Privacy Policy

1. Who we are

PLUTUS is a personal development service operated by Justin Dion in Massachusetts, United States, at plutusmindset.com. This policy explains how information is handled when you use the website and app. Our Terms of Service describe the terms of use.

For questions about this policy or to make a privacy request, email support@plutusmindset.com or use our Contact page.

2. Information you provide

• Account details: email address, display name, sign-in credentials handled by our authentication service, and account and sign-in records. Google sign-in can provide account identity details such as your email and name.
• Personal development data: onboarding answers, North Star, life summaries, priorities, values, identity traits, obstacles, schedule notes, goals, milestones, habits, check-ins, daily plans, progress and weekly reflections. Onboarding answers are saved as you progress, including before you finish setup.
• AI data: messages, generated responses, tool interactions, suggested and approved memories, and personal context used for coaching.
• Preferences: coaching preferences, time zone, reminder choices, quiet hours and notification read status.
• Billing: payment-provider customer and subscription identifiers, selected plan, subscription status, billing-period dates, cancellation status and discount information used at checkout.

If you use voice input, your microphone recording is transmitted for transcription. PLUTUS does not save the raw recording to its application database or file storage; resulting text follows the same storage and AI processing as typed answers. When you submit the contact form, your name, email and message are sent to our support inbox so we can respond. Please do not include passwords or payment-card details.

3. Technical information and usage

Authentication, hosting and payment services handle technical request information, which can include IP addresses, browser or device details, timestamps, sign-in activity and errors. PLUTUS includes error reporting that can send error messages, stack traces and the page path to Lovable. Diagnostics can contain details associated with the failed request.

The owner can view account and subscription analytics, including email, signup and last-sign-in details, onboarding status and billing status. This is different from advertising tracking. PLUTUS does not currently include a separate advertising tracker or third-party product-analytics integration.

4. How we use information

We process information to create and secure accounts, save your work, personalize AI coaching and plans, track goals and habits, generate reviews, deliver reminders you enable, administer subscriptions and discounts, understand account and subscription activity, diagnose problems and protect the service against misuse. Information may also be used to respond to support requests and to meet applicable legal obligations.

Optional reminders are in-app notifications, off by default. You can change categories, quiet hours and time zone in your profile. They are not currently email or push reminders.

5. AI processing

PLUTUS sends prompts and relevant context through Lovable AI to configured OpenAI models for chat, planning and transcription. Context can include recent messages, onboarding answers, profile summaries, goals and approved memories. The agent can retrieve additional goals, habits, check-ins, plans and reviews to answer a request or perform an action.

Chat and planning requests ask the model not to store responses, but that setting does not establish that every provider keeps no logs or retains no data. AI providers handle submitted information under their own processing terms; we do not promise that all providers operate without retention or training. PLUTUS itself saves conversation history separately. AI can make mistakes; do not submit passwords, card details or information you do not want processed, including sensitive information about yourself or others.

6. Saved memories and conversation history

Suggested memories are saved while awaiting your approval. Only approved memories are automatically included as saved-memory context in later AI requests. In the AI Agent, open “What PLUTUS remembers” to approve, dismiss, edit or delete memories. There is no separate working global memory opt-out currently exposed.

Deleting a memory removes its memory record, not copies of the same information in previous messages, tool interactions, profile data or provider records. That information can still appear in recent conversation context. The app keeps an ongoing conversation; displaying only recent messages and sending a limited history to the model do not delete older messages. A separate individual-message deletion control is not currently available.

7. Service providers and disclosures

Lovable Cloud supports hosting, account authentication and application data storage. Lovable AI routes relevant text and voice content to AI processing services; the configured models are from OpenAI. Google participates when you choose Google sign-in. Stripe processes checkout, recurring payments and billing-portal actions through Lovable’s payment connection. Lovable’s managed email service sends account confirmation, password-reset, invitation and contact-form emails. Google Workspace hosts our support inbox and handles messages sent there.

Information is disclosed to these services as needed for their roles. Access controls restrict ordinary users to their own records; authorized operation and support can require privileged access. We may disclose information when legally required, to protect rights and safety, or in connection with a business transfer, subject to applicable law. For questions about disclosures or sale and sharing as defined by applicable privacy laws, contact support@plutusmindset.com.

8. Payments and subscriptions

PLUTUS shares your email and account identifier with Stripe to associate purchases with your account. Stripe handles card and other payment details entered in its checkout. PLUTUS’s subscription records do not contain your full card number or security code; authorized billing administration may access billing information through Stripe. See Stripe’s Privacy Policy for its practices.

Account deletion first cancels associated Stripe subscriptions and expires unfinished checkout sessions. If billing cancellation cannot be verified, deletion stops and reports an error. Cancellation on deletion is immediate and does not issue a refund. Stripe customer and billing records, and local subscription and trial-history records, may remain after account closure.

9. Cookies and browser storage

The app uses browser local storage for persistent sign-in sessions and authentication-token refresh. Providers such as Google and Stripe may use cookies or similar technologies in their own sign-in and payment flows. PLUTUS does not currently use a dedicated advertising-cookie system. Blocking or clearing necessary storage may sign you out or interrupt sign-in and checkout.

When used inside the Lovable editor preview, the authentication storage adapter can synchronize the preview session with the trusted editor origin. That preview behavior is distinct from ordinary use of plutusmindset.com.

10. Retention, export and account deletion

Application records, including unfinished onboarding, conversations and notifications, generally remain while your account is active and are not automatically expired. Retention also depends on service operation, resolving disputes, security, provider practices and legal or financial obligations. Billing records, diagnostics, support correspondence and provider-held data may remain after account closure where needed for these purposes or under the relevant provider’s retention practices.

In your profile’s “Your data” section, JSON export includes the app’s profile, preferences, onboarding, goals, habits, plans, reviews, memories, conversations, messages and notifications. It retrieves records in pages and stops without downloading a partial file if a request fails. It excludes authentication and billing records and provider-held data. Contact support if you need a broader privacy response.

Account deletion requires typing DELETE. After billing cancellation, app messages, conversations, memories, habit logs, habits, milestones, plans, goals, reviews, onboarding answers, notifications, preferences and unfinished checkout records are removed in one database transaction. The sign-in account and associated profile and roles are then removed separately. If that final step fails, the app reports the partial outcome and asks you to retry or contact support. Local subscription and trial-history records are retained. Deletion is not a promise of immediate removal from backups, diagnostics or separate providers; their records can remain subject to their retention rules.

11. Security and international processing

PLUTUS uses authenticated access and user-scoped database permissions to help protect personal records. Privileged operations are checked server-side. No internet service is completely secure, and we do not guarantee absolute security or claim certifications that have not been verified.

The operator is in the United States. Hosting, authentication, AI and payment providers may process information outside your country, where privacy laws may differ. Information is not guaranteed to remain within a particular country or region. Contact support@plutusmindset.com with questions about international processing and applicable safeguards.

12. Rights and choices

Depending on your location and applicable law, you may have rights to access, correct, delete or obtain a copy of information, object to or restrict certain processing, withdraw consent where processing depends on consent, and complain to your local privacy regulator. Some rights have exceptions; identity verification may be necessary to protect your account. This policy does not limit rights provided by law.

Available self-service controls include changing your display name and reminder settings, managing memories and using the export and deletion actions described above. These controls are not substitutes for all legal privacy requests. To exercise your privacy rights, email support@plutusmindset.com or use our Contact page. Include enough information for us to understand your request, but do not send passwords or unnecessary sensitive information. We will handle requests as required by applicable law.

13. Children’s privacy

PLUTUS is intended only for adults aged 18 and older, not children or teenagers. The current signup flow does not verify age. If you believe a person under 18 has provided personal information to PLUTUS, email support@plutusmindset.com so we can review the matter and take appropriate action under applicable law.

14. Changes and contact

We may revise this policy as the service or legal requirements change. The date above identifies the current version. We will provide notice of material changes where required by applicable law. For privacy questions, requests or concerns, contact support@plutusmindset.com or use our Contact page.