.
Purchase state	If you subscribe to Pluck Pro, the purchase is processed by Apple's App Store or Google Play; RevenueCat (our subscription manager) receives anonymous purchase/receipt state. We never see your payment details.	Unlocking and restoring your Pro subscription.

What we don't do

No user accounts, emails, names, or contact lists — the app never asks for them.
No tracking across other companies' apps or websites; no advertising SDKs are active and no ATT/advertising identifiers are used.
No selling or sharing of personal data for advertising.
Camera and photo access is used only at the moment you scan or pick an image; Pluck never browses your library in the background.
Calendar access is used only to save/update the events you told Pluck to sync.

Retention

Uploaded scan images are processed transiently to produce the extracted event and are not kept as a library on our side; short-lived operational logs (without image content) and rate-limit counters expire automatically. Everything else — your events, drafts, and preferences — lives on your device and is deleted when you delete the app (or use your device's app-data controls). Analytics and crash data are retained per Google Firebase / Amplitude standard retention windows.

Your choices & rights

Deleting the app deletes your local data, and your anonymous install ID stops being used.
You can revoke camera, photo, calendar, and notification permissions at any time in system settings; the matching features degrade gracefully.
Depending on where you live (e.g. EU/EEA GDPR, California CCPA), you may have rights to access or delete data we hold. Because our identifiers are anonymous, the practical answer is usually that we hold nothing linkable to you — but contact us (below) and we'll help.

Children

Pluck is not directed at children under 13 and does not knowingly collect personal information from children.

Security

All network traffic uses HTTPS. The parsing service accepts requests only from genuine, attested installs of the app (Google Play Integrity / Apple App Attest) and applies per-install rate limits. The AI provider key lives on the server, never in the app.

Changes

We'll update this page when the policy changes and adjust the "Last updated" date above. Significant changes will also be noted in the app's release notes.

Contact

Questions or requests: see Support.