Privacy Policy

Who this policy covers

This policy applies to Plant Whisper's website and installable web app. It does not cover websites or services operated independently by others.

Data we collect

• Account details, including email, display name, and authentication identifiers.
• Invite and shared-plant membership records.
• Plant names, species, photos, messages, voice transcripts, care events, reminders, and notes you add.
• Basic security and request logs needed to run and protect the service.

How we use data

• To create accounts and verify invite access.
• To save plants, provide plant-scoped AI responses, show shared history, and manage co-whisperers.
• To provide support, prevent abuse, and keep the service reliable.
• To meet applicable legal and security obligations.

Shared plants

Plant owners can invite another account to a plant. After acceptance, plant members can see that plant's existing and future conversation, photos, care history, and reminders. Only invite people you trust.

Service providers

Supabase provides authentication, database, and private photo storage. Cloudflare provides hosting and security. When AI features are enabled, the selected provider receives only bounded content needed for the current plant response. V1 does not include advertising.

When information is disclosed

We disclose information to plant members you authorize, service providers acting for us, and authorities when legally required or necessary to protect rights, safety, and service integrity. We do not sell personal information or use it for behavioral advertising.

Voice and photos

Raw microphone audio is discarded after transcription by default; the transcript is shared as the message. Plant photos are private to plant members and should not include people or location details you do not want to share.

Retention and choices

We keep account and plant data while it is needed to provide the service. You may ask to access, correct, or delete your data, subject to applicable law. See Account deletion.

In a shared plant, members can remove their own messages, conversation photos, and care entries; the plant owner can also remove shared contributions. A removed message or photo leaves a placeholder, and existing replies stay in the shared history, but the removed source is excluded from future AI guidance. Removed photos are queued for private-storage deletion.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or object to certain processing. We may verify your identity before fulfilling a request. Contact us to exercise a right; you may also appeal a denied request by replying to our decision.

International processing

Our providers may process information in countries other than your own. Where required, we use appropriate contractual and organizational safeguards for those transfers.

Security

We use access controls and service-provider safeguards designed to protect data. No online service can guarantee absolute security.

Children

Plant Whisper is not directed to children under 13. Do not create an account for a child under 13.

Contact

Privacy requests: privacy@plantwhisper.app.

This policy should be reviewed by qualified counsel before public launch and updated to match the final provider configuration.