Privacy Policy
Last updated: September 24, 2026
This policy explains what Poplog collects, why we use it, who helps us provide the service, and the choices you have.
Who we are
Poplog is a subscription web app operated by the Poplog team ("we", "us", "our"). We are the data controller for the personal information you provide when you use the app. If you have questions about this notice or your data, reach us via our contact support page.
What personal data we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Account data | Email address, fan name, and authentication provider ID used to create and secure your account. | Contract performance |
| Content you add | Showlog entries, Catalog items, Lyriclog entries, Wishlog items, Memorylog posts, Yearlog picks, Looplog posts, plaque descriptions, and photos you add. | Contract performance |
| Subscription status | Plan name, status, Stripe customer/subscription IDs, and current-period dates. We do not store card numbers. | Contract performance |
| Usage data | Feature usage, room counts, and achievement progress used to enforce plan limits and improve the product. | Legitimate interests |
| Technical logs | IP address, browser type, timestamps, and error traces needed for security, fraud prevention, and reliability. | Legitimate interests / legal obligation |
| Support messages | Emails or in-app messages you send us to resolve issues or answer questions. | Contract performance / legitimate interests |
| AI feature inputs | Descriptions you submit to Plaquelog and the resulting plaque text. Inputs are sent to our AI service provider only to generate the result you request. | Contract performance |
How we share your data
- Stripe — our payment processor. Stripe handles card processing, subscriptions, and receipts on our behalf.
- Cloud infrastructure providers — hosting, database, and storage services that run the app and keep your data available and backed up.
- Authentication providers — Google and Apple, if you choose to sign in with them.
- Error monitoring — Sentry, to capture unhandled errors and help us fix bugs.
- AI processing — Lovable AI and its model providers process Plaquelog requests to return the personalized text you ask us to generate.
- Professional advisers — legal, accounting, or tax advisers when necessary to protect our rights or comply with the law.
- Authorities — regulators, courts, or law enforcement when required by law or to protect our users.
International transfers
Your data is stored and processed by cloud service providers located in the United States and other jurisdictions where necessary to operate the service. When data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions to protect your information.
Data retention
We keep your account and content for as long as your account is active. If you delete your account, we remove or anonymise your personal data within 30 days, except where we need to retain records for legal, tax, or fraud-prevention purposes. Subscription records may be kept longer to meet tax and accounting obligations.
Security
We use industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS), hashed credentials, row-level access controls in the database, least-privilege service keys, and private storage buckets for uploaded images.
Cookies and similar technologies
We use essential cookies and local storage to keep you signed in, remember your theme choice, and maintain basic app state. We do not use advertising or third-party marketing cookies. You can clear local storage through your browser settings, but doing so will sign you out.
Album cover art and third-party content
When you add an album, Poplog may fetch a small identifying thumbnail from the Cover Art Archive on demand. We do not build an app-owned image library from these covers. If you provide a public Pinterest link, Poplog may retrieve the public preview image for that pin. Pinterest and other third-party sites apply their own privacy terms. You are responsible for ensuring you have the right to upload or link any photos or content you add.
AI-generated plaques
Plaquelog sends the description you enter to Lovable AI to create your requested plaque. Do not include sensitive personal information in a plaque prompt. Generated text may be inaccurate or unexpected, so review it before copying or sharing it. Poplog does not use your plaque description to make decisions about you.
Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your personal data ("right to be forgotten").
- Restrict or object to certain processing.
- Receive a portable copy of your data.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data-protection supervisory authority.
To exercise any of these rights, contact us via our contact support page. We aim to respond within one month.
Children
Poplog is not intended for users under 13. We do not knowingly collect personal data from children under 13. If you believe we have done so, contact us and we will delete the information.
Changes to this notice
We may update this Privacy Policy as the app evolves. Material changes will be surfaced in the app or by email where appropriate. The "Last updated" date at the top of this page shows when it was last revised.