Privacy Policy

1. Introduction

Welcome to Plantiful ("we", "our", or "us"), operated by psquared GmbH. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application ("the App").

2. Information We Collect

Account Information

• Email Address: Collected during sign-up for authentication and account recovery.
• Display Name: The name you choose to identify yourself in the App.
• Profile Photo: If you sign in with Apple or Google, we may receive your profile photo. You can change or remove it at any time.

Plant & Care Data

• Plant Profiles: Names, species, room assignments, light needs, and care schedules you create.
• Care Logs: Records of watering, fertilizing, and repotting events.
• Photo Diary: Photos you take of your plants, along with health ratings and notes. These images are stored securely in our cloud storage.

AI Analysis Data

• Plant Photos for AI: When you use the AI Health Analysis feature (Pro), your plant photo is sent to our backend server, which forwards it to an AI provider (OpenAI) for analysis. The AI returns a health assessment and care tips. We store the analysis results alongside your photo diary entry.
• AI results: The healthiness rating and tips generated by AI are stored in your account and visible only to you.

Device Information

• Push Notification Token: A device token used solely to deliver push notifications you have opted in to receive.
• Device Type & OS Version: Collected for support, compatibility, and notification delivery.

Subscription Data

• Purchase Information: If you subscribe to Plantiful Pro, your payment is processed entirely by Apple or Google. We receive a purchase confirmation but never see your payment details.

3. How We Use Your Information

We use your information exclusively for:

• Authenticating your account and managing login sessions
• Storing and displaying your plant data and care history
• Processing AI health analysis requests (Pro feature)
• Delivering push notifications you have opted in to receive
• Providing, maintaining, and improving App functionality
• Responding to support requests
• Detecting and preventing fraud or abuse

We do NOT:

• Sell your personal data to third parties
• Use your data for advertising or marketing purposes
• Share your data with data brokers
• Track you across other apps or websites
• Use your photos for AI model training

4. Data Storage & Security

Your data is stored securely using industry-standard cloud infrastructure. We implement:

• Encryption of data in transit (TLS) and at rest
• Secure authentication protocols (JWT)
• Row-level security policies on our database
• Access controls and monitoring
• Separate storage for photos with access-controlled URLs

No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Third-Party Services

The App integrates with the following third-party services:

• Apple / Google Sign-In: For secure, passwordless authentication.
• Supabase: Cloud database and file storage for your account data, plant profiles, care logs, and photos. Supabase is hosted in the EU and provides row-level security.
• Firebase Cloud Messaging (FCM): For delivering push notifications and care reminders to your device.
• OpenAI: For AI plant health analysis (Pro feature). Only the specific plant photo being analyzed is sent to OpenAI's API; no other personal data is shared. OpenAI does not use submitted images for model training per their API data usage policy.
• Apple App Store / Google Play Store: For processing subscription payments. We never receive or store your payment details.

These services have their own privacy policies. We only share the minimum data necessary for them to function.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your data — including photos, care logs, and AI analysis results — within 30 days, except where we are required to retain it by law.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your data
• Opt out of push notifications at any time
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

psquared GmbH
Dametzstraße 2-4, 4020 Linz, Austria
[email protected]