Privacy Policy

This policy explains what personal data the aiGroWise app and website (plants.aigrowise.com) collect, why, who processes it, how long it is kept and what rights you have. We collect only what the app needs to work.

Who is responsible

The data controller is the independent developer who operates aiGroWise, based in Spain. For any privacy question or request, contact support@aigrowise.com.

What we collect and why

Account and sign-in

You sign in with your email address and a one-time code that we email to you. There are no passwords. We store your email address, your language preference and your active sessions (with the app or browser name your device reports, so you can recognise your devices). Sign-in emails are delivered by Postmark, our email provider. To stop abuse we keep short-lived records of failed sign-in attempts and, when a new account is created, a one-way hashed form of your network address.

Your grow data

Everything you enter in the app (plants, journal entries, measurements, costs, notes and settings) is stored on our server so it syncs between your devices and with people you share a grow with. Legal basis: performance of our contract with you (providing the service).

Photos and videos

Photos you add are uploaded to and stored on our server, linked to your grow. If you connect a camera, its snapshots and timelapse videos are stored the same way. Only members of the grow can view them.

Climate sensor data (optional)

If you connect climate sensors (for example temperature and humidity through a home automation system), their readings are stored with your grow. This is off unless you set it up.

Push notifications (optional)

If you allow notifications, we store your device's push token and language so we can send alerts you have switched on, such as climate alerts. Notifications are delivered by Apple Push Notification service. You can turn them off at any time in iOS Settings.

AI features

Some features use artificial intelligence, for example photo health checks, answers to your questions and grow plans. When you use one, we send the text you enter, the photos you choose and relevant details from your grow (such as plant details, journal entries and climate readings) to Anthropic's Claude models. Requests are passed through Requesty, an AI routing service, or sent directly to Anthropic.

• The app asks for your permission before each AI feature first sends data, and you can use the rest of the app without it.
• Nothing is sent to an AI provider unless you use an AI feature.
• Your email address is not included in AI requests.
• Anthropic does not use data sent through its commercial API to train its models by default.

Legal basis: your consent, which you can withdraw at any time in the app settings.

Sponsored content, no tracking

Users on the free plan may see sponsored content in the app and on the website. Every sponsored item is sold directly by us to the advertiser (there is no advertising network) and is clearly labelled “Sponsored”. Pro plan users do not see sponsored content.

• Which item you see depends only on where it appears in the app and on your country, taken from your device's region setting or from the country of your network connection. Nothing else about you is used.
• We do not use the advertising identifier (IDFA) or any other advertising or device identifier, we do not track you across other apps or websites, and we do not build a profile of you.
• We count only the total number of times each item is shown and tapped per day. These counts are not linked to you, your account or your device, and advertisers receive only these totals.
• Sponsored images are served from our own server. Tapping an item opens the advertiser's website in your browser, where the advertiser's own privacy policy applies.

We do not use third-party analytics or advertising SDKs, and we do not sell your data.

Who processes your data

• Our server host (Akamai Connected Cloud / Linode, data centre in Frankfurt, Germany): stores the database, photos and videos.
• Postmark (ActiveCampaign): delivers sign-in emails.
• Anthropic and Requesty: process AI requests when you use AI features.
• Apple: delivers push notifications if you enable them.

Some of these providers may process data outside the European Economic Area, for example in the United States. Those transfers rely on the safeguards the GDPR requires, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep data

• Account and grow data, photos, videos and sensor readings: until you delete them or delete your account.
• Sessions: until you sign out or they expire (at most about 180 days).
• Sign-in codes and failed-attempt records: deleted within about a day of expiring.
• Hashed network addresses used to limit new sign-ups: deleted after 3 days.
• Server backups: kept for a limited period for disaster recovery, then overwritten.

Deleting your account

You can delete your account at any time in the app (Settings, Delete account). Deletion is immediate and cannot be undone:

• Your email address, sessions and sign-in records are erased.
• Grows you own alone are deleted together with their data, photos, videos and sensor readings.
• If you own a grow that other people are members of, ownership passes to the member who joined first and the grow stays for them.
• If you are a member of someone else's grow, you are removed from it. Entries you added to a shared grow stay part of that grow.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• delete your data (you can do this yourself in the app);
• receive your data in a portable, machine-readable format;
• object to or restrict certain processing;
• withdraw consent (for example for AI features) at any time, without affecting earlier processing.

To exercise these rights, email support@aigrowise.com from the address linked to your account. We will reply within one month. You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or the authority in your own country.

Security

All connections use HTTPS. Sign-in tokens are stored in the iOS Keychain. Photos and grow data are only served to signed-in members of the grow.

Children

aiGroWise is intended for adults. Do not use it if you are under 18 or under the age of majority where you live.

Changes to this policy

If we change this policy we will update the date at the top of this page, and for significant changes we will tell you in the app.