When you create a Plexo account, we collect the information you voluntarily provide: your display name, email address, date of birth (to verify you are 18 years of age or older), profile photo, country of residence, and any personal bio you choose to write. If you register via Apple Sign-In or Google, we receive a limited profile dataset authorized by you and that provider.

If you use the buddy-matching feature, we collect your matching preferences (availability, preferred routes, pace), city-level location, and messages you exchange with matched buddies within the app. See Section 5.

When you share a city walk update, we collect the photos, videos, text, route highlights, and captions you choose to publish. See Section 6.

We collect data about which recommended routes you view, save, follow, or complete. See Section 7.

We automatically collect device model, operating system version, unique device identifiers, IP address, mobile carrier, app version, crash logs, and performance diagnostics to maintain service quality and diagnose technical issues.

We record how you use the Service: walks started, features accessed, search queries, and session frequency and duration. This data informs product improvements and optional personalization.

Community posts, walk shares, comments, and other content you make public constitute User-Generated Content (UGC). See Section 8 for full details.

If you contact our support team, submit a report, or participate in surveys, we retain the content and metadata of those communications for resolution and service improvement purposes.

All payments are processed exclusively by Apple App Store or Google Play. We do not store your payment card details. We receive only anonymized transaction confirmation tokens and purchase entitlement data to activate in-app premium features.

We use your information to authenticate your account, deliver walk tracking, operate buddy matching and community features, enforce content policies, process purchases, and provide all core Service functions.

Your GPS route and movement data power real-time distance, pace, and calorie estimates during your walk, as well as your personal walk history and statistics.

Your matching preferences and city-level location are used to suggest other users interested in walking the same or a similar route at a compatible time.

Where you choose to share walk updates publicly, your submitted content populates community feeds and enables discovery by other users.

Your walk history, saved routes, and location are used to recommend city walk routes that may interest you.

Your walking history, viewing patterns, and preferences are used to personalize route suggestions and community content. See Section 9.

We process behavioral signals and user reports to detect and prevent prohibited content, harassment, and policy violations.

Aggregated and de-identified usage data is analyzed to improve route recommendations, matching accuracy, and overall platform performance.

With your consent where required by applicable law, we may send promotional communications about featured routes, new features, and platform offers. You may withdraw consent at any time via in-app settings or the unsubscribe link in any email.

We process personal data as necessary to comply with applicable laws, respond to valid legal process, enforce our Terms of Service, and protect the safety of our users and the public.

To track your walks, Plexo requests location access. You may grant "While Using the App" access; background tracking during an active walk requires separate, explicit permission that you may revoke at any time via device settings.

During an active walk, we record your GPS path, timestamps, distance, pace, elevation (where available), and duration to generate your walk summary and statistics.

Each completed walk can be set to Private (visible only to you), Followers Only, or Public. Walks are Private by default; sharing your route is always an explicit choice.

Your GPS and route data are not sold to third parties, including advertisers, real estate companies, or data brokers.

Plexo estimates calories burned and activity intensity based on your walk data and any profile information you optionally provide (such as weight or height). These are estimates only and may not be medically precise. See our Terms of Service, Section 5, for the related disclaimer.

You may optionally provide additional profile details (such as weight, height, or age) to improve the accuracy of calorie estimates. This data is used only to personalize your own statistics and is not shared with other users or third parties without your explicit action to make it public.

Fitness and health-adjacent metrics may be treated as sensitive personal data in certain jurisdictions; see Sections 17–19 for jurisdiction-specific rights.

Plexo's buddy-matching feature suggests other users interested in walking the same or a similar route, based on your stated preferences, availability, and city-level location.

For matching purposes, we use city-level (not precise GPS) location. Your exact real-time location is never shared with other users through the matching feature itself; it is shared only if you separately choose to enable live location sharing for a specific walk, as described in Section 3.4.

Messages exchanged with matched buddies within Plexo are stored to enable the conversation feature, support moderation, and allow reporting of abuse.

You may share a completed walk's summary, route highlights, photos, and captions to the community feed. Sharing is always an explicit, opt-in action.

A shared walk update may include your display name, profile photo, the route or highlights you choose to show, distance and duration (if you include them), and any photos or captions you add. You control which statistics, if any, are included.

Other users may react to or comment on your shared walks. Comments are associated with the commenter's display name and are visible to viewers of that post. You may moderate and delete comments on your own posts at any time.

Plexo's recommended city walk routes are sourced from a combination of curated editorial content, community-contributed routes, and third-party mapping data providers.

We collect which routes you view, save, follow, or complete to improve recommendations and to show aggregate popularity signals (such as "walked by 1,200 users") without identifying you individually to other users.

Route information (safety, accessibility, points of interest, current conditions) may not always be current or accurate. See our Terms of Service, Section 6, for the related disclaimer.

Shared walks, photos, comments, and community posts you publish publicly constitute User-Generated Content (UGC). UGC is stored on our secure cloud servers associated with your account.

By publishing UGC publicly on Plexo, you grant us a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, reproduce, display, and distribute your content within the Service and in connection with promoting Plexo, subject to your visibility settings. You retain full ownership of your original content.

Community-shared UGC is subject to automated screening and human review for compliance with our Community Guidelines. Content that violates our policies will be removed, and responsible accounts may face suspension or termination.

You may delete any published walk share or UGC at any time. Deleted content is removed from public view within 48 hours, from production servers within 30 days, and from backup archives within 90 days.

Plexo uses your walk history, saved routes, engagement, and preferences to personalize which routes, community content, and potential buddies are surfaced to you.

Your walk data, health metrics, and behavioral signals are not used to build an advertising profile or shared with third-party advertising networks without your explicit consent.

You may disable personalized recommendations at any time in Settings > Privacy > Personalization. Plexo will then present a non-personalized, editorially curated experience.

We share personal information with trusted third-party service providers supporting our operations: cloud infrastructure providers, mapping and route-data providers, payment processors, analytics platforms, customer support tools, and content moderation systems. All providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.

We do not sell your personal information, GPS route data, or health metrics to any third party, including advertisers or data brokers.

In the event of a merger, acquisition, or asset sale, your data may transfer to the acquiring entity. We will notify you in advance before your data becomes subject to a materially different privacy policy, giving you the opportunity to request account deletion.

We may disclose your information to law enforcement or government authorities when required by applicable law, valid legal process, or where necessary to protect the safety of any person. Where legally permitted, we will notify affected users prior to such disclosure.

Your display name, profile photo, and publicly shared walks are visible to all Plexo users. You may adjust visibility in account settings.

Plexo uses third-party mapping services and route data providers to render maps and enhance route information. Relevant location data is transmitted to these providers under data processing agreements when you use map or route features.

Mobile analytics SDKs measure app performance and feature engagement, configured with privacy-preserving settings including anonymized event collection and suppression of advertising identifiers absent your consent.

Photos, route data, and other media are stored on cloud infrastructure and delivered via CDN providers, under data processing agreements.

Apple Sign-In and Google authentication are governed by their own terms and privacy policies. Our use of data from these services is limited to account creation and basic profile population.

We retain your personal information for as long as your account is active. Accounts with no login activity for 24 consecutive months will receive a dormancy notice; following the notice period, inactive data may be anonymized or deleted.

Your walk tracks, statistics, and shared content are retained for the life of your account. You may delete individual walks or your entire history at any time from account settings.

In-app messages with matched buddies are retained for the life of your account or until you delete them, whichever is earlier, except where retained longer for safety investigations or legal compliance.

Financial transaction records are retained for a minimum of seven years to comply with applicable accounting, tax, and consumer protection obligations.

Records of content moderation actions, user reports, and enforcement decisions are retained for up to 36 months after account closure.

We implement TLS 1.2+ encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict role-based access controls, and automated anomaly detection.

Data access is restricted on a need-to-know basis, requires multi-factor authentication, and is comprehensively audit-logged. All personnel with data access receive regular data protection training and sign confidentiality agreements.

We conduct regular security assessments and third-party penetration testing. Report security vulnerabilities responsibly to service@plexo.club.

In the event of a personal data breach posing risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours where required by law and inform affected users without undue delay.

Plexo uses session tokens, local storage, and analytics SDKs (not traditional browser cookies) to maintain your authenticated session, remember preferences, and sync your walk data across devices.

On iOS, we request ATT consent before accessing your IDFA. On Android, we respect your opt-out via device advertising settings. Advertising identifiers are used only to measure our own user acquisition campaigns.

Our website may use standard browser cookies for session management and analytics, manageable via your browser settings.

Plexo serves a global community and operates cloud infrastructure across multiple regions. Your personal data may be transferred to and processed in countries other than your country of residence.

For transfers from the EEA, UK, or Switzerland to countries lacking an adequacy decision, we rely on EU Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum (IDTA). Equivalent safeguards apply to other cross-border transfers.

Where applicable national laws impose mandatory data localization requirements, we take reasonable steps to store and process the required data categories within the mandated territory.

Request a copy of personal data we hold, including your walk history and route data, via in-app settings or by emailing service@plexo.club with subject "Data Access Request."

Correct inaccurate personal information directly in account settings. For data that cannot be self-corrected, contact us and we will action the correction within 30 days.

Request deletion via Settings > Account > Delete Account or by emailing us. See Section 22 for full account deletion details.

Request your walk data and personal data in a structured, machine-readable format suitable for personal archiving or transfer to another platform.

Object to or request restriction of processing in certain circumstances. We pause relevant processing while assessing your objection.

Withdraw consent for marketing or personalization at any time via in-app settings or by contacting us, without affecting prior lawful processing.

Email service@plexo.club with "Privacy Rights Request" in the subject, your registered email, and a description of your request. We verify your identity and respond within applicable legal timeframes.

For EEA and UK users, Plexo acts as the data controller of your personal information under the GDPR and UK GDPR respectively.

We process your data under: (a) contractual necessity (to provide the Service); (b) legal obligation (regulatory compliance); (c) legitimate interests (safety, service improvement, fraud prevention), where not overridden by your rights; and (d) consent (for marketing and optional personalization, including optional health-profile data you provide).

You may lodge a complaint with your national data protection supervisory authority if you believe your data has not been handled lawfully. We encourage you to contact us first to attempt direct resolution.

California residents have rights under the CCPA as amended by the CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information, and additional rights regarding sensitive personal information such as precise geolocation. Plexo does not sell personal information and does not share it for cross-context behavioral advertising.

Exercising your California privacy rights will not result in denial of services, different pricing, or reduced quality of experience.

California residents may designate an authorized agent by providing written proof of authorization. We verify both agent and resident identity before processing any request.

Brazilian users have rights under the Lei Geral de Proteção de Dados (LGPD) including confirmation, access, correction, anonymization, deletion, portability, and withdrawal of consent.

We process Brazilian users' data based on contract performance, legal obligation, and consent where applicable.

Brazilian users may lodge complaints with the Autoridade Nacional de Proteção de Dados (ANPD) where they believe data processing violates the LGPD.

Plexo is designed for users who are 18 years of age or older. We implement date-of-birth verification at registration and apply additional detection measures to accounts suspected of being operated by minors. Confirmed underage accounts are immediately and permanently terminated with all associated data deleted.

If you are a parent or guardian and believe a minor has created a Plexo account, contact us immediately at service@plexo.club. We will investigate and, where confirmed, permanently delete the account and all associated data without delay.

All in-app purchases are processed exclusively through Apple App Store or Google Play. Plexo does not store your payment card details. We receive only anonymized transaction confirmation tokens and entitlement data.

If Plexo offers premium features (such as advanced route analytics, exclusive route packs, or expanded matching filters): access is non-transferable between accounts; non-refundable except as required by applicable law or app store policy; and may be forfeited upon account termination for cause.

Transaction records are retained for a minimum of seven years to satisfy applicable accounting, tax, and consumer protection requirements.

Delete your account at any time via Settings > Account > Delete Account, or by emailing service@plexo.club with subject "Account Deletion Request."

Your profile, walk history, GPS tracks, shared content, matching data, messages, and all associated data are removed from public view within 48 hours and from production servers within 30 days. Backup archives are purged within 90 days of the next scheduled rotation.

Certain data is retained where required by law: transaction records (up to 7 years); safety and moderation records (up to 3 years); data subject to a legal hold. All retained data is isolated and processed only for the specific legal purpose requiring its retention.

Material changes are communicated at least 14 days before taking effect via in-app notice, push notification, and/or email to your registered address. Non-material corrections may be made without advance notice.

Continued use of Plexo after any revised Policy's effective date constitutes acceptance. If you do not agree, delete your account before the changes take effect.

Prior versions are available upon request at service@plexo.club.

For questions, data rights requests, or privacy concerns:

• Email: service@plexo.club
• Subject: "Privacy Inquiry — [Your Name]"

We acknowledge inquiries within 5 business days and respond within 30 days.