Privacy Policy

Last updated: 7 October 2026

Gardenly is a mobile app for identifying plants, assessing their condition and getting care reminders. This policy explains what data we collect, what we use it for, who we share it with and how you can control it. The app is developed and operated by Mateo Lorenzo ("Gardenly" or "we"), based in the Province of Buenos Aires, Argentina.

If you have any questions, write to us at mateolorenzo.dev@gmail.com.

1. How your account works

Gardenly does not ask you to register. When you finish the welcome flow we create an anonymous account identified by a random code, with no name, email or password. That code is what links your plants, your reminders and your subscription. If you delete the app without having linked an account, that identifier is lost and the data attached to it becomes inaccessible to you.

Later on the app will let you link your account with Apple or Google so you can recover your garden on another device. If you do, we only receive the identifier that provider gives us and, if you allow it, your email address.

2. What data we collect

Data you enter in the app

• Plant photos you take with the camera or pick from your gallery to identify, diagnose or save to your garden.
• Information about your plants: name, nickname, species, pot, where they live in your home, notes, health check-ups and treatments.
• Reminder preferences: whether they are on, at what time, and which ones you paused.
• Feedback and ratings you send about the app's results.

Data generated as you use the app

• Approximate city. If you allow it, we use your location once to get the name of your city and its approximate coordinates, so we can tune care to the weather. We store the city, not a location history. You can also pick the city by hand without granting location access.
• Analysis results: the species identified, the estimated health status and the care plans the app generates.
• Free plan usage: how many free analyses you have used.
• Subscription status: whether you have full access active and until when. We neither receive nor store your card details.
• Usage data: which features you use and when; for example, whether you finished the welcome flow, ran an analysis, added a plant, logged a care task or opened the subscription screen, and which screens you visit. It does not include your photos or the text of your notes.
• Technical and diagnostic data: device model, operating system, app version, language and time zone, and reports of errors and unexpected app crashes.
• Approximate country and city based on your IP address. When the app sends usage data, our analytics provider records the IP address of the connection and uses it to estimate the country and city. We only use this for statistics, such as knowing which countries the app is used in, and not to pinpoint your location.
• Download source. If you came to Gardenly through a content creator's link, we store that creator's code with your account. On Android we get it from the install information Google Play provides.

What we don't do

• We don't access your whole gallery: only the photos you pick.
• We don't show ads and we don't sell data to third parties.
• We don't use your data to track you across other apps or websites.
• We don't use push notifications: reminders are scheduled on your own device.

3. What we use the data for

• Identifying the species of your plants and estimating their health from the photos.
• Building watering, fertilizing and treatment plans, and scheduling reminders on your device.
• Tuning care to the weather in your city.
• Storing your garden so it is there every time you open the app.
• Managing the free plan and the full access subscription.
• Improving the app's accuracy from your feedback on the results.
• Understanding how the app is used and measuring what works, to decide what to improve.
• Detecting and fixing errors and unexpected crashes.
• Calculating the commission of content creators who recommend the app.
• Handling support requests.

4. Who we share data with

We use providers that process data on our behalf, each for a specific function:

• Supabase (database and file storage). Stores your anonymous account, your plants and your photos. The servers are in the São Paulo region, Brazil, on Amazon Web Services infrastructure. Photos are kept in a private space only your account can reach.
• Google (Gemini API). When you ask to identify or diagnose a plant, we send the photo to Google so an artificial intelligence model can analyze it and return the result. Google processes that image under its own terms of service for the API. We do not send your name or your account identifier along with the photo.
• RevenueCat (subscription management). Receives your anonymous identifier and the purchase information the app store provides, in order to validate your subscription, and the code of the creator who recommended the app to you, if any. It also reports your subscription events to PostHog, such as the start of a trial, a purchase or a renewal.
• PostHog (analytics and error reporting). Receives your usage data, technical and diagnostic data and the IP address of the connection, linked to your anonymous identifier. It does not receive your name, your email, your photos or the text of your notes. Its servers are in the United States.
• Apple App Store and Google Play (payments). Subscription payments are processed by Apple or Google using your store account details. We never see or store payment data.
• Open-Meteo (weather). Receives the approximate coordinates of your city in order to return the forecast. It receives no identifier of yours.
• Expo Application Services (server infrastructure). Hosts the service that connects the app to the providers above.

We may also share data if required to do so by law or by a competent authority.

5. International transfers

Your data may be processed outside Argentina, in particular in Brazil and the United States, where the providers above operate. We choose providers that offer adequate security and confidentiality guarantees under Argentina's Personal Data Protection Act (Law 25.326).

6. How long we keep data

We keep your data for as long as your account exists. When you use "Delete my data" in Settings, we immediately remove your plants, photos, notes, check-ups and preferences from our servers. The anonymous account, the record of your subscription and the code of the creator who recommended the app to you, if any, are kept so we can honor the free plan quota and any subscription you purchased, and settle commissions. Usage and diagnostic data are not removed by that option either: they stay linked to your anonymous identifier and we only use them for statistics. You can ask us to delete everything, including that data, by writing to us.

The photos sent to Google for analysis are not kept by us beyond your garden; Google handles them under its API terms.

7. Your rights

As the owner of your data you can access it, correct it, update it or ask for it to be deleted. Much of this you can do directly in the app: editing your plants, changing the city or using "Delete my data". For anything else, write to mateolorenzo.dev@gmail.com and we will respond within the legal deadlines.

Argentina's Agency for Access to Public Information, the supervisory authority for Law 25.326, has the power to handle complaints and claims about breaches of personal data protection rules.

8. Device permissions

• Camera: to take photos of your plants. Only used when you open the camera inside the app.
• Photos: to pick an image from your gallery. We only access the photo you select.
• Location: to detect your city. Used once; we do not track your position.
• Notifications: for care reminders, which are scheduled on your own phone.

You can revoke any of these permissions from your system settings. The app keeps working, with that feature turned off.

9. Security

Data travels encrypted between the app and our servers. Access to your information is restricted to your own account through database-level security rules, and the keys for external services are never bundled into the app.

10. Children

Gardenly is not directed at children under 13 and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

11. Changes to this policy

If we change this policy we update the date above and, when the change is significant, we let you know inside the app before it takes effect.

12. Contact

Mateo Lorenzo, Province of Buenos Aires, Argentina.

Email: mateolorenzo.dev@gmail.com