Privacy policy

1. Who is responsible

The controller is [Nome completo ou empresa], [Rua e número], [CEP e cidade], Швейцария. E-mail: [email protected]. For any question about your data, write to this address.

2. Data we process

• Account: name, e-mail address, password (stored only as a secure hash), language, time zone, plan and subscription status.
• Photos you take or upload: sent to our AI provider to identify or diagnose the plant. We keep a small thumbnail (480 px) with the result in your history and garden.
• Your garden: plants, nicknames, rooms, notes, watering and care history, health check-ups and chat messages with the assistant.
• Location, only if you choose to share it: approximate coordinates and the name of your city, used for weather, frost and heat alerts and plants for your region.
• Notifications, only if you turn them on: the push address of your browser or the token of your phone, and a log of the reminders sent so each goes out once.
• Payments: handled by Stripe. We receive your customer number, plan and payment status, never your full card details.
• Without an account: to count the free daily limit we store a one-way, salted hash of your IP address, never the address itself; it is erased after 30 days.
• Technical data: our hosting provider records server logs (IP address, time, requested page, browser) for security and troubleshooting.
• Usage of the AI: for each AI request we record the type of task, the model and the number of tokens, to control costs.

3. Why we process it (purposes and legal bases)

• To provide the app and your account (identification, diagnosis, garden, reminders, chat) — performance of the contract (GDPR art. 6(1)(b)).
• Location and push notifications — your consent (art. 6(1)(a)), which you can withdraw at any time in your account or device settings.
• Security, prevention of abuse, fixing errors, controlling costs and building the shared species library (care guides written once per species and reused for everyone, without any personal data) — our legitimate interests (art. 6(1)(f)).
• Accounting and tax records for paid plans — legal obligations (art. 6(1)(c)); Swiss law requires us to keep them for 10 years.

4. Artificial intelligence

Identifications, diagnoses, care guides and chat answers are generated by artificial intelligence (Claude models by Anthropic). They can contain errors and are no substitute for a professional's advice. The photo and, for the chat, your question and the details of the plant concerned are sent to Anthropic for processing. Under Anthropic's commercial terms, data sent through its API is not used to train its models. No decision with legal or similarly significant effect on you is made automatically.

5. Who receives data (service providers)

We only share data with providers that help us run Leaflora, under contracts that bind them to protect it:

We never sell personal data and do not show advertising.

6. Transfers abroad

Some providers process data outside Switzerland and the EU/EEA, in particular in the USA and in Сингапур. Where the destination does not offer adequate protection recognised by the Federal Council or the European Commission, we rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework (where the provider is certified) or on the standard contractual clauses approved by the European Commission and recognised by the FDPIC.

7. How long we keep it

• Account data, garden, photos and chats: until you delete them or your account.
• Hashed IP addresses of visitors without an account: 30 days.
• Server logs at the hosting provider: usually a few weeks.
• Accounting records of payments: 10 years, as required by law.

8. Your rights

You can ask for access to your data, a copy in a common format (portability), correction, deletion, restriction or object to processing, and withdraw consent at any time. Write to [email protected]; we answer within 30 days.

You can delete your account and all its data yourself, at any time, in Account → Delete account (in the app or at leaflora.app/account). An active subscription is cancelled at the same time.

You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, in the EU/EEA, with the data protection authority of your country.

9. Security

Connections are encrypted (HTTPS), passwords are stored only as hashes, and access to the database is restricted. No system is completely secure; if a breach puts you at high risk, we will tell you and the authorities as the law requires.

10. Children

Leaflora is meant for people aged 16 and over. Younger children may use it only with the consent of a parent or guardian.

11. Changes

We may update this policy when the app or the law changes. The date at the top shows the latest version; we will tell you in the app about important changes.