This Privacy Policy explains how Velatrix App Studio ("we", "us", or "our") handles information when you use the GardenAhead mobile app (the "App"). GardenAhead helps you preview plants at mature size, identify a plant from a photo you choose, and keep a garden plan and care calendar. If you do not agree with this policy, please do not use the App.

1. Who We Are

The data controller is Velatrix App Studio. For any privacy request or question, use the button: Email GardenAhead

2. GardenAhead accounts

An account is optional. If you create one, we store your email address and a password hash on our GardenAhead server so you can sign in, verify your email, and reset your password. Garden layouts, saved plants, care reminders, and preferences such as onboarding and climate settings stay on your device.

Verification and password-reset messages are sent from no-reply@velatrixapps.com. Check Inbox, Spam, and Junk. If the message is there, mark it as Not Spam so further GardenAhead mail goes to your inbox.

3. Information the App uses

Account email — if you create an account, we store your email and a hashed password to sign you in, verify the address, and reset your password. We do not use that email for marketing.
On-device garden data — layouts, plants you save, and care reminders stay on the device unless you back the device up through Apple.
Camera — used for augmented-reality previews and, if you choose, to take a photo for identification.
Photo library — used only if you pick an existing photo to identify. We do not browse your library in the background.
Approximate location — requested only to match planting and care guidance to your climate. Location is processed on the device. We do not send a live location stream to our servers.
Plant identification photos — if you run a scan, a downscaled JPEG of that photo is sent to our identification proxy. Common garden plants may be checked with an image model (OpenAI). Other plants, and any uncertain or conflicting guess, are sent to Pl@ntNet. We do not keep identification photos after the request finishes. We do not use those photos for advertising.
Subscription status — entitlement state comes from Apple In-App Purchase. We do not receive your payment card details.
Operational logs — the App may log feature events on the device. The identification proxy records request time, path, and status so we can keep the service running. It does not write plant photos or API keys to logs.

4. How identification photos are shared

We do not sell your personal data. When you start a scan, the photo is sent to our proxy solely to return identification candidates. Common catalog plants may be checked with an image model. Other plants, and any uncertain or conflicting guess, go to Pl@ntNet. If those two disagree, Pl@ntNet is used. Processors are required to give the same or equal protection of that photo as we describe here. If identification is not configured, the scan fails and no catalog of fake results is invented.

Relaytera — to send verification and password-reset email from no-reply@velatrixapps.com;
OpenAI — image identification of common garden plants when that service is configured;
Pl@ntNet — visual identification of other plants, and a check when the image model is uncertain or disagrees;
Apple — to process and verify In-App Purchase subscriptions;
Our hosting provider — to run the identification proxy.

We may also disclose information if required by law or to protect our rights, users, or the public.

5. International transfers

OpenAI, Pl@ntNet, and our hosting providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data retention

On-device garden data remains until you delete it or remove the App. Account email and password hashes remain until you ask us to delete the account. Identification photos are processed for the request and are not retained on our proxy after the response is returned. Proxy logs of path and status are kept only as long as needed to operate the service.

7. Your rights

Depending on where you live (including the EU/EEA and UK under GDPR, and California under CCPA/CPRA), you may have the right to access, correct, delete, export, or restrict processing of personal data. Garden layouts stay on your device — you can delete them in the App or by deleting the App. For an account email stored on our server, or questions about identification requests, use the button: Email GardenAhead

8. Children's privacy

GardenAhead is not directed at children under 13 (or the higher minimum age in your country), and we do not knowingly collect their data. If you believe a child has submitted a photo through identification, contact us and we will help where we can.

9. Security

Identification calls use TLS. We do not put provider API keys in the App. No system is perfectly secure; we limit what leaves the device.

10. Changes to this policy

We may update this policy from time to time. We will post changes here with a new "Last updated" date and, for material changes, notify you in the App when we can.

11. Contact

Questions or requests about privacy in GardenAhead? Email GardenAhead

GardenAhead Privacy Policy