LetMeGrow Privacy Policy

Effective date: November 6, 2026
Operator: Yijin Wu, California, United States
Privacy contact: letmegrow.ai@gmail.com

This policy explains how LetMeGrow handles information when you use our website and mobile app to connect real plants with a digital Garden. It covers plant identification and care tools, Gardens, Nursery, sharing, Explore, plant listings, community discovery quests, referrals, prizes, and Garden+ where available.

Information we collect

Account and profile information. When you create an account, we process your email address, authentication information, account identifier, and any profile or Garden information you provide. Our authentication provider, Supabase, handles sign-in and sessions. If you choose Apple or Google sign-in, Supabase processes the provider account identifier, email address and profile information the provider shares to authenticate you and maintain your linked sign-in methods. Apple may supply a private relay email instead of your personal address. We do not receive your Apple or Google password. We use this information for account access, not advertising.

Plants and Garden activity. We store information you choose to record, including plant names and identities, photos, observations, care guidance and actions, propagation milestones, plant relationships, and Garden appearance. We also store progress, earned Dew Coins, cosmetic purchases, preferences, and subscription entitlements.

Exchanges and listings. If you gift or list a plant, request a pickup, or exchange pickup messages, we process the associated plant information, listing price, notes, messages, pickup arrangements, and transfer history. Please avoid putting unnecessary personal information in plant names, photos, public descriptions, or gift notes.

Location. You can choose a browsing area manually or explicitly use your device location. For nearby Garden and marketplace area lookup, the app rounds the coordinates to a broad grid before sending them to our location provider or backend. We do not collect continuous background location. We store a broad area and rounded coordinates when you choose to publish a Garden area or listing. Browsing location is separate from permission to make your Garden discoverable. If you provide a private care area and an indoor or outdoor setting for a plant, we store those choices and use the broad area to derive its season for personal care guidance. These care preferences do not make your Garden public. For quest verification, precise foreground coordinates and reported accuracy are sent to our authenticated verification service to check eligibility. Exact coordinates are used transiently; the quest record retains an approximate location cell (about 110 metres north–south), timestamps, identified plant information, a photo fingerprint for duplicate checks, and verification outcomes. Quest photos are processed by our AI provider; the quest backend does not keep a photo archive. We do not collect background location.

Usage and technical information. We record account-linked activity such as feature use, plant and exchange events, AI request outcomes, usage counts, token counts, response times, and error categories. Some events include app version, platform, and a session identifier. Our hosting and service providers may also process connection information, such as IP addresses and request logs, when you use the service. Our app analytics are designed to exclude photo content, private message bodies, location searches, and authentication secrets.

Notifications. If you enable mobile push notifications, we process a device notification token, platform, account/session association, notification preferences, and delivery status. Plant care reminders are scheduled locally on your phone from task dates synchronized with your account. Their text can include a plant name or nickname and may appear on your lock screen according to your device settings. Reminders refresh when the app syncs; a task completed on another device may still trigger a reminder until then.

Subscriptions. For Apple subscriptions, we process subscription product and transaction identifiers, an account-linked purchase token, subscription status, expiry, renewal, and refund or revocation information. Apple processes App Store payment details; our Apple billing integration does not receive your full payment-card number. Plant marketplace payments are arranged directly between participants; LetMeGrow does not process or verify those payments.

Quests, referrals and prizes. We process participation, findings, progress, rewards, ranking preferences, referral codes and qualifying referral relationships. Private account eligibility may determine which campaigns you can access. If you win a physical prize, support may request your name, delivery address and contact information to arrange fulfillment. Do not submit a delivery address in public plant descriptions or messages.

How we use information

We use information to provide and synchronize your Garden; identify plants and suggest care guidance; preserve plant stories and lineage; facilitate discovery, gifting and pickups; deliver requested notifications; manage subscriptions, limits and cosmetic ownership; respond to support requests; and understand and improve the service.

We also use activity and technical records to investigate failures, prevent unauthorized access, enforce usage limits, and review possible misuse. A behavioral review flag is a signal for investigation, not proof of wrongdoing.

Photos and AI tools

When you request AI identification, diagnosis, photo matching, or a care plan, we send the relevant plant photo and applicable plant information or observations, including the symptom description, growing conditions and any private broad care area, setting and derived season used for that request, to OpenAI through our server. Images may contain personal information visible in the background or on labels, so choose photos carefully. AI suggestions can be inaccurate and should be reviewed before you save or act on them.

Our current integration requests that OpenAI not store the response as retrievable application state. This does not mean immediate deletion from every provider system: OpenAI may retain information for abuse monitoring or other purposes described in its API data policies. OpenAI states that API data is not used to train its models by default. See OpenAI's API data controls.

Temporary, unassociated scan results are discarded from the app when you close their flow; this does not erase server usage records or provider logs. Guidance you explicitly associate with a plant may remain in its private history.

When information is shared

Garden discovery and visits. If you turn on “Let others discover and visit my Garden,” signed-in gardeners can see the shared Garden name, broad area, pixel Garden presentation, and permitted plant names, identities and stages. Garden visits do not expose private real-photo archives, email addresses, care notes, Nursery contents, or pending arrivals. Turning visibility off stops future discovery and visits through that feature.

Quest maps, rankings and referrals. Personal discovery maps show your own approximate findings. Shared discovery maps display grouped approximate areas subject to minimum-participation thresholds. Joining a community discovery shares your gardener name, saved cosmetic appearance and score with eligible participants, as disclosed before joining. Existing private participation is not automatically made public. Referral codes connect invitations with qualifying participation and rewards; they are not private passwords. Campaign-specific rules explain prize eligibility and winner handling.

Gift links. Anyone with a gift link can preview its plant name, pixel appearance, sender Garden name, and gift note. These previews do not include private real photos or care history. Share links only with people you intend to invite.

Gifts, sales and Bloomline. Confirmed transfers move the plant to the recipient and preserve associated plant information, retained photo evidence and plant history as supported by the transfer feature. Participants retain exchange records. Bloomline preserves plant relationships and journeys, including shared plant and Garden labels; it is separate from private photo archives. Do not use plant histories or exchange notes to store sensitive personal information. Turning off Garden discovery does not recall an already completed transfer or remove information another person already received.

Listings and pickups. Publishing a listing makes its permitted details, broad area and current listing photo available to signed-in shoppers, independently of your Garden visibility setting. Pickup messages and private arrangements are available to the relevant participants. Cancelling or completing a listing stops new marketplace photo authorizations, but an already issued temporary photo link can remain usable until it expires. We cannot recall copies that other people have already saved.

Service providers. We use Supabase for authentication, cloud data and photo storage; OpenAI for AI processing; Expo and platform push services such as Apple's for enabled mobile notifications; and Photon, based on OpenStreetMap, for location searches. Photon receives search text or rounded coordinates and connection information when you use area lookup. Our public website is hosted through OpenAI Sites, with hosting infrastructure supplied by Cloudflare. Hosting and email-delivery providers process connection information and content needed to deliver their services. Apple handles App Store billing under its own policies.

Authorized administrators can access information needed to operate the service, troubleshoot problems, respond to requests and review misuse. Private operational reports include account-linked usage and aggregate plant-art coverage. We may disclose information when required by law or when necessary to investigate misuse, protect people or the service, or handle a business transfer subject to applicable privacy obligations.

We do not sell personal information, display advertising, or use your information for cross-service advertising tracking.

Storage and retention

The app uses local device or browser storage for sessions, preferences and Garden data. Connected account data and saved photos are also stored in the cloud. Clearing local storage, uninstalling the app or signing out does not by itself delete cloud records.

Free accounts retain only the latest uploaded plant photo for access; replacing it does not create a Free photo archive. Garden+ retains uploaded plant photos for its archive where that benefit is enabled. Upgrading cannot restore photos that were not retained. These product rules describe accessible plant-photo records, not guaranteed immediate removal from backups, caches or provider logs.

Recording a plant's death, gifting it, or moving it out of the Garden does not delete its history. Plant memories, propagation relationships and exchange records can continue to serve the people involved.

We retain account and Garden records while needed to provide the service and maintain the history you choose to keep. Exchange and prize records may remain where needed for participants, fulfillment, disputes, security or legal obligations. Operational records are retained according to their troubleshooting, abuse-prevention and accounting purposes. Retention varies by record type; there is not a single automatic deletion period for all data.

Replaced photos, abandoned uploads and inaccessible subscription archives may remain in storage pending cleanup or review. Losing archive access does not mean that every stored copy has immediately been deleted. We assess deletion requests individually, including data copied into transfer histories, and remove or anonymize personal information where appropriate, subject to applicable legal obligations and the rights of other participants. Backup, cache and provider-log copies may persist under the relevant provider’s retention processes; we do not promise immediate erasure from every system.

Your choices and privacy requests

You can edit supported profile and Garden information, disable Garden discovery, remove Wishlist entries, and manage supported listing and notification preferences. Camera, photo access, location and notification permissions can also be controlled in your device or browser settings. You can use manual area search instead of device location. Revoking a permission does not automatically erase information already saved.

Depending on where you live, you may have rights to request access, correction, deletion or a copy of personal information, or to object to or restrict certain processing. Contact letmegrow.ai@gmail.com with your request. We may need to verify your identity and may retain information where legally required. You may also have a right to complain to your local privacy regulator.

Where available in your app version, you can initiate an account deletion request in Me → Account → Request account deletion. You may also initiate a request directly by emailing letmegrow.ai@gmail.com. Support processes requests manually and may contact your registered email to verify the request. Submitting a request does not immediately delete your account. You can also contact letmegrow.ai@gmail.com for help.

Apple subscription cancellation is separate from deleting app data. Manage your subscription through your Apple account to stop future renewals.

Security and international processing

We use access controls, authenticated services and restricted administrative access to protect information. No system can guarantee absolute security. Information may be processed outside your country by our service providers.

LetMeGrow is operated from California, United States, and this release is intended for the US market. Our service providers may process information in the United States and other countries where they operate.

Children

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact letmegrow.ai@gmail.com so we can investigate and remove it as appropriate.

Public Journal analytics

We use Google Analytics 4 on public Journal pages to measure page visits, traffic sources and clicks on App Store download links. Google Analytics uses cookies and processes browser and device information. We send the article identifier and button position for download clicks; we do not send app account identifiers, plant photos or private Garden content through this Journal integration. Google signals and ad-personalization signals are disabled in this integration. You can block analytics using browser settings or compatible browser tools. Google explains its processing at Google’s partner-sites policy.

Changes and contact

We will update this policy when our practices change and identify its effective date. Where required, we will provide additional notice or obtain consent.

For privacy questions or requests, contact Yijin Wu at letmegrow.ai@gmail.com (California, United States).