Privacy Policy

Last updated: January 29, 2025

1. Introduction

GardenLib ("we," "our," or "us") operates the GardenLib iOS application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app. It is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the European Union and European Economic Area, and the California Consumer Privacy Act (CCPA) and related U.S. state privacy laws where applicable.

By using GardenLib, you agree to the practices described in this policy. If you do not agree, please do not use the app.

2. Data Controller (GDPR)

For users in the European Union, European Economic Area, and United Kingdom, the data controller responsible for your personal data is the entity operating GardenLib. You may contact us at the address provided in the "Contact" section below for any data-protection inquiries.

3. Information We Collect

Information you provide: Account or profile information (e.g., name, email if you create an account), plant and garden data you enter (names, notes, photos, schedules), and any content you voluntarily submit.

Automatically collected information: Device type and operating system, app version, usage data (e.g., features used, frequency of use), and identifiers such as device or advertising identifiers if applicable. We may use cookies or similar technologies on our website only where we have a separate website that links to this policy.

CCPA categories: Depending on your use of the app, we may collect: identifiers (e.g., name, email, device ID); commercial information (e.g., in-app activity); internet or electronic network activity; and inferences drawn from the above. We do not sell your personal information.

5. How We Use Your Information

We use the information we collect to: provide, maintain, and improve GardenLib; personalize your experience; send you service-related communications; analyze usage and trends; protect against fraud and abuse; and comply with legal obligations. We do not use your data for automated decision-making that significantly affects you, except where permitted by law and with appropriate safeguards.

6. Sharing and Disclosure

We may share your information with: (1) service providers who assist us (e.g., hosting, analytics), under strict contractual terms; (2) law enforcement or other authorities when required by law; (3) affiliates or in connection with a merger, sale, or restructuring, with notice as required by law. We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising in a way that qualifies as a "sale" or "share" under CCPA, except as disclosed here.

7. International Transfers (GDPR)

Your data may be processed in countries outside the EEA/UK, including the United States. Where we transfer data from the EEA/UK to such countries, we ensure appropriate safeguards are in place (e.g., adequacy decisions, Standard Contractual Clauses, or other mechanisms approved by the European Commission or UK authorities). You may request details of the safeguards we use.

8. Data Retention

We retain your information only as long as necessary to fulfill the purposes in this policy, including to provide the app, resolve disputes, enforce our terms, and comply with legal obligations. When we no longer need your data, we will delete or anonymize it. You may request deletion earlier subject to applicable law (see "Your Rights" below).

9. Your Rights

GDPR (EEA/UK): You have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict processing; data portability; object to processing based on legitimate interests or for direct marketing; and withdraw consent. You also have the right to lodge a complaint with a supervisory authority in your country.

CCPA / U.S. state laws: Depending on your residency, you may have the right to: know what personal information we collect and how it is used and disclosed; delete your personal information; correct inaccuracies; opt out of the "sale" or "sharing" of your information (we do not sell or share as defined under CCPA); and non-discrimination for exercising your rights. We do not use or disclose sensitive personal information for purposes beyond those allowed under applicable law.

To exercise any of these rights, please contact us using the details in the "Contact" section. We will respond within the time frames required by applicable law (e.g., one month under GDPR, 45 days under CCPA, subject to extensions where permitted).

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

11. Children's Privacy

GardenLib is not directed to children under 16 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app or on our website and updating the "Last updated" date. Your continued use of GardenLib after changes constitutes acceptance of the updated policy. Where required by law, we will obtain your consent to material changes.

13. Contact

For questions about this Privacy Policy, or to exercise your privacy rights, please contact us:

Email: codeandcraft3d@gmail.com

We will respond to your request in accordance with applicable law. If you are in the EEA/UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.