Privacy Policy

Last updated: October 27, 2025

1. Introduction

EDH Dev ("we", "our", or "us") operates the PlantCareAI website and service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information You Provide

  • Email Address: Required for account creation and magic link authentication
  • Plant Information: Plant names, descriptions, photos, and care schedules you add
  • Location Data: Optional city or ZIP code for weather-aware plant care tips
  • Questions and Interactions: Questions you ask the AI assistant and related information

Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent on the Service
  • Device Information: Browser type, operating system, IP address
  • Analytics: We use Cloudflare Web Analytics (privacy-preserving, no cookies)

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Authenticate your account via magic links
  • Generate personalized plant care recommendations
  • Provide weather-aware suggestions based on your location
  • Improve and optimize the Service
  • Send you important Service updates (via email)
  • Protect against abuse and unauthorized access

4. Data Storage and Security

Your data is stored securely using Supabase (a PostgreSQL database provider) with the following protections:

  • Encryption: All data is encrypted at rest and in transit (HTTPS/TLS)
  • Row-Level Security: Database access is restricted to your own data
  • Rate Limiting: Protection against brute force and abuse attempts
  • Regular Backups: Your data is backed up regularly

5. Third-Party Services

We use the following third-party services:

  • Supabase: Database, authentication, and file storage (Privacy Policy)
  • OpenAI: Primary AI-powered plant care recommendations (Privacy Policy)
  • Google Gemini: Backup AI service for plant care recommendations (Privacy Policy)
  • OpenWeatherMap: Weather data for care suggestions (Privacy Policy)
  • Cloudflare: Web analytics (no cookies, privacy-preserving) (Privacy Policy)

Important: When you ask the AI assistant a question, your question and plant information may be sent to OpenAI's API or Google Gemini (as a fallback). These providers do not use API data to train their models. See their respective privacy policies for details.

6. Data Sharing

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

  • With Your Consent: When you explicitly agree to share information
  • Service Providers: With trusted third-party services (listed above) necessary to operate the Service
  • Legal Requirements: If required by law, regulation, or legal process
  • Safety and Security: To protect the rights, property, or safety of EDH Dev, users, or others

7. Your Privacy Rights

You have the right to:

  • Access Your Data: Request a copy of the personal information we hold about you
  • Correct Your Data: Update or correct inaccurate information
  • Delete Your Data: Request deletion of your account and associated data
  • Export Your Data: Request a copy of your plant data in a portable format (coming soon)
  • Opt-Out: Opt out of non-essential emails (essential Service emails may still be sent)

To exercise these rights, please contact us at [email protected].

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain data.

9. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

10. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States.

11. Cookies and Tracking

We use minimal cookies for essential functionality:

  • Session Cookie: To keep you logged in (required for authentication)
  • Analytics: Cloudflare Web Analytics (no cookies, privacy-preserving)

We do not use third-party advertising cookies or tracking pixels.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date and, if appropriate, sending you an email notification.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at [email protected].