1. Who is responsible
The controller for personal information described in this policy is Be a Goose, LLC, at 5716 Corsa Avenue, Suite 110, Westlake Village, CA 91362-7354. Contact us at support@plumbcoach.com.
2. Data that stays on your Mac
Camera images and all posture data are processed only on your Mac. Camera images are discarded during use, while posture data remains local. We do not collect, receive, or share either through normal product use or diagnostics. This includes information Plumb uses to personalise monitoring and show your posture history or progress.
We do not use camera or posture data to build an advertising profile or train an AI model. You control this local data through Plumb and macOS and can remove it by deleting Plumb’s local application data. If you deliberately include posture-related information in a support message, we use it only to respond to that request. Deleting local data does not erase separate trial, licence, payment, or support records.
3. Information processed off your Mac
| Purpose | Information | Why we use it |
|---|---|---|
| Trial and licensing | Limited device, trial, licence-plan, activation, and licence-status information. We do not receive camera images or posture data. | Provide the trial and paid features, enforce one trial and the two-device limit, prevent abuse, and recover access. |
| Payments | Order, subscription, invoice, transaction, plan, payment-status, contact, billing, and tax information handled by our payment provider. We do not receive full card details. | Process orders, renewals, refunds and disputes; provide receipts and the billing portal; keep financial records. |
| Service security | Ordinary network, request, and security information, which may include an IP address and request time. | Protect the service, diagnose availability, and prevent automated abuse. |
| Product events | Limited events showing whether the trial, purchase, and activation flow worked. | Understand whether the trial and purchase flow works. There is no advertising profile or cross-service tracking. |
| Updates | Ordinary request data such as IP address, app version, operating system, and request time may be processed by the download host when Plumb checks for or downloads an update. | Deliver, secure, and troubleshoot app updates. |
| Support and feedback | Your message, any files you deliberately attach, and an optional contact email. Do not send camera frames, posture history, licence keys, passwords, or information you do not want support to receive. | Respond to you, investigate issues, and improve Plumb. |
4. Crash reporting and feedback diagnostics
Plumb sends limited error, crash, hang, app-version, and basic macOS information to our diagnostics provider. Crash sharing is on by default and can be turned off at any time in Plumb’s settings. Turning it off does not affect reports already sent.
When you submit in-app feedback, you separately choose whether to include limited diagnostics such as app version, macOS version, camera-permission state, whether monitoring is active, and recent non-sensitive app events. You may provide a contact email, but it is not required.
Diagnostics exclude camera images, all posture data, licence credentials, raw device identifiers, screenshots, session replay, and the contents of your work. Default personal-information collection is disabled and error content is scrubbed before transmission.
5. Legal bases
Where UK or EEA data-protection law applies, we process trial, licence, purchase, update, and requested support information because it is necessary to perform our contract or take steps you request before a contract. We process security, fraud-prevention, limited product-flow measurement, service improvement, and recordkeeping where necessary for our legitimate interests, balanced against your rights. We process records where needed to meet tax, accounting, consumer, and other legal obligations. Optional diagnostic attachments and any optional contact detail are processed on the basis explained at collection; where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.
7. International transfers
Our providers may process information in the United States and other countries. Where UK or EEA transfer rules apply, we will use an approved transfer mechanism such as an adequacy decision, the EU Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, or another lawful safeguard, and complete any required transfer assessment.
8. Retention and deletion
- Short-lived checkout, activation, product-flow, and security records are deleted or de-identified when they are no longer needed to complete the request, operate the service, or prevent abuse.
- Trial, licence, and payment records are kept while needed to provide and recover purchases, enforce plan limits, resolve disputes, and meet tax, accounting, and legal duties. They are deleted or de-identified when those purposes no longer require them.
- Diagnostic events are normally retained for no more than 90 days unless an event must be retained separately for an active security or support investigation.
- Support and feedback records are normally deleted within 24 months after the last interaction, unless needed for an unresolved dispute, security matter, or legal obligation.
You can ask us to delete eligible information. We may need to verify the request and may retain a minimal record where deletion would undermine licence enforcement, fraud prevention, a legal claim, or a legal duty. A full refund or deletion of the records needed to prove a purchase may end access to that purchase.
9. California and other privacy rights
California residents may ask us to disclose the categories and specific pieces of personal information we collected about them, the sources and business purposes for that collection, and the categories of providers to whom it was disclosed. They may also ask us to correct or delete eligible information and may use an authorised agent where California law permits. We will verify requests in a proportionate way. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes that create a right to limit under the CCPA. We will not discriminate against you for exercising a California privacy right.
Depending on where else you live, you may also have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and appeal or complain to a privacy regulator. Send a request to support@plumbcoach.com. Tell us the email used at checkout and provide only the minimum information needed to locate the relevant record. Where UK or EEA law applies, you may also complain to the UK Information Commissioner’s Office or your local EEA supervisory authority.
10. Security and children
We use reasonable technical and organisational safeguards designed to protect information, including access controls, encryption in transit, data minimisation, and service-provider security controls. No system is perfectly secure, so keep your Mac, email, and licence credentials secure and contact us if you suspect misuse.
Plumb is not directed to children under 13 and we do not knowingly collect their personal information. A parent or guardian who believes a child has sent us information should contact us for deletion.
11. Changes
We will update this policy before materially changing what Plumb collects or materially expanding a diagnostics flow. We will post the new effective date and provide additional notice or choice where required.