Privacy policy
This page is a draft pending legal review.
Who we are
PlushieCare is made by EOI Digital ("we"). We are the controller of the personal data described here. You can reach us at support@plushiecare.com.
What we collect
| Data | Why |
|---|---|
| Your email address and password | To sign you in, to send the emails that confirm your address or reset your password, and to answer support requests. Your password is stored only in a scrambled (hashed) form. |
| Letters by email, only if you turn them on | A few letters a month at most from your plushie: your week, and a hello when you have been away. We keep when you turned them on and which letters were sent. Turn them off in Preferences or with the link in every letter. |
| Your name | Asked when you make your account. Shown to you, to your friends, and (its first word) on an invite you share. See "What your friends see" and "Invites" below. |
| Your date of birth | To check that you are 18 or over. See "Your birthday" below. |
| Your goals, check-offs, trips, plushies, Patchlings, rides, garden and garage, souvenirs, badges and balances | To run the app and keep your progress across devices. |
| Your friends and what you send them (good vibes, kind words, thank-yous, postcards, treats, presents and games), and the invites you make or take | To run friends and invites. |
| Moods and reflections | To show your mood chart and your journal. These are sensitive (health) data and are stored only with your separate consent. |
| What you'd like help with (optional, with your consent) | To suggest goals that fit. Stored only with your separate consent, and forgotten when you withdraw it. |
| Your answers about time, wake and sleep times, and how many goals | To build your checklist and time reminders and quiet hours. |
| Breathing sessions | To record a finished session and reward it. |
| Your device timezone | So that days, streaks and reminders follow your local time. |
| When you open and leave the app (start and end time, length, platform, app version and how you signed up) | To count visits and see how long the app is used, so we can make it better. No IP address, location or device id. |
| Crash reports (sent to Sentry) | To find and fix bugs. They carry your account id only, never your goals, moods or reflections. |
| Usage events (sent to PostHog and Google Analytics while the Usage data switch is on) | To understand which features help. Events never include text, titles or mood scores. Events about moods, reflections, breathing and paths go to PostHog only, never Google Analytics. Google Analytics sees a random id made for this install, never your account, name or email. |
Usage data: if your phone's region is set to a country in the EEA, the UK or Switzerland, usage events are off until you turn them on. Everywhere else they are on from the start. Wherever you are, you can turn them off or on at any time in the menu, under Privacy (the Usage data switch). Your choice is kept on your phone.
We do not collect your contacts, location, photos, microphone or advertising identifiers.
Your birthday
When you make your account we ask for your full date of birth, because PlushieCare is for adults 18 and over. We check it on your phone and again on our server, and we do not keep an account for anyone under 18. Your birthday is stored with your account, is never shown to anyone (friends included), is part of your data export and is deleted with your account. It can't be changed in the app once saved; if it is wrong, write to us.
What your friends see
Friends are people you add with a friend code or an invite. When someone accepts, they see your name and, unless you turn these off in the menu under Privacy: your plushie (with its nickname and outfit), your level, your latest badges, when you are on a roll, and your news from the last 7 days (a new badge, a new level, a trip home). They see your goal names and how many you did today only if you turn on "Share my goals with friends". Someone you send a friend request to sees your name while they decide.
Friends never see your moods, reflections, journal, what you'd like help with, your birthday or your email, and badges about moods, reflections or breathing are never shown. What you send a friend (good vibes, kind words, thank-yous, postcards, treats, presents, games and trips together) is seen by that friend. You can remove, block or report any friend at any time.
Invites
When you share an invite, anyone who has its code, in the app or on our invite web page (no sign-in needed), sees the first word of your name and which plushie you are sending, and nothing else. A code stops working after 30 days or 20 uses. If your message is forwarded, whoever receives it can see the same card. The invite page has no trackers and sets no cookies.
Why we can use it (lawful bases)
- Running the service you asked for: your account (with your birthday, for the age check), your progress, friends and invites.
- Your explicit consent: moods and reflections, and, in the EEA, the UK and Switzerland, usage events (off until you turn them on).
- Our legitimate interest in keeping the app working, secure and safe, and in making it better: crash reports, safety reports, our admin log, and usage events outside the EEA, the UK and Switzerland (on from the start, and you can turn them off at any time).
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), moods and reflections are sensitive personal information. Under the GDPR and the UK GDPR they are special category (health) data. In both cases we rely on your explicit consent, which we ask for before the first mood or reflection is saved.
Your consent for moods and reflections
You can withdraw this consent at any time in the app: open the menu, then Privacy. Withdrawing deletes every mood and reflection you have saved. Your plushie, goals and balances stay.
Who processes your data for us
| Processor | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Singapore |
| Sentry | Crash reports | United States |
| PostHog | Usage events, while Usage data is on | United States or European Union |
| Google (Google Analytics) | Usage events, while Usage data is on, under a random install id, never your account, and never about moods, reflections, breathing or paths | United States |
| Resend | Sending the emails that confirm your address or reset your password, and the letters you turn on | United States |
| Expo (EAS) | Delivering app updates | United States |
International transfers
Your data is transferred outside the Philippines, and, if you live in the EEA, the UK or Switzerland, outside your region. Each processor relies on Standard Contractual Clauses or the EU-US Data Privacy Framework (and its UK and Swiss extensions) to protect it.
How long we keep it
- Your account data is kept until you delete your account.
- Moods and reflections are deleted when you withdraw consent or delete your account.
- Crash reports are kept for up to 90 days.
- Database backups roll over on our provider's backup cycle, after which deleted data is gone from them too.
- If someone reports you, or we act on your account, the safety report (with the name you had then) and our admin log are kept for 24 months, even after you delete your account, so we can keep PlushieCare safe.
Your rights
- Access and portability: export all your data as a file from the menu: Your data, then Export my data.
- Erasure: delete your account from the menu: Your data, then Delete account, or by email (see Delete your account).
- Withdraw consent: in the menu, under Privacy, at any time, without affecting what happened before.
- Correction and objection: write to us and we will help.
- Complaints: you can complain to the Philippine National Privacy Commission, or to your local supervisory authority if you live in the EEA, the UK or another region with one.
Adults only
PlushieCare is for people aged 18 and over. If you are under 18, please do not use it.
No selling, no ads
We never sell your personal data and there is no advertising in PlushieCare. Your moods and reflections are never used for advertising.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.