Plant Care Privacy Policy

1. Who is responsible for your data

The controller of your personal data is Przemysław Biegański, the creator of the Plant Care app. For any matter concerning your data, write to contact@plantcareapp.pl.

2. What data I process

• Account: email address and password. The password is stored only as an encrypted hash, so nobody knows it.
• Display name: the part of your email address before the @ sign. Members of your shared gardens see it next to the entries you add.
• What you enter in the app: gardens and their members, plants (name, species, location, notes, purchase date, photo), care schedule and care history, plant journal with photos.
• AI diagnosis (only when you use it): the plant photo, your optional description and plant information from the app (species, care intervals and recent care). The diagnosis photo is not stored on the server unless you save the result to the journal. I only store the number of diagnoses per day (limit of 5 per day).
• Security data: the time of failed attempts to join a garden with a code (protection against guessing codes) and technical data recorded by the server, such as IP address and sign-in time.

Only on your phone (never sent to the server): language, theme, notification time and settings. Care reminders are scheduled locally on the phone.

The app does not collect location or contacts, shows no ads and uses no analytics or tracking tools.

3. Purposes and legal bases

• Running your account and the app: storing and syncing data, shared gardens, AI diagnosis on your request, emails with codes (email confirmation, password reset). Legal basis: performance of a contract, i.e. providing the service (Art. 6(1)(b) GDPR).
• Security and abuse prevention (attempt and diagnosis limits, technical data) and replying to messages. Legal basis: my legitimate interest (Art. 6(1)(f) GDPR).

4. Who I share data with

I do not sell data. I use services of companies that process data on my behalf:

• Supabase: database, sign-in and photo storage. Servers in the European Union (Ireland).
• Google (Gemini API): photo analysis for AI diagnosis. I use the paid service, in which Google does not use the submitted content to improve its products; it may retain it for a limited time to detect abuse.
• Brevo (France): sending emails with codes.
• ImprovMX: forwarding messages sent to the contact address.

Other members of a garden also see that garden's data. You download the app from Google Play, which processes data under its own privacy policy.

5. Transfers outside the EEA

Some providers are companies based outside the European Economic Area or may process data outside it. Such transfers rely on standard contractual clauses approved by the European Commission or on an adequacy decision (e.g. the EU-U.S. Data Privacy Framework).

6. How long I keep data

I keep data until you delete your account. When you delete your account, the following are removed immediately: the account, gardens where you are the only member (with their plants, photos and history), the diagnosis counter and the record of join attempts. Your entries in gardens shared with other people (care history, journal) stay in those gardens without an author. Provider backups may still contain data for a short time until they are overwritten.

7. Deleting your account

You can delete your account in the app (Profile → Delete account) or on the account deletion page by signing in with your email and password.

8. Your rights

You have the right to access, rectify and erase your data, to restrict its processing and to data portability, and to object to processing based on legitimate interest. Write to contact@plantcareapp.pl. You can also lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (uodo.gov.pl), or the authority in your country.

9. Security

Connections to the server are encrypted. Garden data and photos are available only to members of that garden, and photos are stored privately and shared through links that expire after a short time.

10. Age of users

The app is intended only for people aged 18 or over. By creating an account, you confirm that you are at least 18 years old.

11. Changes to this policy

I will announce significant changes on this page by updating the date at the top and, if needed, in the app.