Privacy Policy

• Everything you tell Pluto is readable by everybody else in your family. That is the product, not a side effect.
• Your messages are sent to Anthropic’s model so the bot can work. They are not used to train it.
• We never see your card. Dodo Payments handles that.
• We do not sell anything to anybody, ever.
• Your data is stored in Singapore.

From Telegram. Your numeric Telegram id, your first name, and — only if you have set them — your last name, username and profile photo. We never receive your phone number, and we do not ask for an email address.

What you send the bot. The full text of your messages, kept verbatim, alongside the notes the model writes from them. The whole exchange — what you said and what Pluto replied — is kept as conversation history so the bot has context for what you say next.

What you ask it to do. Reminders and their text, who they are for, and when they are due.

About your family. Its name, its timezone, who is in it and who owns it, and invitation links that have been created.

Usage. A row per message on the free plan, recording the date and whether the message recorded anything, so the daily allowance can be counted.

Billing. Only the customer and subscription identifiers Dodo gives us, and your plan status. No card number, no expiry, no billing address, no name on the card.

Signing in. A cookie holding a signed token that says who you are. It is HTTP-only, so no script on the page can read it. The one-time links the bot sends are stored only as a SHA-256 hash, so a copy of our database does not let anybody sign in as you.

There are no third-party analytics, no advertising trackers and no cookies beyond the sign-in one.

Running Pluto means other companies necessarily handle your data. These are all of them:

Telegram

Carries every message to and from the bot. Pluto is a Telegram bot, so Telegram sees everything you send it, under its own privacy policy.

Telegram FZ-LLC, United Arab Emirates

Anthropic

Runs the model that reads your messages, decides what is worth keeping, and answers your questions. Your message text and your family's existing notes are sent to it to do that.

Anthropic PBC, United States

Neon

The database everything is stored in.

ap-southeast-1, Singapore

Vercel

Hosts the bot and the dashboard, and runs the scheduled jobs that send reminders.

sin1, Singapore

Dodo Payments

Takes payment for Pro as merchant of record. They are the seller on the invoice, they collect the email and billing details you give at checkout, and they handle the card. No card details ever reach Pluto.

Merchant of record; billing data held by Dodo

Beyond these, we share your information only when the law requires it, and we will tell you if that happens unless we are forbidden from doing so. We do not sell personal data, and we do not disclose it for advertising.

This is worth saying on its own, because it surprises people. A family is one shared record. Anybody in your family can read every note, every reminder and every message ever sent to the bot by anybody else in it, from the bot and from the dashboard. Somebody who joins later can read everything written before they arrived.

If you would not want a particular relative reading something, do not tell Pluto.

What you record will often be about somebody else — a child, a parent, a neighbour, the plumber. When you do that, you are the one deciding to record it. Please only record what you genuinely need, and expect that everyone in your family will read it.

If somebody believes their information is in a family’s record and should not be, they can write to us at support@askpluto.app and we will act on it.

Everything is stored in Singapore: the database in Neon’s ap-southeast-1 region, with the application running in Vercel’s sin1. Sending your message to the model, and taking payment, involve transfers outside India, to the countries named above.

We keep your family’s record for as long as the family exists. One thing to be plain about: when a note is deleted — by /undo or from the dashboard — it is marked as deleted and stops being shown or used, but the row remains in the database. It is not immediately erased. Expired sign-in tokens are deleted daily.

Ask us to delete a family and we will remove its record, including the rows behind deleted notes. Some information may persist for a while in encrypted backups, and billing records are kept as long as tax law requires.

Under the Digital Personal Data Protection Act, 2023, you may ask us to give you a copy of what we hold about you, correct anything wrong or incomplete, delete it, or tell you who we have shared it with. If you are in a place with its own rules — the UK or the EU, say — you may have equivalent rights, and we will honour them.

Some of this you can do yourself, immediately: the dashboard shows the whole record, the bot’s /undo removes the last thing it saved, and a family owner can remove a member at any time.

For anything else, write to support@askpluto.app. We will reply within 30 days. Deleting your own information may mean leaving your family, since the record is shared.

Traffic is encrypted in transit and the database requires TLS. Sign-in tokens are stored hashed and are single-use. Access to a family’s record is checked against the database on every request, so removing somebody takes effect at once rather than whenever their session happens to expire.

No system is perfectly secure. If a breach affects you, we will notify you and the Data Protection Board of India as the Act requires.

Pluto is only for adults. You must be at least 18 to use it, and we do not knowingly collect information from anybody younger. If you believe a child is using Pluto, tell us and we will remove the account.

If we change this policy in a way that materially affects you, we will say so through the bot or the dashboard before it takes effect.

Complaints go to support@askpluto.app, addressed to the Grievance Officer, Shivam Rana Digital Solution LLP, Lucknow, Uttar Pradesh, India. If we have not resolved it to your satisfaction, you may escalate to the Data Protection Board of India.