Plantilla Privacy Policy

Who we are

Plantilla is published by JC Mobile App Studio LLC, a one-person studio based in Pennsylvania, USA. We are responsible for the app and for the small server that powers its AI features. "We" and "us" in this policy mean JC Mobile App Studio LLC. You can reach us at [email protected].

Short version

• Plantilla has no user accounts. We never ask for your name, email, or phone number.
• We do not use analytics or tracking tools.
• Your vault documents, pay stubs, W-2s, forms, tip and PTO logs, and incident notes are stored on your device. We do not run a database that holds them.
• Scanning a document reads the text on your device. The photo of your document is never sent anywhere.
• The AI features are optional and only work after you accept an in-app consent screen. When you use them, the text you type or the text read from a scanned document (which can include pay amounts and other personal details) goes to our Cloudflare proxy and on to Anthropic to generate the answer. Our proxy does not save that text.
• On iPhone, Social Security and ITIN numbers are removed on your phone before any AI request is sent. Other details, such as your name, address, and pay, are still sent.
• Two small downloads happen without any action from you: a quarterly compliance digest and, on iPhone, a state labor-law data file. They carry no personal information.
• The iPhone version has no ads. The free Android version shows Google AdMob ads, which the one-time purchase removes.
• We do not sell your personal information.

Where your data lives

Everything you create or scan in Plantilla, including documents in the vault, pay stubs, W-2 and W-4 forms, direct deposit details, FMLA and PTO entries, tip logs, and incident notes, is stored locally on your device. There is no Plantilla account and no Plantilla server that stores this content.

iPhone. Plantilla saves its files with Apple's strongest file protection setting, so they are encrypted and unreadable while your iPhone is locked. Your pay predictor history is also encrypted by the app with a key kept in the iOS Keychain on this device only. You can lock the app with Face ID or Touch ID. Plantilla does not use iCloud sync, but its files are included in your iPhone's iCloud Backup or computer backup if you have backups turned on. Those backups are handled by Apple or your computer, not by us.

Android. Your vault files and pay predictor history are encrypted by the app with a key held in the Android Keystore, and the app can be locked with your fingerprint, face, or screen lock. Plantilla allows Android's standard app backup, so app data can be included in your Google account backup if backup is turned on for your phone. The encryption key is not backed up, so encrypted vault items may not open after a restore to a new phone.

Deleting Plantilla from your device removes the data stored on that device.

Document scanning (on-device)

When you scan a pay stub, W-2, or HR document, Plantilla reads the text from the image on your device: Apple's Vision framework on iPhone, and Google ML Kit text recognition on Android. The document image is never sent to us or to anyone else. The recognized text stays on your phone unless you use an AI feature, described next.

AI features (optional, consent required)

Ask Plantilla, the HR Letter Translator, W-2 AI, Benefits AI, and AI pay stub reading on iPhone are powered by a cloud AI model. None of them send anything until you accept the in-app AI consent screen. If you decline, the rest of Plantilla keeps working, and scans are read with on-device rules only. You can withdraw consent at any time in Settings, Privacy and Data.

What is sent when you use an AI feature:

• The question you type, plus the recent messages in that conversation.
• The text read from a document when you ask the AI to read or explain it. On iPhone this includes the full text of a scanned pay stub (pay rates, hours, earnings, deductions, employer name, and anything else printed on it) and of a scanned W-2 (wages, withholding, employer details, and, if they are printed on the form, your name and address). The document image itself is not sent.
• Your selected language and the two-letter code of the state you picked.
• A random install ID created by the app, and the app version. The ID is not linked to your name or any account, and is used only to limit how many AI requests one install can make per day. It stays on your phone until you delete the app or tap Delete all data, which replaces it with a new one. Your internet connection's IP address is also visible to Cloudflare when the request arrives, as with any web request.

Social Security numbers are removed first (iPhone). Before any AI request leaves your iPhone, including Ask Plantilla, the HR Letter Translator, Benefits AI, and AI reading of a pay stub or W-2, Plantilla looks for Social Security and ITIN numbers in the text and replaces them with XXX-XX-XXXX on your phone. It catches numbers written like 123-45-6789 or 123 45 6789, and a plain nine-digit number when a Social Security label appears just before it. Employer ID numbers (EINs) and dollar amounts are left as they are. The last four digits shown in your W-2 summary are read on your phone before this step and are never sent. The removal is automatic but not perfect: a number printed in an unusual way, or with no label near it, could be missed. It does not remove your name, address, birth date, or bank account numbers.

On Android, some writing help (polishing, summarizing, and proofreading your own text) runs on your phone with Google's on-device Gemini Nano model where your phone and language support it. Nothing leaves the phone for those. When on-device help is not available, or for open questions, the request goes to the cloud as described above, and only after you consent. Android does not send pay stubs or W-2s to the AI. The Android app does not yet apply the automatic Social Security number removal described above to text you type, so leave those numbers out of your questions.

Who receives it:

• Our Cloudflare proxy, a Cloudflare Worker we operate, which adds our instructions, forwards your request to the AI provider, and returns the answer. It does not save or log what you send. As a backup, it also strips any Social Security number shaped value from W-2 AI results before returning them. Cloudflare hosts it under the Cloudflare privacy policy.
• Anthropic (Claude), the AI provider that currently generates the answers, under the Anthropic privacy policy. Under Anthropic's commercial terms, content sent through its API is not used to train its models. Anthropic may keep API data for a limited time for safety and abuse monitoring, as its policy describes.
• We have also built a version of the proxy that uses Google's Gemini API instead of Anthropic. It is not in use today. If we switch, we will update this policy first.

Because these features send text off your device, only include what the AI needs. Before you scan or ask, cover or leave out account numbers, birth dates, and addresses, including your dependents'. Covering your Social Security number is still a good extra step. The AI can explain a document without any of them.

Automatic downloads

• Compliance digest (iPhone and Android). When the app opens, it checks our Cloudflare proxy for the latest quarterly compliance digest. This is a plain download. It sends no install ID and no personal information.
• State law data (iPhone). About once a week, the app downloads a public file of state labor-law information from jcmobileappstudio.com. It sends no personal information. The Android version ships with this data built in.
• Blank W-4 (iPhone). When you use the W-4 tool, the app downloads the current blank Form W-4 from irs.gov. It sends nothing about you.

Like any web request, these reveal your IP address and basic device information to the server that answers them (Cloudflare for our site and proxy, the IRS for irs.gov).

Location

If you allow it, Plantilla uses your approximate location once to work out which U.S. state you are in, so it can show local resources. The app asks Apple (on iPhone) or Google's location services (on Android) to turn that position into a state name. Plantilla does not store your coordinates or send them to us. You can pick your state by hand instead.

SharePlay document review (iPhone)

If you start a SharePlay review during a FaceTime call, the document's title, its page count, and which page you are on are shared with the people on the call through Apple's SharePlay service. The document contents are not sent by Plantilla.

Purchases

Plantilla Premium is a one-time purchase, billed through Apple's App Store on iPhone and Google Play on Android. The store handles the payment. We never see your card, your Apple Account, or your Google account. The store tells the app whether the purchase is valid, and that status is stored on your device. Workers who bought an earlier Plantilla subscription keep Premium for as long as that subscription remains active.

What we receive, and what third parties receive

What reaches servers we operate:

• Our Cloudflare proxy receives AI requests (described above) and passes them through without saving them. The only thing it stores is a daily request counter for each random install ID, which deletes itself automatically after about 25 hours.
• Our website serves the state-law file and compliance digest. These requests carry no personal information.

What third parties handle under their own policies:

• Anthropic, AI requests you choose to make. Privacy policy.
• Cloudflare, which hosts our proxy and website and processes standard connection data such as IP addresses. Privacy policy.
• Apple, for App Store purchases, location lookups, SharePlay, and backups on iPhone. Privacy policy.
• Google, for Google Play purchases, location lookups, backups, on-device ML Kit features, and AdMob ads on Android. Privacy policy.

Sale, sharing, and targeted advertising

We do not sell personal information, and we never give your pay stubs, documents, incident notes, or anything you type into the app to advertisers.

iPhone: no ads and no ad SDK.

Android: the free version shows ads from Google AdMob. Google may use your device's advertising ID and information such as approximate location and device type to show ads, including personalized ads where you allow them. Where the law requires it, Plantilla shows Google's consent form before any ad loads, and you can reopen it in Settings under Privacy and data. You can also reset or delete your advertising ID, or opt out of ad personalization, in your Android settings. Buying Premium removes ads permanently: once you own it, the ads SDK is never started. See how Google uses data for ads.

Permissions Plantilla may request

• Camera, only when you scan a pay stub or HR document.
• Photos, only when you pick a document image from your library (iPhone).
• Location, approximate, only to find your state.
• Face ID or biometrics, only if you turn on the app lock.
• Notifications, only if you enable reminders such as I-9 deadlines, FMLA timelines, or the compliance digest.

Health-related information

Some things you may keep in Plantilla, such as FMLA leave entries, benefits documents, or incident notes, can mention a medical condition or treatment. Plantilla stores these on your device. They reach us or a third party only if you send them through an AI feature, in which case they pass through our proxy to Anthropic as described above and are not stored by us. We never sell this information or use it for advertising. You can delete it at any time by deleting the entry in the app or deleting the app.

Data retention

• On your device: until you delete it in the app or uninstall Plantilla.
• In your iCloud or Google backup: according to your backup settings.
• AI request text: not stored by our proxy. Anthropic keeps API data according to its own policy.
• Rate-limit counter for your install ID: deleted automatically after about 25 hours.
• Connection logs kept by Cloudflare as our host: according to Cloudflare's policy.

Your privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Indiana, Kentucky, Rhode Island and other US states, or the EU/UK), you may have the right to access, correct, delete, or get a copy of personal data, and to opt out of targeted advertising, sale, or profiling. Many of these laws may not apply to a studio our size, but we honor these requests from everyone.

Because Plantilla has no accounts and our proxy keeps nothing but a short-lived counter, we usually hold no personal data about you. Your own content can be deleted in the app. To make a request, email [email protected]. We respond within 45 days, and we will not treat you differently for asking. If we decline your request, you can appeal by replying to our answer with "Appeal". We will respond within 45 days (or up to 60 days where the law allows). If your appeal is denied, you may contact your state attorney general.

Children

Plantilla is a general workers' rights and productivity app and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

International users

Plantilla is built for U.S. workers. The little data that reaches us, AI requests passing through our proxy, is processed in the United States and on Cloudflare's global network.

Security

Plantilla data is encrypted in transit when it leaves your device, and stored on your device with your platform's file protection plus the app's own encryption for sensitive items. On iPhone, Social Security and ITIN numbers are removed on the phone before any AI request is sent, as described above. Your device passcode, PIN, or biometric lock is the most important protection, so use a strong one. No system is perfectly secure, but we keep what we hold to a minimum.

Legal information disclaimer

Plantilla provides general information about pay, benefits, and workers' rights, not legal advice. It does not create an attorney-client relationship. For advice about your specific situation, consult a qualified professional.

Changes

When this policy changes, we update the "Last updated" line above and post the new version at this URL. Material changes are also noted in the app's release notes.

Contact

Questions or requests: [email protected]