Privacy

Who is responsible for this

Plumi is a small team building an iPad app for GCSE and A-Level students. Anything on this page, you can ask us about at hello@tryplumi.app.

TODO(founder): name the legal entity that controls this data, and its registered address. UK GDPR requires the controller to be identifiable, and this page must say who that is before the site takes a single real signup.

TODO(founder): confirm whether the ICO data-protection fee applies to us and, if it does, add the registration number here.

What we collect when you join the waitlist

Only this:

• Your email address.
• The subject and exam board you picked, if you picked them. Both are optional, and the form works without them. We only accept the exact options the form offers. Anything else is thrown away rather than stored.
• Where you came from: the utm_source, utm_medium, utm_campaign, utm_content and utm_term parameters that were on the link you clicked, any advertising click identifier it carried, which version of the page you saw, and the host name of the site that linked to you. Not the full address of that page, just the host.
• A two-letter country code, worked out at the edge by our host.
• Your browser's user-agent string, and the date and time.

Your IP address is used for a few milliseconds to rate-limit the form, and then discarded. It is not written down. We don't ask for your name, your age, your school or your phone number, and there is nowhere on this site to give them to us.

The list lives in a Supabase database that only our server can read. The key that reads it never reaches your browser.

TODO(founder): once the Supabase project exists, state its region here: students and their parents are entitled to know which country their email address is sitting in. See docs/WAITLIST.md.

Why we ask what you study

Because we build the topic tree for each course by hand from the exam board's own specification, and we can only do a few at a time. Which courses people ask for decides the order we build them in. That's the entire use. It is not a profile, and it is not passed to anyone.

What we do with your email address

We send you two emails: one when your course is ready, one when we launch. That's what the list is for and that's all it does. We don't sell it, rent it, share it or use it for advertising.

We keep it until you ask us to remove you, or until the waitlist has done its job after launch, whichever comes first.

Analytics, and the line we don't cross

We use PostHog, on its EU servers, to count how many people reach the page and how many get as far as the form. It is set up deliberately narrowly:

• Person profiles are off, so PostHog is not building a record of you as an individual.
• Session recording is off. Nothing you type or point at is played back to us. And the only thing you can type on this site is your email address.
• Autocapture is off. We send a short list of named events we chose in advance, not everything you touch.
• Your email address is never sent to it. When you join the list we record that a signup happened and whether a course was picked. The address itself is stripped in code before anything leaves your browser.

If analytics isn't configured for a deployment, or your browser blocks it, nothing about the site changes.

Cookies and things stored in your browser

No advertising cookies, no third-party trackers, no cookie banner to dismiss. Two things are stored on your device:

• The link parameters you arrived with, kept in your browser's local and session storage so that the first thing that brought you here still gets the credit if you come back a week later.
• PostHog's own identifier for this browser, kept in local storage and a cookie, so a returning visit isn't counted twice.

Clearing your browser data removes both, and the site carries on working.

The app is a separate thing

Plumi itself is local-first: it works offline and needs no account, and what you write stays on your iPad. When the app ships it will have its own privacy notice covering how it handles your work. This page covers the website only.

Your rights, and the quick way to use them

Under UK data protection law you can ask to see what we hold about you, correct it, or have it deleted, and you can object to us holding it at all. There is no form for this.

Reply to any email we send you and say the word, and you're off the list. Or write to hello@tryplumi.app. Deleting a waitlist row takes seconds and we'd rather do it than argue.

If you think we've handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix it first.

Changes to this page

If this changes in a way that matters (a new thing collected, a new company involved), we'll email the people on the list rather than quietly editing the date at the top.