Your privacy is important to us. This policy explains how we collect, use, and protect your information.
When you register for an account, we collect your email address and password (managed via Supabase for authentication). We also ask for your name, birthdate, and gender to personalize your profile. Your username is visible to other users, but it's not used for account authentication.
We use approximate GPS location to track where you do your cold plunge sessions. This data is stored on our private and secure AWS servers. You can disable location services at any time in your device settings, though some features may become unavailable.
We request access to your camera and media library so you can capture and upload pictures or videos of your cold plunge sessions. Uploaded media is stored in our private and secure AWS S3 servers. Public profiles allow all users to view your media, while private profiles restrict viewership to approved friends only.
We send push notifications for session reminders, social updates (e.g., friend/follower requests), and important app feature updates. You can opt out of push notifications via your device settings.
Currently, we do not store any health or fitness data on our servers. If in the future we integrate with Apple Health, Apple Watch, or other wearables, we will only query such data in real-time (via AWS Lambdas) for analytics; we do not plan to retain that data on our servers.
We collect usage metrics such as how quickly users open notifications and the length of their activity sessions. This data is stored in a NoSQL DynamoDB database on AWS. We do not track specific times of usage.
We collect transaction data when users earn "PlungePoints" (e.g., completing challenges, logging sessions). In-app purchases are tracked via RevenueCat. This helps us update your points balance and reward redemptions.
We use the collected information to:
We rely on trusted partners to operate and improve our Services:
Handles user authentication (email, password)
Hosts our servers, stores your media, and runs backend services
Manages in-app purchase tracking
These providers have limited access to your data solely to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.
We may share your email and certain usage data with affiliates or partners for co-marketing and promotional activities, as well as with advertisers or data brokers for personalized advertising campaigns.
If we are involved in a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred as part of that transaction.
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
We retain your personal data as long as you have an active account. If your account is inactive for 10 years, we may delete your data. Once you choose to delete your account, we will remove your personal data (including your PlungePoints) within a reasonable timeframe, unless legal obligations require us to retain certain records.
We use various measures to protect your data:
Secure server infrastructure via AWS
Encryption in transit (SSL/TLS)
Restricted internal access and private API gateways
Important: Despite our best efforts, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Our servers are located in the United States. If you access our Services from outside the U.S., your data may be transferred and processed here. By using our Services, you agree to this transfer and processing of your information.
We collect and process your personal data under lawful bases such as consent, contractual necessity, or legitimate interests. You have the right to access, rectify, or erase your data, restrict or object to its processing, and request a copy in a machine-readable format.
If processing is based on consent, you may withdraw consent at any time by contacting us at support@plungepalz.com.
To exercise these rights, contact us at support@plungepalz.com.
Our Services are intended for users 18 years of age or older. We do not knowingly collect data from anyone under 18. If you believe we have collected personal information from a minor, please contact us at support@plungepalz.com, and we will take steps to delete such information.
You are responsible for the content you upload. By uploading content, you grant us permission to display it under your chosen privacy settings (public or private).
Our Services may feature articles or links related to health or wellness (e.g., "Should you cold plunge before or after a workout?"). Such content is provided for informational purposes only; we disclaim any liability for actions taken based on third-party advice.
Always consult a qualified professional before making health-related decisions. We are not responsible for the content or privacy practices of external websites or services linked to within our platform.
We may update this policy from time to time to reflect changes in our practices or for legal reasons. The "Last Updated" date at the top indicates the most recent revision. For significant updates, we will notify you via email before they take effect.
You may delete your account at any time, which will remove all your personal data and forfeit any remaining PlungePoints.
You can unsubscribe from marketing or promotional emails by clicking the "unsubscribe" link or by contacting us directly.
If you wish to access, correct, or delete your personal information, or if you have any questions about your rights, email us at support@plungepalz.com.
PlungePalz integrates with the Garmin Connect Developer API, Oura API, Apple Health, and Strava API to optionally enrich the PlungePalz AI Advisor experience. Users have full and complete control over whether to connect any of these external data sources. Connecting these integrations is entirely optional — users are not required to connect any external source in order to access or use the PlungePalz AI Advisor. The AI Advisor is fully functional using only the session data that users record directly within PlungePalz.
PlungePalz's use of each external data source is governed by the respective developer program agreement for that platform. By connecting any of these integrations, your data from that platform is handled in compliance with:
Data obtained from any of the above API services — including Garmin-sourced, Oura-sourced, Apple Health-sourced, and Strava-sourced data — is never shared with, transmitted to, processed by, or made available to any external artificial intelligence or machine learning service, including but not limited to OpenAI, Anthropic, Google Gemini, or any other third-party AI provider. This restriction applies to all forms of such data, whether raw, processed, aggregated, anonymized, or otherwise derived or transformed.
All Garmin-sourced, Oura-sourced, Apple Health-sourced, and Strava-sourced data is stored and processed exclusively within PlungePalz's private, secure AWS infrastructure and does not leave our controlled environment under any circumstances.
The PlungePalz AI Wellness Advisor is built, managed, processed, and hosted entirely within PlungePalz's internal, secure, and private infrastructure. It leverages Amazon Bedrock, an AWS-managed AI inference service that operates exclusively within PlungePalz's private AWS cloud environment — the same infrastructure that powers our servers, databases, and backend services. Amazon Bedrock does not transmit your data to any external AI provider, does not use your data to train or improve AI models, and does not expose your data outside of PlungePalz's controlled AWS account. All AI inference occurs entirely within PlungePalz's AWS environment under our exclusive ownership and control.
Summary: Your Garmin, Oura, Apple Health, and Strava data stays inside PlungePalz's secure AWS infrastructure at all times. It is never sent to any external AI service — including the AI that powers the PlungePalz AI Advisor.
If you have any questions about this Privacy Policy or our data practices, please contact us at: