Get In Touch

Data protection and GDPR information

Data Information Center

We want users to understand what happens to their data.

This page explains, in plain language, how Plenosa approaches personal data, wellbeing information, privacy rights, company access, family access and user control. It is designed to support transparency and should be read together with our Privacy Policy.

Plenosa Tech LTD Platform operator and data controller where applicable. Last updated: June 2026

Data minimization

We aim to collect only the information needed to provide, secure and improve Plenosa.

Privacy by design

Private areas, especially personal reflection spaces, are designed with privacy in mind from the beginning.

User control

Users should have clear ways to understand, correct, export or request deletion of their personal data.

1. Who is responsible for data?

Plenosa is operated by Plenosa Tech LTD. Depending on the feature, service or relationship, Plenosa Tech LTD may act as a data controller or processor. Where we decide why and how personal data is processed, we act as the controller.

2. What data do we process and why?

We process different categories of data for different purposes. The table below gives a simple overview of common data categories, why they may be used and the legal basis that may apply.

Data category Purpose Possible legal basis
Account and contact data Creating accounts, login, communication, language settings and support. Contract, legitimate interest, consent where required.
Usage and technical data Security, diagnostics, fraud prevention, feature improvement and platform reliability. Legitimate interest, legal obligation where applicable.
Wellbeing-related data Providing tests, calculators, progress tools, appointments and requested wellbeing features. Explicit consent where required, contract, legitimate interest.
Payment and package data Managing subscriptions, packages, access rights, invoices, refunds and payment records. Contract, legal obligation, legitimate interest.

3. Special category and wellbeing information

Some information connected to wellbeing may be sensitive. We aim to process such information carefully, with appropriate safeguards, and only where needed to provide requested features, comply with law, protect users or operate the platform responsibly.

Private diary and personal reflections

Plenosa’s diary is designed as a private reflection space. Where diary content is stored locally on the user’s device, it is not designed to be used as a company report, family visibility tool, public feed or advertising profile.

4. Company and family visibility

Company and family packages may provide access to Plenosa, but access support does not mean unrestricted visibility. We design these models so companies and family members do not automatically see private diary content, personal reflections or sensitive individual experiences.

5. Your GDPR rights

Depending on your location and applicable law, you may have rights relating to your personal data. These rights may include the following:

Access your data
Correct inaccurate data
Request deletion
Restrict processing
Request portability
Object to processing

6. Deletion, export and account closure

Users may request account deletion, data access or data export through available platform flows or by contacting us. Some information may need to be retained for legal, security, accounting, dispute resolution or fraud prevention purposes.

7. International transfers and service providers

Plenosa may use trusted service providers for hosting, payments, communication, analytics, notifications or online session infrastructure. Where personal data is processed internationally, we aim to use appropriate safeguards required by applicable data protection laws.

Data protection contact

For GDPR requests, data questions or privacy concerns, contact Plenosa Tech LTD using the email below.

privacy@plenosa.com