Privacy Policy

This policy explains what Greenhouse collects, why, and the control you have over it. We collect the minimum needed to run the Service and never sell your data.

What we collect

• Account: your email address (used to sign in and to send care reminders and billing notices).
• Your plants: nicknames, species, rooms, notes, schedules, care history, and any photos you upload.
• Location (optional): the city you choose — used to derive season and local climate for schedules. We do not request browser GPS.
• Usage events: in-house product analytics (e.g. plant added, reminder sent) to improve the Service.

How we use it

To generate and send your reminders, run the care engine and rescue protocols, provide your collection and history, process your subscription, and improve the product. We do not use your data for advertising.

Processors we share with

• Supabase — database, authentication, and private photo storage.
• Vercel & Cloudflare — hosting and DNS.
• Paddle — our Merchant of Record for payments (they process your payment details; we never see full card numbers).
• Hostinger Mail — sending transactional email.
• Open-Meteo — climate/geocoding by city (no personal identifiers sent).
• Plant-identification provider (optional, when you use photo ID) — the photo is sent for identification.

Cookies

We use only essential cookies to keep you signed in. No advertising or third-party tracking cookies.

Your rights

You can export all your data (JSON + photo links) and delete your account and its data at any time from Settings — self-service, no email required. This supports your rights under GDPR and LGPD. You may also email us to exercise any data right.

Retention

We keep your data while your account is active. When you delete your account, your records are removed; photos are purged from storage shortly after. Backups age out on a rolling basis.

Contact

Privacy questions or requests: hello@ploomily.com.

Please have this reviewed by counsel and add your legal entity name and, if required, a Data Protection contact/representative before public launch.