Privacy Policy

Effective Date: April 15, 2026 | Last Updated: August 9, 2026

Our Privacy Commitment

Plurilore is built around a deliberately narrow product model: academic analysis of religious, historical, and literary texts, with product restrictions, adult-access gating, rate limits, and operational controls designed to keep the service within that academic scope. That architecture matters for privacy. It changes what we collect, where data moves, what we retain, and which risks remain.

We do not sell your personal data. We use only essential cookies for authentication and security, store notes locally on your device instead of syncing them to our servers, keep role-based controls around internal access, and maintain auditable consent records tied to the current legal-document version.

Key Points Summary

• Multi-service architecture: The Service consists of a customer-facing frontend, a separate backoffice admin application, and a self-hosted RAG service that mediates AI requests.
• Academic-only AI scope: Chat and the optional inline discussion in Practice are intended for academic analysis, passage support, and text study. Personal spiritual direction, confessional intake, counseling-style use, and similar requests are outside the intended scope and may be refused, limited, or moderated.
• Notes stay local: Notes created in the Notes feature remain on your device. Mobile Notes use an encrypted, per-account local database; web Notes use local browser storage. They leave the device only when you export or transmit them.
• Core AI interactions are ephemeral: Accepted Chat and inline Practice discussion requests are processed at runtime to generate responses, but we do not provide a saved server-side conversation-history feature for those sessions.
• Internal access is role-based and logged: Backoffice access to user data is limited by role and audit logging.
• Processors still matter: Depending on the feature used, we rely on providers for payments, transactional email, hosting, optional OAuth login, mobile build/update and push delivery, privacy-limited crash monitoring, and AI/model processing.
• Adult-only service: We do not provide a separate minor mode or parental-consent workflow. Access to Chat, including inline Practice discussion, depends on an active record of current Terms acceptance.

Table of Contents

1. Scope & Service Architecture
2. Information We Collect
3. Legal Bases for Processing
4. How We Use Personal Information
5. AI, RAG, and Model Processing
6. Sensitive Content Boundaries & Adult-Only Access
7. Sharing, Recipients, and Processors
8. Cookies, Telemetry, and Operational Monitoring
9. Data Retention and Deletion
10. Security and Internal Access Controls
11. International Data Transfers
12. Your Rights and Product Controls
13. Regional Privacy Disclosures
14. Children's Privacy and Adult-Only Service
15. Changes to this Policy
16. Contact Information

1. Scope & Service Architecture

1.1 Covered Services

This Privacy Policy applies to personal information processed in connection with Plurilore, including:

• the customer-facing web application at plurilore.com and the Plurilore iOS and Android applications,
• authenticated chat, Practice, notes, pricing, and account areas,
• our backoffice/admin environment used for support, moderation, analytics, and operational review,
• our self-hosted retrieval-augmented generation service and related AI-processing infrastructure,
• our blog and wiki content systems,
• transactional emails and support communications.

1.2 Data Controller

The data controller is ONE CREATOR SRL (Romania), trading as Plurilore.

1.3 Service Architecture Overview

Our current product architecture is composed of the following operational layers:

This architecture is important because not every product feature shares the same storage model. In particular, notes and Practice reflections remain local-only, while consent records, subscriptions, Practice activity records, and certain operational logs are server-side.

1.4 Third-Party Services

Some parts of the Service depend on external providers or infrastructure partners. Their involvement is described in Sections 7 and 11. Where a third party acts under its own privacy policy or terms, those documents also apply to your use of that specific service.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected Automatically

2.3 Information from Third Parties

2.4 Information Stored Locally on Your Device

Certain Practice and notes functionality is intentionally local-only.

Local notes and Practice reflections are not part of our normal server-side account export, server-side deletion workflow, or US transfer map unless you separately send them to us or another server-side feature.

What Practice does record on our servers. So that your record of practice survives losing a device, we store structured metadata about your activity — which passage you sat with, on which day, in which tradition; explicit committed-reading progress; which concepts in the Atlas your practice has touched; the numeric commitments of your Rule of Life; and the marks you have earned. We do not store what you wrote in a private reflection or the name or intention you gave your Rule. A private reflection is never added to Chat context automatically.

2.5 Internal Access and Audit Records

When authorized staff or contractors use the backoffice to investigate an account, respond to a support issue, or review a moderation/security incident, we may create audit records that show:

• who accessed a record,
• what action was performed,
• when it occurred,
• the IP address and user agent associated with the action,
• the entity reviewed or changed.

3. Legal Bases for Processing

If you are in the EEA, UK, or Switzerland, we rely on the following legal bases depending on the purpose of processing:

Before a mobile user enters the Hub, Plurilore requires a versioned, explicit consent for processing prompts and other user-provided material that may reveal religious or spiritual beliefs. Withdrawing that consent disables affected Hub processing until consent is granted again; it does not prevent access to account, legal, support, subscription-management, restore, deletion, or data-export controls. This consent gate complements—not replaces—product restriction, data minimization, adult-only access controls, and service-side quota, rate-limit, and operational safeguards.

4. How We Use Personal Information

We use personal information to:

• create and manage your account,
• authenticate you and enforce verified-email requirements where applicable,
• provide chat, Practice, pricing, and account functionality,
• calculate message allowances, one-time credits, and plan entitlements,
• process accepted Chat and inline Practice discussion requests transiently to generate responses,
• send password reset, verification, billing, and service emails,
• protect the service against fraud, abuse, excessive automation, and security incidents,
• investigate complaints, moderation issues, and account misuse,
• comply with tax, accounting, legal, and regulatory obligations,
• improve product reliability, understand operational failures, and maintain platform health,
• support customer service, audits, and incident response.

We do not sell your personal information or use third-party advertising cookies for profiling or targeted advertising.

5. AI, RAG, and Model Processing

5.1 How the AI Flow Works

When you submit an accepted Chat or inline Practice discussion request, the flow typically works like this:

1. the frontend validates your session, verified-email status where relevant, legal acceptance state, and quota/rate-limit posture,
2. the request is sent to our self-hosted RAG service,
3. the RAG service orchestrates retrieval and provider routing for the request,
4. accepted requests may retrieve supporting source context,
5. the RAG service calls one or more configured AI/model providers,
6. the response is returned to the frontend and shown in the current session without creating a saved server-side conversation history for normal chat use,
7. limited technical, security, or abuse-investigation records may still be created under our standard logging and incident-handling practices.

5.2 What May Be Sent to the RAG Layer and Upstream Model Providers

Depending on the feature and current provider configuration, the following data may be processed through the RAG and model path:

• accepted prompt text,
• public Practice passage, reference, framing, reflection prompt, and the discussion question you explicitly submit,
• retrieved textual context,
• system instructions and workflow prompts,
• pseudonymized user and session identifiers,
• limited routing metadata needed to produce the response.

5.3 What We Do Not Routinely Send Upstream for AI Inference

We do not routinely send the following to model providers for normal chat inference:

• your payment card data,
• your full billing record,
• your notes stored only in local browser storage,
• your password,
• unnecessary direct contact data where pseudonymized identifiers are sufficient.

5.4 No Persistent Agent Memory

The current Chat and inline Practice discussion architecture does not maintain a separate per-user server-side agent-memory profile for future continuity. In practice:

• accepted requests are handled for the current response only,
• leaving the page does not preserve a saved server-side conversation thread,
• information you want to retain should be kept in local notes or other account features that are expressly stored server-side,
• limited technical, security, and abuse-investigation records may still exist under our normal operational controls.

5.5 Inline Practice Discussion and Cross-Reference Mode

Inline Practice discussion is an ephemeral Chat surface. Single-tradition follow-ups use recent context within the current disclosure session; cross-reference turns remain stateless. Standard agents cost 1 credit per selected tradition and Pro agents cost 3 credits per selected tradition. Private reflection text is excluded unless you deliberately copy it into the question yourself.

5.6 AI Model Providers

The architecture supports model-provider substitution at the RAG layer. Our current production-facing legal baseline assumes OpenAI-connected flows for accepted academic chat requests, but the RAG service is architected to support other providers if enabled. If we materially change the active processor list or transfer posture, we will update this Policy and, where legally required, request renewed acceptance.

6. Sensitive Content Boundaries & Adult-Only Access

6.1 Academic-Only Product Scope

The Service is designed for:

• passage analysis,
• historical and literary explanation,
• comparative study,
• structured passage support,
• source-backed academic exploration.

The Service is not designed for:

• personal spiritual direction,
• confessional intake,
• counseling-style or crisis-style support,
• individualized life advice framed as pastoral or religious guidance,
• medical, legal, or therapeutic use.

6.2 Scope and Rejection Logic

Requests that fall outside the intended academic-only scope may be refused, limited, escalated for operational review, or subject to provider-side moderation. Depending on where that refusal occurs, ordinary request metadata, security logs, or provider-side processing records may still be created.

6.3 Adult-Only Access

We do not currently offer:

• a separate under-18 version of the Service,
• a limited-feature minor mode,
• a parental-consent workflow,
• a standalone recorded age-verification feature separate from current legal acceptance.

Instead, the service uses the current Terms acceptance state as the adult-use eligibility record required for Chat, including inline Practice discussion. If the active legal-document version changes, we may require renewed acceptance before those features continue.

7. Sharing, Recipients, and Processors

7.1 We Share Data Only Where Needed to Run the Service

We may share personal information with the following categories of recipients:

• hosting and infrastructure partners,
• payment processors,
• transactional email providers,
• optional identity providers,
• configured AI/model providers used through our RAG service,
• professional advisers, auditors, and authorities where legally required.

7.2 Typical Processor Map

7.3 Internal Recipients

Authorized personnel may access relevant data where necessary for:

• support,
• moderation,
• fraud or abuse investigation,
• billing operations,
• infrastructure/security response,
• legal compliance.

Backoffice access is role-based and auditable. Not every internal role can see the same data.

7.4 We Do Not Share Local Notes as Part of Normal Server Processing

Because notes are stored locally in your browser or encrypted mobile database, they are outside normal server-side sharing and processor flows unless you separately export or transmit them.

8. Cookies, Telemetry, and Operational Monitoring

8.1 Essential Cookies Only

We use essential first-party cookies and comparable session/security mechanisms required for:

• authentication,
• account security,
• session continuity,
• core navigation,
• limited informational UI state such as dismissal of banners.

We do not use third-party advertising cookies. We do not currently rely on third-party analytics cookie banners to profile users for advertising.

8.2 Internal Telemetry and Monitoring

To keep the Service reliable and secure, we collect internal operational telemetry such as:

• request and error events,
• rate-limit/security events,
• reliability traces,
• infrastructure and application logs.

Web and mobile error monitoring uses GlitchTip, which receives events through open-source Sentry-compatible client SDKs, alongside OpenTelemetry-based tracing where configured. We do not use the sentry.io monitoring service. This data is used for reliability, debugging, fraud/security detection, and incident response.

The mobile app sends GlitchTip only anonymous crash/error classes, release/build/platform information, and a small allowlist of coarse performance transactions. The mobile integration deliberately drops or strips prompts, responses, notes, passage contents, selected traditions, spiritual-interest data, user identity, error messages, stack traces, request URLs, arbitrary routes, breadcrumbs, screenshots, view hierarchy, session replay, and failed-request capture. We do not attach those categories to the monitoring SDK scope.

Practice notifications use generic copy. Notification payloads do not include a tradition, passage, note, chat content, or other spiritual-interest information. Expo push tokens and delivery receipts are used only to deliver and maintain reminders that the user has enabled.

8.3 Managing Cookies

You can block or delete cookies through your browser settings, but doing so may prevent authentication and other core features from functioning properly.

8.4 Do Not Track

Some browsers offer a "Do Not Track" setting. We do not guarantee a separate response to every DNT signal, but we continue to honor the privacy controls and rights described in this Policy.

9. Data Retention and Deletion

9.1 Retention Schedule

9.2 Deletion and Recovery Windows

When you delete content or request account deletion:

• some records may be soft-deleted before final purge,
• backups may retain data for a limited restoration period,
• some legal/accounting records may be retained where required,
• anonymized or aggregated information may persist after deletion if it no longer identifies you.

9.3 Notes Retention Is Different

Local notes are controlled primarily by your device. If you clear browser data, delete the mobile app database or key, lose the device, or remove local storage without exporting, those notes may be lost. The app offers an export before account deletion.

Deleting your Plurilore account does not itself cancel a subscription managed by Apple or Google. Cancel the store subscription first through the applicable store settings to prevent renewal. Store transaction records remain subject to the store's own retention requirements.

10. Security and Internal Access Controls

We use technical and organizational measures appropriate to the nature of the data we process, including:

• TLS encryption in transit,
• hashed passwords,
• role-based access control,
• audit logs for sensitive internal actions,
• rate limiting and abuse controls,
• environment-based secret management,
• routine operational monitoring,
• separation between customer-facing and backoffice/admin interfaces.

No system can guarantee absolute security. If a security incident affects your personal information and law requires notice, we will notify regulators and affected users as required.

11. International Data Transfers

11.1 Default Hosting Posture

Our default hosting posture is EU-centric for core application and database infrastructure. However, some processors or configured model providers may operate outside the EU/EEA.

11.2 Transfers That May Occur

Depending on the active feature and processor configuration, data may be transferred outside your jurisdiction in connection with:

• payments and billing,
• transactional email delivery,
• optional OAuth sign-in,
• mobile build and update delivery,
• Practice push routing and delivery receipts,
• privacy-limited mobile crash and performance monitoring,
• AI inference or embeddings for accepted academic requests.

11.3 Transfer Safeguards

Where required by law, we rely on appropriate transfer safeguards such as:

• Standard Contractual Clauses,
• Data Privacy Framework participation where applicable,
• data-processing agreements,
• contractual and organizational restrictions on onward transfer and retention,
• periodic transfer-impact review.

We maintain a separate Transfer Impact Assessment for the current architecture and review the processor/transfer posture when the architecture changes materially.

12. Your Rights and Product Controls

Depending on your jurisdiction, you may have rights to:

• access your personal information,
• request correction of inaccurate data,
• request deletion,
• request portability,
• object to certain processing,
• request restriction,
• withdraw consent where consent is the legal basis,
• complain to a supervisory authority.

12.1 Product Controls Available Today

Current product controls may include:

• account-data export for server-side data,
• account deletion,
• unsubscribe controls for marketing communications,
• local note export/import outside the normal server-side export flow.

To exercise your rights, contact [email protected]. We may need to verify your identity before completing a request.

13. Regional Privacy Disclosures

13.1 EU / EEA / UK / Switzerland

If you are in the EU, EEA, UK, or Switzerland, the GDPR or analogous local law may give you the rights described above. As a Romanian controller, we are also subject to Romanian data-protection oversight.

13.2 California

If you are a California resident, you may have rights under the CCPA/CPRA, including rights to know, delete, and correct personal information, and to request information about the categories of data we collect and disclose. We do not sell personal information and do not knowingly share personal information for cross-context behavioral advertising.

14. Children's Privacy and Adult-Only Service

The Service is intended only for adults who satisfy the minimum age requirement in our Terms. We do not knowingly offer an under-18 mode, limited-feature minor account, or parental-consent workflow. If we learn that we have collected data from someone who does not meet the age requirement, we may delete the data, restrict access, or close the account.

15. Changes to this Policy

We may update this Privacy Policy when the product architecture, processor map, legal basis, or data practices change. If a change is material, we may provide notice through the website, the product UI, email, or a re-consent flow. Continued use after a non-material update may constitute acceptance where permitted by law.

16. Contact Information

If you have questions, requests, or complaints regarding this Policy or your personal information, contact:

ONE CREATOR SRL
Email: [email protected]<br> Address: Romania, Jud. Dolj, Municipiul Craiova, Strada Traian Demetrescu, Nr.23, MANSARDA