LeafWatch Privacy Policy

1. Introduction

This Privacy Policy explains how LeafWatch collects, uses, and protects personal information when you use our web app, Android app, and related services. D.R.P.H. HOLDINGS LLC is the data controller for personal information described here.

2. Information We Collect

• Information you provide: name, email, credentials, plant names and care data, photos, notes, and location group names.
• Automatically collected: device and browser type, IP address, usage activity, push notification tokens, and performance logs.

  Analytics and diagnostics (web and Android apps): We collect limited, anonymous usage and performance data to understand how the product is used and to improve reliability. This may include app interactions (for example, screens viewed, feature usage, sign-up and subscription conversion events), crash reports, and technical device/browser information. We do not send plant nicknames, plant notes, photos, or other free-text content you enter into analytics services.

• Weather data context: weather data is fetched from third-party providers using location coordinates associated with your saved locations.

3. How We Use Information

We use your information to provide plant monitoring features, generate weather alerts, deliver notifications, improve reliability, maintain security, and provide support.

4. Push Notifications

If enabled, LeafWatch may send frost alerts, heat alerts, care reminders, and system notifications. You can disable notifications in your device settings. On Android, optional on-time delivery of watering and weather-action reminders may use the system Alarms & reminders permission when you enable it. If you do not enable it, reminders may be delivered with slight timing variation; the app remains fully usable.

5. Analytics: What We Do and Don't Collect

LeafWatch uses analytics to improve the product, not to sell data or show ads.

We may collect anonymously:

• Feature usage and conversion events (for example, account sign-up, adding a plant, starting a subscription)
• Crash and performance diagnostics
• General device/browser type and app version

We do not send to analytics:

• Plant nicknames or custom plant names
• Plant notes, journal entries, or photo content
• Precise location coordinates
• Data for advertising or cross-app tracking

You can learn more about Google's practices at Google Privacy Policy. LeafWatch does not enable Android advertising ID collection.

6. Data Sharing

We may share limited data with service providers that help us operate LeafWatch, including:

• Cloud hosting and database providers (for example, Supabase — account and plant data storage)
• Weather and plant reference providers (for example, Open-Meteo and Perenual — forecast and species lookups for your saved locations)
• Payment processors (subscription billing on web; Google Play handles Android billing)
• Analytics and crash reporting providers, including Google Analytics (GA4) on the web app and Firebase Analytics and Firebase Crashlytics on the Android app. These services receive anonymous product-usage and stability data only, not plant nicknames, notes, or ad-targeting profiles. We do not use analytics for advertising, and we do not sell personal data.

We require service providers to use personal information only to perform services for us and to protect it appropriately.

7. Data Retention

Account data is retained while your account is active. Deleted accounts are removed within 30 days, while backups may persist temporarily.

8. Your Rights

Depending on where you live, you may have rights to access, correct, update, delete, or restrict use of your personal information, and to withdraw consent where processing is based on consent. You may also have the right to data portability where applicable.

How to exercise your rights

• Delete data or your account: follow our Data Deletion page (in-app or web).
• Access, correction, or other requests: email [email protected] from your account email with a description of your request.

We aim to respond to verified privacy requests within 30 days, or within the timeframe required by applicable law. Account deletion is typically completed within 30 days as described in Section 7.

United States — California

California residents may request disclosures about categories of personal information collected, sources, purposes, and sharing, and may exercise applicable rights under the California Consumer Privacy Act (CCPA), as amended, by contacting us at the email above.

United Kingdom and European Economic Area (where UK GDPR applies)

You may have rights including access, rectification, erasure, restriction, objection, and portability. You may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Australia

You may request access to and correction of personal information we hold about you. You may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

New Zealand

You may request access to and correction of personal information. You may complain to the Office of the Privacy Commissioner at privacy.org.nz.

Canada

You may request access to and correction of personal information and challenge our compliance with applicable privacy law (including PIPEDA, where it applies). You may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

9. Security

LeafWatch uses encrypted transport (TLS 1.2+), secure authentication practices, role-based controls, and regular updates. For more detail, see our Security Policy, including how we handle security incidents and notifications where legally required.

10. Children

LeafWatch is not intended for children under 13.

11. International Transfers

We are based in the United States. Personal information may be stored and processed in the United States and in other countries where our service providers operate.

When we transfer personal information internationally, we use appropriate safeguards as required by applicable law (for example, contractual protections with vendors, and reliance on adequacy decisions or standard contractual clauses where relevant for UK and EEA transfers).

By using LeafWatch, you acknowledge that your information may be processed outside your country of residence. Where local law requires, we will provide additional information about cross-border disclosures (including to recipients in the United States) upon request.

12. Changes

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated “Last updated” date. For material changes, we may also notify you by email or in-app notice where appropriate. Where required by law, we will obtain your acknowledgment or consent before material changes take effect.

Continued use of the Service after the effective date of an update constitutes acceptance where permitted by law; this does not limit non-waivable rights under applicable privacy law.

13. Contact

Privacy and data rights: [email protected]