Privacy Policy

Effective date: May 13, 2025

This Privacy Policy explains how Ploq ("Ploq", "we", "us", or "our") collects, uses, stores, and protects your information when you use the Ploq mobile application (the "App"). Ploq is operated by Ploq Team. By using the App, you agree to the practices described in this Policy.

1. Our Privacy Principles

Ploq is built around a simple promise: your notes belong to you. We collect the minimum data necessary to run the App, we do not sell your information, and we do not show third-party advertising.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and an authentication identifier. If you sign in with a third-party provider (such as Apple or Google), we receive only the information that provider returns to us (typically a unique user ID and email address).

2.2 User-Generated Content

The App stores the content you choose to save in it, including:

• Notes, messages, and text you type into Stream, Spaces, or the Library
• Images, files, and links you attach
• Reminders, tags, calendar entries, and other metadata you create
• Content placed in the Media Vault or Decoy Vault

This content is associated with your account so it can sync across your devices.

2.3 Subscription & Purchase Data

When you purchase a subscription (Basic+ or Premium), the transaction is processed by Apple. We receive a receipt or entitlement that confirms your active subscription tier. We do not receive or store your payment card information.

2.4 Diagnostic & Usage Data

We may collect limited technical information to keep the App reliable, such as crash reports, app version, device model, operating system version, and basic usage events (e.g., a feature failed to load). This data is used only to diagnose issues and improve the App. We do not use it to build advertising profiles.

2.5 Information We Do Not Collect

Ploq does not collect your precise location, contacts, microphone audio, health data, or browsing activity outside the App.

3. How We Use Your Information

• To create and secure your account
• To store, sync, and display the content you save
• To deliver subscription features you have purchased
• To send essential service messages (e.g., security or account notices)
• To diagnose crashes and improve performance, stability, and security
• To comply with legal obligations

4. How Your Data Is Stored

Your account and content are stored in our cloud database hosted by Supabase. Data is transmitted between your device and our servers over encrypted connections (HTTPS / TLS). Access to the database is restricted by row-level security rules so that only you can read or write your own content.

Locally, the App also caches your content on your device so it remains usable offline. You can add an additional layer of protection by enabling the biometric lock (Face ID / Touch ID) in Settings.

5. Third-Party Services

We rely on the following service providers to operate the App. Each provider processes data only as needed to deliver its service.

• Supabase — authentication, database, and file storage for your account and content. See supabase.com/privacy.
• Apple In-App Purchases — processes subscription payments and provides receipts. See apple.com/legal/privacy.
• Expo / React Native — the application framework used to build and update the App. Expo may receive basic crash and build metadata. See expo.dev/privacy.

6. Advertising and Data Sales

We do not show third-party advertising in the App. We do not sell, rent, or trade your personal information or user-generated content to third parties. We do not share your content with data brokers or marketing networks.

7. Your Rights

You have the following rights with respect to your information:

• Access — view your content directly inside the App.
• Export — export your notes from Settings.
• Correction — edit or delete any note, message, or item at any time.
• Deletion — delete your entire account and all associated data.
• Withdraw consent — stop using the App and request deletion.

How to delete your account

8. Data Retention

We retain your account and content for as long as your account is active. When you delete your account, your content is removed from our active databases promptly. Backup copies may persist for a short period (typically up to 30 days) before being overwritten in the normal course of backup rotation.

9. Children

Ploq is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International Users

Ploq is operated from Thailand. If you use the App from outside Thailand, you understand that your information may be transferred to and processed in Thailand and in the regions where our service providers (such as Supabase) operate. We rely on industry-standard safeguards to protect your data during transfer.

11. Security

We use commercially reasonable measures to protect your information, including TLS encryption in transit, hashed credentials, row-level access controls, and optional on-device biometric lock. No service can guarantee absolute security, but we work to keep your data safe and to notify you of material incidents as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the App or by email and update the effective date above. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

13. Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Thailand, without regard to its conflict of laws principles. Any dispute arising out of or relating to this Policy will be resolved in the competent courts of Thailand.

14. Contact Us

If you have any questions about this Privacy Policy or about how your information is handled, please contact: