Plenum Privacy Policy
- Everything you log in Plenum is stored on your phone first.
- If you sign in and leave Back up and contribute on, a copy of your Plenum data is backed up to our server, and your completed shot strings are added to a shared record of how pellets and slugs perform.
- Turn that switch off in Profile and nothing leaves your phone.
- There are no ads, no analytics, no tracking, and we never sell your data.
Who we are
Plenum is published by EX Corporation Oy, a company based in Finland. We are the controller of the personal data described here. You can reach us at info@exc.fi.
Data that stays on your phone
Plenum stores everything you log in a database on your phone. That includes your airguns, pellets and slugs, tunes, shot strings, velocities, notes, supplies and settings. It also includes readings from your chronograph, such as atmospheric data, and the Bluetooth identifier of the chronograph you connect to.
The app asks for these permissions, and only uses them for the purpose stated:
- Bluetooth, to find your FX chronograph and read each shot's velocity.
- Location (older Android versions only): Android 11 and earlier require it before an app may scan for Bluetooth devices. Plenum never reads your position.
- Camera and microphone, to record range clips when you choose to.
- Photo library (add only), to save clips you export.
Video clips stay on your device. They go into your photo library or to whoever you choose to share them with, and Plenum never uploads them.
Your account
An account is optional: without one, everything stays on your phone. You create an account by signing in with Apple (on iOS) or Google (on Android). We never see your password. When you sign in, our server receives and stores:
- a sign-in token from Apple or Google, which our server verifies with them;
- the account identifier Apple or Google issues for Plenum;
- your email address, if the provider shares one (with Sign in with Apple you can choose to hide it, and Apple then gives us a private relay address instead);
- your name, if the provider shares it.
We use these to identify your account, to attach your backups to it, and to reply if you contact us. We do not send marketing email.
Cloud backup
When you are signed in and Back up and contribute is on (the default), the app sends a compressed copy of its whole database to our server. That includes everything listed under "Data that stays on your phone" except video clips. It only sends a copy when something has changed, and on its own at most once every 18 hours. Shots recorded with a chronograph simulator are marked as simulated and are never shared.
A backup is only available to your account; other users cannot read it. Each backup carries a random identifier that the app creates when it is installed, so that backups from different phones can be told apart.
The shared record
With the same switch on, the app also contributes your completed, real (not simulated) shot strings to a shared record. Its purpose is to show, from real strings rather than box figures, how each pellet and slug performs. A contribution is a stripped-down summary of one string:
- the pellet or slug (make, name, weight, calibre, type, head size and lot);
- the airgun's make and model, calibre, barrel length and twist rate;
- the tune settings (regulator pressure, hammer, valve, transfer port and power settings);
- the chronograph model, firmware and distance from the muzzle;
- temperature, air pressure, humidity and altitude, where they were recorded;
- every shot's velocity and whether you excluded it, plus the statistics computed from them;
- the month the string was shot;
- the random installation identifier, and a key derived from it so that strings from the same rifle can be grouped.
A contribution never contains your name, email, notes, the name you gave your rifle, video, your chronograph's Bluetooth identifier, or the exact date and time you were shooting.
Other users will only ever see statistics aggregated across many shooters, never your individual strings or anything that identifies you. The shared record is not yet open to anyone.
Turning it off
Switch off Back up and contribute in Profile and nothing further leaves your phone. Signing out also stops backups and revokes the app's access token on our server. Neither deletes anything on your phone.
Other apps and services
- Apple and Google handle sign-in under their own privacy policies.
- FieldSolve. If you tap the button to send a string to FieldSolve, the app hands velocity, spread and ballistic coefficient to the FieldSolve app on your phone. From then on, FieldSolve's own privacy policy applies.
- Sharing. Anything you share through your phone's share sheet goes only to the recipient you choose.
Plenum contains no advertising, analytics or crash-reporting software. We do not sell your data, and we do not use it to track you across other companies' apps or websites.
Legal basis (for users in the EU and EEA)
| What | Why | Legal basis |
|---|---|---|
| Account | To sign you in and keep your backups apart from everyone else's | Performance of a contract (GDPR Art. 6(1)(b)) |
| Cloud backup | To keep a copy of your data off your phone | Performance of a contract (Art. 6(1)(b)) |
| Shared record | To build a record of how projectiles really perform, for everyone who uses Plenum | Legitimate interests (Art. 6(1)(f)). You can object at any time by turning the switch off. |
How long we keep data
We keep your account, backups and contributions for as long as your account exists. You can delete your account at any time in the app, under Profile › Delete account, or by asking us (see how to delete your account). Deleting it erases your account details, every backup, and your contributions to the shared record from our live systems immediately; if you ask us by email, we do this within 30 days. Copies held in our server backups are not used and expire on their own within 35 days. Everything stored on your phone stays there.
Security
All traffic between the app and our server uses HTTPS. The app keeps its access token in the phone's secure storage (the Keychain on iOS, the Keystore on Android). Backups are only ever returned to the account that uploaded them.
Your rights
You have the right to access your data, correct it, delete it, receive a copy of it, restrict how we process it, and object to processing. You can delete your account yourself in the app. To use any of the other rights, or if you cannot open the app, email info@exc.fi from the address linked to your account, or tell us your account's sign-in method. We reply within 30 days.
You can also complain to a data protection authority. In Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).
Children
Plenum is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Changes
If this policy changes, we will update the effective date above. If a change affects what leaves your phone, we will also tell you in the app before it takes effect.
Contact
EX Corporation Oy, Finland · info@exc.fi