Privacy Policy

1. Introduction

Sproutly Technologies Inc. ("Sproutly", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and share your information when you use the Sproutly mobile application, website (sproutlygreen.com), and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide

• Account information (name, email address) when you register
• Plant photos you upload for AI diagnosis
• Plant collections and care preferences you set in the app
• Feedback, support requests, or messages you send us

2.2 Information Collected Automatically

• Device information (operating system, device model, unique identifiers)
• Usage data (features used, pages visited, interaction patterns)
• Log data (IP address, browser type, access times)
• Cookies and similar tracking technologies (see our Cookie Policy)

2.3 Information from Third Parties

• Authentication data if you sign in via Google or Apple
• Analytics data from our service providers (anonymized and aggregated)

3. How We Use Your Information

We use your information to:

• Provide and improve the Service, including AI-powered plant diagnostics
• Personalize your care schedules and recommendations
• Send you service-related notifications (watering reminders, care alerts)
• Respond to your support requests and feedback
• Analyze usage patterns to improve features and user experience
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

4. Data Sharing & Third Parties

We do not sell your personal data. We share information only in these circumstances:

• Service providers: Hosting (Vercel), analytics (Plausible/PostHog), AI processing (for plant diagnosis), and email delivery — all bound by data processing agreements
• Legal requirements: When required by law, court order, or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
• With your consent: Any other sharing only happens with your explicit permission

5. Data Retention

We retain your personal data only as long as necessary to provide the Service and fulfill the purposes described in this policy. Account data is retained while your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law. Anonymized and aggregated data may be retained indefinitely for analytics purposes.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, access controls, and regular security audits. However, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us immediately at security@sproutlygreen.com.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request limitation of processing in certain circumstances
• Withdraw consent: Where processing is based on consent, withdraw it at any time

GDPR (EU/EEA): You have all of the above rights. Our legal bases for processing include consent, contractual necessity, and legitimate interest.
CCPA (California): You have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, email us at privacy@sproutlygreen.com.

8. Children's Privacy

The Service is not intended for children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

9. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, data requests, or concerns, please contact us at: