ON THE WAITLIST
We keep three things:
- your email, to tell you when Plunk launches;
- your bottle (the recording or the note) and the Tide it answered, so it can float on launch day;
- your referral code and who invited you, for your place in line.
No name, no location, no tracking cookies. Before your bottle floats, it goes through the same checks as every bottle in the app.
See, download or delete your waitlist bottle. We email you a link; nothing else is needed.
IN THE APP
- Who others see: your ship name, its look and your country. Never your email. A first name or one social handle only if you choose to show them to an anchored Cove partner, and they go when the Cove closes.
- What we keep: your email, birth year (Plunk is 18+), country, time zone, your ship, the bottles you cast, what you do with bottles that reach you (opened, waved, kept, reported), your Voyage progress and Passport, and your notification settings.
- Checking bottles: recordings are transcribed and every public bottle is checked by automated rules and an AI classifier before it floats. Some are reviewed by a person. We never identify people by their voice.
- How Plunk is used: we record what you do in the app (cast, opened, waved, shared and so on), never what your bottles say, to see what works. It stays on our own servers, no third-party trackers, for 90 days, and goes at once if you close your account. It’s in your data download.
HOW LONG WE KEEP IT
- Waitlist entries: until launch day, or until you delete yours.
- A bottle you delete leaves every shore, Chest and share page at once, and its recording is deleted.
- A closed account is erased for good within 30 days.
Exact retention periods for everything else come with the app’s privacy policy.
YOUR CHOICES
- Download your data: in the app, Helm → Your data → Download my data, or on the web at getplunk.app/account. You get everything we hold about you as a file.
- Delete your account: Helm → Your data → Delete account, or on the web at getplunk.app/account without the app. You leave the sea at once: your bottles disappear from every shore, Chest and share page, and you’re signed out everywhere. Everything left is erased within 30 days.
WHO HELPS US RUN PLUNK
Cloudflare (file storage), Fly.io (servers and database), Vercel (this website), Resend (email), Deepgram (transcription), Anthropic (bottle checks) and Expo (app notifications). If you verify a phone, Twilio sends and checks the code; we keep only a scrambled fingerprint of the number, never the number. Writing to a Lighthouse without an account goes through Cloudflare Turnstile’s check that you’re a person. Plunk+ is sold through Google Play and managed by RevenueCat, which tells us only whether your Plunk+ is active and until when. They handle data only to provide their service to us.
CONTACT
Questions about your data: hello@getplunk.app. Safety concerns, including anything involving a child: safety@getplunk.app (see our child safety standards).