Privacy Policy

UrbanLeaf ("we", "us", "our") is a mobile application built and operated by an independent developer based in India. This policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have over it.

We do not sell your data. We do not run ads. We do not share your data with any party for their own marketing.

1. Data we collect

Categories of personal data we may collect when you use UrbanLeaf:

• Anonymous user identifier: a random UUID generated on first launch so your plants, photos, and daily progress can be attached to a session. No personal information is attached at this stage.
• Email address and name (optional): only if you choose to sign in with Sign in with Apple or Sign in with Google to enable cross-device backup. With Apple, you may choose to hide your real email address, in which case we receive a @privaterelay.appleid.com address that Apple forwards to you.
• Precise location (with your permission): GPS coordinates or your postal code, used to fetch weather and localized growing recommendations. You can grant, deny, or revoke this permission in your device settings at any time.
• Plant content: the plant species you add, nicknames, photos you take, progress you log, and any notes. Stored under your user identifier so only you can read them.
• Push notification token: a device-specific identifier issued by Firebase Cloud Messaging (Google), used to deliver the daily care nudges and weather warnings you opted in to.
• Product interaction events: anonymous usage events such as plant_added, task_completed, photo_logged. Used to understand which features are used so we can improve the app. Not linked to your identity.
• Crash diagnostics: automatic crash reports (stack traces, device model, OS version) sent when the app crashes. Not linked to your identity.
• Device identifier for analytics: an app-scoped instance ID (not the Advertising Identifier / IDFA: we explicitly do not access IDFA). Reset by uninstalling the app.

2. What we do NOT collect

• No Advertising Identifier (IDFA / GAID). We stripped the AD_ID permission from the Android build and never request the iOS ATT prompt.
• No contacts, calendar, health data, or files outside the app.
• No microphone or audio.
• No SMS, phone number, or call log.
• No browsing history, cross-app tracking, or fingerprinting.

3. Third-party processors we use

We use the following named service providers ("processors") to run UrbanLeaf. We share the minimum data necessary for each to perform its function. We do not "sell" your data: none of the below is authorised to use your data for their own advertising or marketing.

• Supabase: database, authentication, storage (plant photos). Privacy. Servers: EU / US region depending on project region.
• Google Firebase, three services used:
  • Firebase Cloud Messaging: sends the push tokens and delivers daily nudges.
  • Firebase Analytics: anonymous product interaction events.
  • Firebase Crashlytics: automatic crash diagnostics.
  Privacy.
• Google Sign-In (optional, at your choice): used only if you tap "Sign in with Google". We receive your Google email address and full name. We do not access any other Google service. Privacy.
• Sign in with Apple (optional, at your choice): used only if you tap "Sign in with Apple". We receive an Apple-issued user identifier plus your name and email on first sign-in. If you enable "Hide My Email", we receive a private relay address. Privacy.
• Open-Meteo: free public weather API. We send your city, postal code, or approximate coordinates to fetch the local forecast. We do not send your identity. Privacy.
• Zoho Mail (SMTP): used to send transactional email (waitlist confirmations, Early Grower welcome). We send only your email address and the message. Privacy.

4. Purpose of processing

We process your data only for these purposes:

• To provide the core functionality of the app (adding plants, tracking progress, sending nudges).
• To deliver push notifications you opted in to.
• To fetch weather and growing tips for your area.
• To back up your data across devices when you sign in with a provider account.
• To fix bugs (crash reports) and understand which features are used (anonymous analytics).
• To respond to your support requests.

We do not use your data for automated decision-making or profiling.

5. How long we keep data

• While your account exists: we keep plant content, photos, and progress indefinitely so you can access it any time.
• Crash + analytics events: retained by Firebase for up to 14 months, then automatically deleted (Google's default retention window).
• Email address (marketing use): if you signed in with Google or Apple, we store your email in a separate email_contacts table so we can contact you about product updates. This entry survives when you sign out of the app. You can request removal at any time by emailing us. If you delete your account, the email is unlinked from your user record but the marketing entry is retained unless you separately request its deletion.
• Deleted accounts: when you delete your account, your plant content, photos, tasks, and observations are permanently deleted within 30 days. Backups are purged within 90 days.

6. Your rights

Regardless of where you live, you can:

• Access: request a copy of the personal data we hold about you.
• Correct: ask us to correct inaccurate data.
• Delete: delete your account from Profile → Delete Account, or email us. Deletion is permanent.
• Export: request an export of your plant data in JSON.
• Withdraw consent: opt out of notifications, revoke location or camera permission, or sign out of the app at any time.
• Object to marketing: reply "unsubscribe" to any email or write to us, and we will remove your address from email_contacts.

To exercise any of these rights, email hello@urbanleaf.app. We will respond within 30 days.

7. Regional rights

India (DPDP Act, 2023)

If you are in India, UrbanLeaf is your Data Fiduciary. You have the right to obtain confirmation about your data, request correction, seek erasure, and nominate another person to exercise these rights in the event of your death or incapacity.

Grievance Officer: Nimish Patel
Contact: hello@urbanleaf.app
If your grievance is not resolved within 30 days, you may complain to the Data Protection Board of India.

European Union / EEA / UK (GDPR / UK GDPR)

If you are in the EU, EEA, or UK, our legal basis for processing is: (a) performance of a contract for the core app functionality; (b) consent for push notifications, location, and marketing email; (c) legitimate interest for crash reports and anonymous analytics. You have all rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.

California (CCPA / CPRA)

If you are a California resident, you have the right to know, delete, and correct your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined by the CCPA.

8. Children and young users

UrbanLeaf is rated 4+ on the Apple App Store and has no age restriction on core functionality. However:

• We do not knowingly collect personal information from children under 13 in the United States without verifiable parental consent (COPPA).
• For users in India under 18, the Digital Personal Data Protection Act requires guardian consent for processing personal data. Guardians of children using UrbanLeaf should supervise account creation and can email us to review or delete any collected data.
• For users in the EU/UK, we do not target children under 16 for marketing. If we become aware of unauthorized data collection from a child, we will delete it.

9. Data location and transfers

Your data is stored on servers operated by our processors, which may be located in the EU, United States, or other jurisdictions with strong data protection laws. Data transferred between regions is protected by contractual clauses required under GDPR and DPDP where applicable.

10. Security

We use industry-standard encryption in transit (HTTPS/TLS 1.2+) and at rest for stored data. Access to production data is restricted to the developer named below. We do not require or store any device unlock credentials, screen lock, or biometric data.

11. Changes to this policy

We may update this policy from time to time. We will note the "Last updated" date at the top of this page. If we make material changes to how we handle your data, we will send an email (if you have provided one) or an in-app notice.

12. Contact us

UrbanLeaf: operated by Nimish Patel, an independent developer based in Gujarat, India.

Email: hello@urbanleaf.app

Governing law: This policy is governed by the laws of India, and disputes are subject to the jurisdiction of the competent courts in Gujarat, India.