Pliing
PRIVACY
Privacy Policy
In short: We store what Pliing needs to deliver notifications to you: your account, the devices you have enabled and the notifications you have received. We use no advertising or tracking services, do not sell data and do not ask Apple for your email address. Notifications are deleted automatically after 90 days, one-time codes when they expire, and you can delete your whole account in the app.
1. Data controller
Oclin Home AS is the data controller for personal data processed when you use the Pliing app, the API (api.pliing.app), the console (console.pliing.app) and the website pliing.app. Contact us at chb@oclin.no. More about the company is available at oclin.dev.
2. What we process, why and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Apple’s user identifier for your account, PliingID and name (optional, if you share it through Apple) | Create and sign in to your account and recognize it across devices | Contract (Art. 6(1)(b)) | Until you delete the account |
| Device information: name, platform, language, Apple push token, notification authorization status and your push choices | Register your devices and send push only to the ones you have enabled | Contract | Until you remove the device, sign out or delete the account. Invalid push tokens are cleaned up |
| Notifications you receive: title, text, level, sender, optional icon, time and read status | Show your inbox and deliver push | Contract | 90 days, then deleted automatically |
| One-time codes | Show the code to you in the app after on-device authentication | Contract | Stored encrypted and deleted when they expire (30 to 600 seconds). Codes are never sent in the push message |
| Senders and permissions you have approved or revoked | Control who can send to you | Contract | Until you delete the account |
| Projects and API keys you create (keys are stored only as hashes) | Let your scripts and services send notifications | Contract | Until you delete the key, project or account |
| Sign-in sessions and device-bound access keys | Keep you signed in and let us shut down a device you removed | Contract | Up to 90 days, or until you sign out. Expired sessions are cleaned up daily |
| Organizations: email address, organization name, memberships and roles, invitations, linked Stripe customer and subscription status, monthly usage counters (without content) | Console sign-in, member management, billing and quotas | Contract. Legal obligation (Art. 6(1)(c)) for billing records | For as long as the organization exists. Accounting records are kept as long as the Norwegian Bookkeeping Act requires |
| One-time code for email sign-in to the console (stored only as an HMAC) | Confirm that you own the email address | Contract | Valid for 10 minutes, deleted within an hour after expiry |
| Technical logs: IP address, time, request and error messages | Security, troubleshooting, rate limiting and abuse protection | Legitimate interest (Art. 6(1)(f)) | Short period, rotated regularly |
| Messages you send us | Answer and follow up | Legitimate interest / contract | As long as the matter requires |
For personal Apple subscriptions, we store a random account identifier, product and transaction identifiers, test or production environment, status and expiry. We use them to verify and restore purchases and prevent a purchase from being moved to the wrong account. We do not store card details or signed purchase receipts. Deleting your account removes the link to your user; remaining purchase references are deleted within 90 days after the last recorded subscription period expires. Processed server notifications from Apple are deleted after 90 days.
3. What we do not do
- The app asks Apple only for your name. We do not ask for your email address and do not store Apple’s private relay address.
- The app contains no third-party advertising, tracking or analytics services, and we do not sell personal data.
- We do not use the content of notifications for anything other than delivering it to you.
- Icons in notifications are fetched and stored by Pliing and shown from our servers, so the sender’s server does not learn that you opened a notification.
- We do not have access to your Apple password or payment details. Card payments are handled by Stripe, and App Store purchases are handled by Apple.
4. Push notifications and the lock screen
Push is sent through Apple Push Notification service (APNs). By default the push message is generic, and the title and text are not shown on the lock screen. If you turn on previews yourself, the title and text pass through Apple’s service to be shown on your device. One-time codes are never sent in the push message. They are shown only in the app after you confirm it is you with Face ID, Touch ID or your device passcode. The app requests Face ID access only for this purpose, and we do not receive any biometric data.
The Home Screen widgets show your latest notifications on your device. The widget uses a limited access key that can only read the five latest notifications, and an excerpt is stored locally on your device. Codes and code titles are never shown in the widget.
5. Who we share data with
- Senders: A sender you have approved sees that you approved it, which kinds of notifications it may send, and figures for its own sends. The sender does not see device names, push tokens, your inbox or other accounts. When you tap an action button in a notification, Pliing calls the sender’s URL from our servers. The call contains only the notification ID, the sender’s own event key and the button you tapped, not your IP address or your account.
- Apple (Sign in with Apple, the APNs push service and the App Store): processes sign-in, push delivery and purchases under Apple’s own terms.
- Stripe (organization payments): processes payment details and invoicing. Card data never reaches us.
- Brevo (email delivery): sends one-time codes and invitations for the console.
- Operations: We run the service on servers that we administer ourselves. Website statistics for pliing.app are collected with a self-hosted Plausible installation at plausible.oclin.dev, which uses no cookies and stores no personal identifiers.
- Authorities: We disclose data only where the law requires it.
Apple, Stripe and Brevo may process data outside the EEA. Transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or the standard contractual clauses (SCCs) that the providers offer.
6. Website and console
The website pliing.app uses no cookies. Your theme and language choice is stored locally in your browser and does not leave your device. The console uses a strictly necessary session cookie for sign-in and a cookie that remembers your language choice. We use no cookies for tracking or marketing.
7. Security
All communication uses HTTPS. Push tokens are stored encrypted, one-time codes are stored encrypted, API keys and sign-in codes are stored only as hashes, and sign-in credentials in the app are kept in the device keychain. Access to data is limited to those who need it, and we welcome security reports at chb@oclin.no. We take a daily backup of the database. Backups are kept for seven days, so deletions in the service carry through to the backups within seven days.
8. Your rights
You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. You can:
- Delete your account yourself in the app under Settings → Delete account and data. This deletes your account, devices, inbox, projects, API keys and permissions.
- Remove Pliing from your Apple Account under Settings → [your name] → Sign in with Apple.
- Remove individual devices and revoke senders in the app.
- Request access to or a copy of your data by writing to chb@oclin.no. We reply within 30 days.
You can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), if you believe we process data in breach of the rules. We appreciate it if you contact us first.
9. Children
Pliing is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, contact us and we will delete it.
10. Changes
We update this policy when the service or the rules change. For material changes we notify you in the app or on the website. The date at the top shows the latest update.
11. Contact
Oclin Home AS · chb@oclin.no · oclin.dev