Privacy policy

Who is responsible

Pliny is operated by Filetrack Inc., based in a Delaware corporation in the United States, who acts as the data controller for the service at https://pliny.life. Questions and requests about your data go to support@pliny.life.

Who can use Pliny

The person whose work is planned always owns the account. There are no parent, guardian, or supervision accounts. An owner may invite a trusted person as a buddy and decide exactly which areas that buddy can view or edit; the owner can change or revoke that access at any time. A user may also share one task with selected people as editors or participants. Accepting a shared task does not expose either person’s other tasks, calendar, sources, or workspace.

What we collect

• Account information. When you sign in with Google we receive your name, email address, profile picture, and a Google account identifier. When you sign in with Apple we receive an Apple account identifier and an email address, which is a private relay address if you chose to hide your email; Apple shares your name only the first time you sign in. We use these only to create and secure your account. Signing in with a private relay address creates a separate account from one created with your ordinary address.
• Google data you choose to connect. Connecting Gmail and Google Calendar is a separate, optional step after sign-in. If you connect them, Pliny reads email messages and calendar events to find deadlines, requirements, and fixed commitments, and creates one secondary calendar named Pliny for planned work blocks.
• Plaud recordings you choose to connect. Connecting a Plaud account is a separate, optional step. If you connect it, Pliny reads the list of your recordings and the transcript Plaud has produced for each one, and stores that transcript encrypted. Pliny never downloads the audio and never changes or deletes anything in your Plaud account.
• Content you add. Tasks you type, documents, images, and audio you upload, and notes you make in Pliny.
• Shared-task invitations and contacts. When someone shares a task, Pliny stores the invited email address, assigned role, acceptance status, and each accepted participant’s progress. The invitation email includes the inviter, task title, deadline, role, and completion rule, but not notes or source content. After acceptance, Pliny keeps a one-way contact for the inviter so that person can be suggested for a later task; being a contact grants no access.
• WhatsApp reminders you choose to enable. Pliny stores your encrypted WhatsApp or mobile recipient identifier, consent time, reminder preferences, and delivery status. It does not read or retain your other WhatsApp conversations.
• Assistants you choose to connect. If you connect ChatGPT, Claude, or another supported assistant, Pliny stores a revocable connection and shares only the task fields covered by the permissions shown on the consent screen. Pliny does not share connected email, documents, recordings, or provider credentials through this connection.
• Technical information. Security and audit logs containing identifiers, timestamps, and outcome codes. They do not contain message bodies or file contents.

How we use Google user data

Pliny requests the following Google permissions and uses each one only for the purpose described:

• Sign-in (openid, email, profile): to identify you and create your account.
• Read Gmail (gmail.readonly): to find requirements, dates, and supporting evidence in your inbox. Pliny never sends, modifies, or deletes email.
• Read Google Calendar (calendar.readonly): to treat your existing events as fixed commitments when planning. Those events are never changed.
• Manage calendars created by Pliny (calendar.app.created): to create and update the Pliny calendar and the work blocks in it. Pliny cannot edit your other calendars.

Pliny stores only the parts of a message or event that may support a task, along with a link back to the source, so you can always see why something is in your plan. It does not copy your whole mailbox. Retained excerpts are analysed to identify concrete tasks, split messages containing several tasks, and extract dates and requirements. Clear tasks are added to your task list; uncertain findings are shown for review. Pliny does not use Google user data to build profiles for advertising, does not sell it, and does not use it to train generalized artificial-intelligence or machine-learning models.

Pliny’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

WhatsApp reminders

If you enable WhatsApp reminders, Pliny sends selected task titles and times to Meta only when a reminder is due, plus a one-time confirmation message when you link your number. You initiate the link from WhatsApp, can set quiet hours, and can disconnect at any time; disconnecting deletes the stored recipient identifier and cancels pending WhatsApp reminders. If you choose text message reminders instead, the same task titles and times are sent through Twilio, our SMS provider, only when a reminder is due, plus the verification code and a one-time confirmation when you link your number.

Plaud recordings

If you connect a Plaud account, Pliny checks Plaud’s servers, which are located in the United States, about once a minute for new recordings and stores each finished transcript encrypted, linked to its recording. Transcripts are sent as text to the Google Gemini API to propose tasks and deadlines and to TypeSafe’s Jev API to classify those findings. Clear tasks are added to your task list; uncertain findings wait in Review. You can disconnect at any time; disconnecting deletes Pliny’s stored access immediately, and deleting a recording in Pliny deletes its transcript and everything derived from it.

Legal bases

For people in the European Union and the United Kingdom, the General Data Protection Regulation applies. Under it, we process account information to provide the service you asked for (performance of a contract). We process Gmail and Calendar data, Plaud transcripts, uploads, recordings, and optional WhatsApp reminders on the basis of your explicit consent, which you give when you connect a source or reminder channel and can withdraw at any time. We keep security logs on the basis of our legitimate interest in keeping the service safe.

Sharing

We do not sell personal data. Information is shared only with people and assistants you explicitly authorize, within the limits you select, and with the infrastructure providers that host and process data on our behalf. A shared-task collaborator receives the task title, notes, deadline, recurrence and aggregate progress, but not its source evidence or anything else in the creator’s workspace. A connected assistant receives task information only when it invokes a permitted Pliny tool; its provider processes that information under the account and terms you have with it. On supported Apple devices, Pliny first transcribes a recording on the device. If that transcription has high confidence, only its text is submitted; if transcription is unavailable or uncertain, the recording is submitted for more accurate processing. Files, submitted recordings, transcript text, and task-bearing retained email excerpts may be sent to the Google Gemini API to produce text and possible planning items. Retained source text and proposed planning items are sent through Pliny’s private gateway to TypeSafe’s Jev API to classify whether they contain concrete, single or multiple tasks and whether each proposal is sufficiently supported. We may disclose information if the law requires it.

Storage and security

Google and Plaud access tokens are encrypted before they are stored and are never sent to your browser. Data is encrypted in transit and at rest. Access to each workspace and shared task is enforced in the database itself, so a buddy or task collaborator can see only what the owner has granted. Access and changes are recorded in the security audit trail.

Retention and deletion

• Disconnecting Google removes Pliny’s stored access tokens immediately and stops any further reading of your Gmail or Calendar. You can also remove Pliny from your Google account at any time from your Google security settings.
• Disconnecting Plaud removes Pliny’s stored access tokens immediately and stops any further reading of your recordings. Transcripts already imported stay until you delete them.
• Disconnecting WhatsApp deletes the encrypted recipient identifier and cancels pending WhatsApp reminders.
• Disconnecting an assistant in Settings revokes its Pliny access immediately. The assistant provider may separately retain conversation content under your account settings with that provider.
• Deleting an item in Pliny deletes the stored excerpts and derived facts for that item.
• Deleting your account in Settings removes your Pliny workspaces, sources, tokens, and derived data from the active service. It does not delete your original provider content or your Google calendars.
• You can choose to expire retained source content 30, 90, or 365 days after import in Settings. This applies to existing and future sources. Tasks remain without their deleted source evidence; otherwise sources stay until you delete them.
• Backups are encrypted and expire on a rolling schedule.

Your rights

You can access, correct, export, or delete your data, and object to or restrict processing, by using the controls in Pliny or by emailing support@pliny.life. We answer within one month. You may also lodge a complaint with your supervisory authority; in France that is the CNIL.

Recordings

If you upload or capture audio, you are responsible for having permission to record other people. Rules about recording lectures and conversations vary by place and context.

Changes

If this policy changes in a meaningful way we will tell you in Pliny and update the effective date at the top of this page.