Privacy Policy

GardenPal ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and website (https://www.garden-pal.com). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the App.

1. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, or other contact details, only when you voluntarily provide them (e.g. when submitting feedback or requesting support).
• Device Information: Model, operating system, and unique device identifiers.
• Usage Data: Information about how you interact with the App, such as features used and time spent.
• Location Data: If you grant permission, we may collect precise or approximate location data to provide region-specific plant suggestions.

2. How We Use Your Information

We use the collected information to:

• Provide, operate, and improve the App and our services
• Personalise plant recommendations and user experience
• Respond to support requests and feedback
• Monitor and analyse usage for internal analytics and performance improvements

3. Sharing of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share data with trusted third-party service providers (such as analytics or hosting services) only as necessary to operate and improve the App.

4. Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Withdraw consent where processing is based on consent

To make a request, please contact us at: support@garden-pal.com

5. Data Retention

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

6. Security

We take reasonable technical and organisational measures to protect your data. However, no system is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

GardenPal is designed to be safe and suitable for users of all ages, including children. However, we do not knowingly collect personal information from children under 13 without verifiable parental consent, in accordance with applicable laws such as the Children's Online Privacy Protection Act (COPPA) in the United States and similar global regulations.

Please note:

• GardenPal may request access to precise location data to provide accurate plant recommendations based on climate and geography.
• While this data improves the app experience, it may be considered sensitive when used by children.

If you are a parent or guardian and believe your child has provided us with personal information or enabled location sharing without your consent, please contact us at support@garden-pal.com, and we will take appropriate action, including deleting such data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

9. Contact Us

If you have any questions about this Privacy Policy or our practices, please contact us at:

Your Rights Under the General Data Protection Regulation (GDPR)

If you are located in the United Kingdom, European Union, or European Economic Area, you have certain rights under the General Data Protection Regulation (GDPR) regarding your personal data. GardenPal is committed to protecting your rights and processing your data lawfully and transparently.

As a user, you have the right to:

• Access Request a copy of the personal data we hold about you.
• Rectification Request that we correct any inaccurate or incomplete information.
• Erasure Ask us to delete your personal data where there is no valid reason for us to retain it ("right to be forgotten").
• Restriction of Processing Request that we restrict how we use your data.
• Data Portability Receive a copy of the data we have about you in a structured, commonly used, and machine-readable format, or request that we transfer it to another provider.
• Object to Processing Object to us using your personal data, particularly where we process it based on our legitimate interests or for direct marketing purposes.
• Withdraw Consent If we are processing your data based on your consent (such as precise location), you may withdraw that consent at any time.

How to Exercise Your Rights

To make a request under GDPR or ask questions about how we process your data, please contact us at:

We aim to respond to all requests within 30 days. You also have the right to lodge a complaint with your local Data Protection Authority if you believe your data rights have been violated.

Data Hosting and Transfers

We use Supabase to host and manage our application data. All user data is stored on secure servers located in the United Kingdom (eu-west-2 region). This means your personal data remains within a jurisdiction that is fully compliant with the UK GDPR and the European Union's GDPR regulations. We ensure that appropriate technical and organisational safeguards are in place to protect your information.