Privacy Policy

Information we process

• Account information: email address and optional profile name for authentication, account management, and support. The app may create an anonymous Firebase account before you register.
• Plant content: photos you choose to capture or upload, plant names, diagnoses, care plans, journal entries, garden information, and conversations with Arlo.
• Purchase information: product identifiers, subscription entitlement, purchase status, and transaction identifiers. Leafora does not receive or store your payment-card details.
• Diagnostics and interactions: sanitized crash diagnostics and privacy-aware product interaction events, subject to the consent settings available in the app.
• Device permissions: camera and selected photos for plant analysis; notifications and boot completion for care reminders. Leafora does not collect precise location or advertising identifiers for tracking.

How information is used

We use information to authenticate users, provide plant identification and care features, store your plants and reminders, operate subscriptions and Leaf Coins, prevent abuse, provide support, secure the service, and improve reliability when you have enabled the relevant consent.

Service providers

• Google Firebase: authentication, database, file storage, server functions, and service security.
• Apple App Store and Google Play: purchases, subscriptions, and payment processing on the applicable platform.
• RevenueCat: subscription entitlement and purchase-state synchronization.
• OpenAI: server-side processing of the plant images, prompts, and saved diagnosis context needed to return AI-assisted plant-care results.

We do not sell personal information, show third-party advertising, or use personal information for cross-app advertising tracking.

Consent for third-party AI processing

Before an AI feature sends data, Leafora asks for your explicit permission. If you agree, the plant photos you select, messages you send to Arlo, and relevant saved diagnosis context are sent through Leafora's Firebase infrastructure to OpenAI solely to provide plant identification, diagnosis, care plans, and personalized answers. Declining does not prevent access to parts of Leafora that do not use AI. You can withdraw this consent at any time under Settings → Data & analytics → Third-party AI processing; after withdrawal, Leafora blocks new AI uploads and requests unless you grant consent again.

Retention and deletion

We retain account and app content while your account is active and as needed to provide the service, prevent fraud, resolve disputes, and meet legal obligations. You can request account and associated data deletion from Settings → Account and security → Delete account, or by following our account deletion instructions. Backup and security records may take additional time to expire.

Your choices

You can choose whether to grant camera, photo, and notification permissions. You can separately grant or withdraw third-party AI processing consent and control analytics, personalization, and crash-report preferences in the app. Depending on your location, you may also request access, correction, export, restriction, or deletion of your personal information.

Children

Leafora is not directed to children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to Leafora.

Security and international processing

We use access controls, encrypted network connections, user-scoped storage paths, and server-side secret management. Service providers may process information in countries other than your own, subject to their contractual and legal safeguards.

Contact

For privacy questions or requests, email bohacilar@gmail.com. We may update this policy when Leafora or applicable requirements change; the effective date above will be revised.