Plumb is built so that the most personal thing about you, how you sit, breathe and move, stays yours. This policy explains, in plain English, exactly what Plumb does and doesn’t do with your information.
Who this policy is from
Plumb (the “app”) is an independent iOS app provided by Mohammad Aljarad (“we”, “us”). Plumb is a wellness and posture-awareness tool. It is not a medical device and does not diagnose, treat, monitor or prevent any medical condition. If you have any health concern, please consult a qualified clinician. You can reach us any time at syrianapps.business@gmail.com.
Plumb has no account and no servers
You don’t create an account, and you never give us your name, email or any sign-in details to use the app. Plumb does not operate any backend server, so there is no Plumb-controlled database that holds your information. The data Plumb creates lives in a private store on your device.
What data Plumb handles, and where it lives
All of the following is stored locally on your device using Apple’s SwiftData framework. None of it is sent to us. It is only ever copied off your device if you turn on iCloud sync (see below), in which case it goes solely to your own private iCloud account.
| Data | Why | Where it lives |
|---|---|---|
| Your neutral-posture calibration (head angle and, in camera mode, posture metrics) | To measure how far you’ve eased from your own neutral during a session | On device; your private iCloud only if you enable sync |
| Session records (start/end time, duration, your 0–100 scores and summaries, which mode) | To show your post-session report and your Insights trends | On device; your private iCloud only if you enable sync |
| Drift events (when and how long you slipped forward) | To mark slump moments in your report | On device; your private iCloud only if you enable sync |
| Pain log entries (optional intensity, note, body area, time) | Your own private record, for spotting your own patterns | On device; your private iCloud only if you enable sync |
| Preferences (selected focus areas, session length, goals, reminder schedule, nudge settings) | To remember how you like Plumb set up | On device; your private iCloud only if you enable sync |
| Subscription status (tier and expiry only) | To unlock premium features you’ve bought | On device; billing is handled by Apple |
Camera and AirPods data is processed on-device and discarded
In camera mode, Plumb uses your iPhone’s front TrueDepth camera to read your head and upper-spine posture in real time. The camera image and depth data are processed frame-by-frame and immediately discarded. They are never shown back to you, never saved to disk, and never uploaded. Only the resulting posture scores and session summaries are stored.
In hands-free mode, Plumb reads head motion (pitch, roll and yaw) from compatible AirPods or Beats using Apple’s headphone-motion API. That raw motion stream is never recorded or stored; only your per-second scores and session summaries are kept.
Plumb’s on-device sensing pipeline contains no networking code at all. This is enforced at build time so that camera and motion data physically cannot leave your device from that part of the app.
iCloud sync (optional, off by default)
Plumb ships with iCloud sync turned off. If you choose to enable it in Settings, your Plumb history is synced through Apple’s CloudKit to your own private iCloud database so it can move between your devices. This data is visible only to you through your Apple ID; it never reaches us, and Plumb has no ability to read it. Turning sync on or off takes effect after you restart the app.
Three things are never synced, even with iCloud sync on: Apple Health data, raw camera frames, and the AirPods motion stream.
Apple Health (write-only)
If you allow it, Plumb can log each completed session as a Mindful Session (Apple Health’s standard mindfulness category) in Apple Health. Plumb only writes that single entry; it never reads any data from Apple Health. Because Plumb has no servers, this data goes only into your own Apple Health store on your device; it can never reach us. You can grant or revoke this any time in iOS Settings → Privacy & Security → Health. Whether your Health data then syncs via iCloud is governed entirely by your own Apple settings, not by Plumb.
Purchases
Plumb+ features are sold through Apple’s App Store using StoreKit. Apple handles all billing and payment verification. Plumb never sees or stores your card or payment details, only your subscription tier and its expiry date, held locally to unlock features. Manage or cancel any subscription in App Store → Subscriptions.
Notifications
Posture-drift nudges, reminders and session-complete messages are local notifications generated on your device. Plumb has no push server and sends nothing to any server to deliver them. If you decline notifications, the rest of the app works normally.
Live Activity and Dynamic Island
During a hands-free session, Plumb can show a Live Activity on your Lock Screen and in the Dynamic Island. It displays a small posture figure, a short coaching word, your elapsed time, and a Stop control. It deliberately never shows your 0–100 score on these surfaces: that number lives only in Insights, inside the app. The Live Activity is generated and updated entirely on your device.
No tracking, no analytics, no advertising
Plumb does not track you across other apps or websites, does not use the advertising identifier (IDFA), and contains no analytics or advertising SDKs. Its App Store Privacy Manifest declares no tracking and no data collection. There are no third-party services embedded in the app and no data brokers involved, because no data is ever transmitted.
Permissions and your control
- Camera — requested when you start a camera session; revoke any time in iOS Settings.
- Motion (AirPods) — used when compatible headphones are connected; manage in iOS Settings → Privacy & Security → Motion & Fitness.
- Apple Health — optional, write-only; manage in iOS Settings.
- Notifications — requested only when first relevant.
Declining any permission doesn’t break the app; the related feature simply stays off.
Keeping and deleting your data
Your data stays on your device until you remove it. You can erase your entire session history at any time from Settings (your preferences are kept so you don’t have to set Plumb up again). Deleting the app removes its on-device data. If you had enabled iCloud sync, you can also remove Plumb’s data from iCloud via iOS Settings → your name → iCloud.
Security
Your data is stored in the app’s private container and protected by iOS’s built-in, device-level file encryption. Plumb relies on these platform protections rather than adding its own encryption layer.
Children
Plumb is intended for a general audience and is not directed at children under 13. It does not knowingly collect data from children; indeed, it does not collect personal data from anyone.
Your rights
Because Plumb holds no personal data on any server and operates no account, there is nothing about you for us to access, export, correct or delete on our side. You remain fully in control of the data on your own device, as described above. If you’re in the UK or EU and have a question about your rights under UK GDPR / GDPR, contact us and we’ll help.
Changes to this policy
If Plumb’s data practices change, we’ll update this page and revise the “last updated” date above. Material changes will be reflected here before they take effect in a new version of the app.
Contact
Questions about privacy? Email syrianapps.business@gmail.com.