Privacy Policy
1. Who We Are
Pluma is a mobile application developed and maintained by Roberto Hortal, an individual developer based in Spain ("we", "us", "our"). This Privacy Policy explains how we handle information when you use the Pluma app.
For GDPR purposes, Roberto Hortal is the data controller for any personal data described in this policy.
2. Summary (Plain Language)
- Pluma stores all your data on your device only. Nothing you enter in the app is ever transmitted to our servers, third-party services, or any external system.
- We do not collect personal data. We do not have accounts, logins, or cloud sync.
- We do not use advertising networks, tracking pixels, or analytics SDKs.
- The only data that exists is what you type into the app — and it stays on your phone.
3. What Data We Process
3.1 Data You Enter Into the App
Pluma may store the following information locally on your device:
| Category | Examples | Where stored |
|---|---|---|
| Health data | Medication doses, injection dates, injection sites, side effects | Device only (SQLite) |
| Body measurements | Weight, date | Device only (SQLite) |
| App preferences | Medication type, dose schedule, language, notification settings | Device only (AsyncStorage) |
| Appointment notes | Pre-visit summaries you compose | Device only (SQLite) |
3.2 Data We Do NOT Collect
We do not collect: names, email addresses, location data, device identifiers, crash reports sent externally, analytics events, or any data from your contacts, camera, or microphone.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, our legal basis for any processing described above is Article 6(1)(b) GDPR (processing necessary to perform a service you have requested) and Article 9(2)(a) GDPR (explicit consent for health data, given by your voluntary use of the app for its stated purpose).
Because all data is stored locally on your device and never transmitted to us, we are not acting as a traditional data controller for most purposes — you are the sole custodian of your own data. Nonetheless, we provide these disclosures in the interest of full transparency.
5. Data Sharing and Disclosure
We do not share your data with advertising networks, analytics companies, cloud storage providers, healthcare systems, insurers, or any third party whatsoever.
The only scenario in which your data could leave your device is if you choose to use your device's system backup (e.g. Android Auto Backup or iCloud Backup). In that case, Apple's or Google's privacy policies govern how that backup data is stored.
6. Data Retention
Your data is retained on your device for as long as you use the app. You can delete all data at any time by uninstalling the app. We do not retain any copies of your data.
7. Your Rights Under GDPR
- Right of access — You can view all your data directly within the app at any time.
- Right to rectification — You can edit any entry in the app.
- Right to erasure — You can delete individual entries or uninstall the app to erase all data.
- Right to data portability — Future versions of Pluma will include a data export feature.
- Right to object — You may stop using the app at any time.
- Right to lodge a complaint — You may contact the Spanish Data Protection Authority (AEPD) at www.aepd.es.
To exercise any of these rights, contact us at: [email protected]
8. Children's Privacy
Pluma is not directed at children under 16 years of age. We do not knowingly collect data from children.
9. Security
Because your data never leaves your device, the primary security layer is your device's own security (screen lock, device encryption). We have no server infrastructure that could be breached because we hold no data.
10. Changes to This Policy
If we introduce features that change our data practices, we will update this Privacy Policy, display an in-app notice before the change takes effect, and require your consent before collecting any new categories of data.
11. Contact
For privacy questions, data requests, or concerns:
Email: [email protected]
Developer: Roberto Hortal
Location: Spain, European Union
We aim to respond to all privacy enquiries within 30 days.