PLOS Privacy Policy
1. Introduction and Who We Are
PLOS (Personal Life Operating System) is a personal productivity and life management application developed by Moses Ndifon (LifeOS AI). This policy explains what data we collect, how we use it, and your rights regarding your personal information. Contact email: plos.support@gmail.com.
2. Data We Collect
- Financial data: income sources, expenses, debt balances, investment account information, bank account connections via Plaid (account numbers are never stored — only masked last-4 digits and transaction data).
- Location data: GPS coordinates for nearby services, weather, emergency SOS, and family location sharing. Precise location is used only when the Safety module is active.
- Personal identifiers: name, email address, home address, date of birth — collected during account setup.
- Career data: resume text, job application history, job descriptions uploaded by the user.
- Health data: wellness check-in scores, medication reminders, medical notes entered by the user.
- Identity data: email addresses entered for breach monitoring via HaveIBeenPwned API.
- Device data: device type, operating system version, push notification token for Firebase Cloud Messaging.
- Usage data: which modules are accessed and how frequently — collected anonymously to improve the app.
3. How We Use Your Data
- To provide personalized AI-powered financial advice, career guidance, and life management recommendations.
- To sync financial account data via Plaid for real-time balance and transaction tracking.
- To send push notifications for bill reminders, job matches, weather alerts, and security alerts.
- To monitor your email address for data breaches via HaveIBeenPwned.
- To provide GPS-based nearby services, weather, and emergency features.
- We never sell your personal data to any third party.
- We never use your data for advertising purposes.
- We never share your financial data with employers, insurers, or credit bureaus.
4. Third Party Services
PLOS connects to the following third-party services strictly to provide app functionality. Their own privacy policies govern how they handle any data we transmit:
- Anthropic Claude API (AI processing) — anthropic.com/privacy
- Plaid (bank account connectivity) — plaid.com/legal/privacy-notice
- Firebase by Google (push notifications and real-time data) — firebase.google.com/support/privacy
- Google Maps Platform (location services) — policies.google.com/privacy
- HaveIBeenPwned (breach monitoring) — haveibeenpwned.com/Privacy
- OpenWeatherMap (weather data) — openweathermap.org/privacy-policy
- SerpApi (job and travel search) — serpapi.com/privacy
- ExchangeRate-API (currency rates) — exchangerate-api.com/privacy
- ElevenLabs (text to speech) — elevenlabs.io/privacy
- OpenAI (GPT for financial calculations) — openai.com/privacy
- Perplexity AI (real-time research) — perplexity.ai/privacy
- EIA (fuel prices) — eia.gov/privacy
5. Data Storage and Security
- All user data is stored in MongoDB with encryption at rest.
- All API communications use HTTPS/TLS encryption in transit.
- Plaid access tokens are encrypted using AES-256 before storage.
- API keys are stored as server-side environment variables — never in client-side code.
- Biometric authentication (Face ID, fingerprint) is handled entirely by your device's secure enclave — PLOS never has access to biometric data.
- We retain your data for as long as your account is active. You can request deletion at any time.
6. Your Rights
- Right to access: request a copy of all data we hold about you.
- Right to deletion: request complete deletion of your account and all associated data.
- Right to correction: update any incorrect information through the app settings.
- Right to portability: export your financial data as CSV or PDF at any time.
To exercise any of these rights, email plos.support@gmail.com.
7. Children's Privacy
PLOS is not intended for users under 17 years of age. We do not knowingly collect personal information from children under 17. If you believe a child under 17 has provided personal information through PLOS, contact us immediately at plos.support@gmail.com.
8. Location Data Specifics
PLOS requests location permission for: showing nearby hospitals, police contacts, gas stations, and restaurants in the Safety module; providing weather alerts for your current location; enabling the Emergency SOS feature to share your GPS coordinates with emergency services and family contacts. Location data is not shared with any third party except when you actively use the Share My Location feature which sends your coordinates to people you explicitly choose. Background location is only used when family location sharing is actively enabled by you.
9. Financial Data Specifics
PLOS connects to your bank accounts through Plaid, a regulated financial data aggregator. Your banking credentials (username and password) are entered directly on Plaid's secure interface — PLOS never sees or stores your banking credentials. Plaid provides PLOS with read-only access to your account balances and transaction history. PLOS does not initiate transfers, payments, or any transactions on your behalf.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via push notification and by updating the Last Updated date at the top of this page.