Privacy Policy
This explains what personal information Planture Inc. (the "Company") handles in the plantcrew Service and how.
1.Information we collect and how #
| Category | Items | How it is collected |
|---|---|---|
| Account | The account identifier and email provided by Google or Apple sign-in, name (for Apple, if the user allows it), nickname, profile photo (optional), language and country settings | Sign-in and profile input |
| Using the Service | Plant details and photos, care records, diary entries, notes, crew membership and activity, Crew Q&A questions, answers, photos and reports, expert questions, answers and photos, photos sent for the AI photo check, plant environment details | Entered or uploaded by the user |
| Device and notifications | Device identifier, push notification token (FCM), device type, model, manufacturer, operating system version, app version, app language, device time zone | Sent automatically by the app at sign-in |
| Location (optional) | Location coordinates used to show the current weather on the home screen | Only if the user allows location permission |
| Subscription and payment | Subscription product, status, expiry date and receipt verification information from the App Marketplace. The Company does not receive card numbers or other payment details | Verified by the server after an App Marketplace purchase |
| Errors and performance | App error reports and session information, performance measurements (device, operating system, app version and similar) | Collected automatically by Sentry |
| Feedback (optional) | Feedback type and text, screenshots (optional), app version and device information, identifiers of recent app errors. The server also looks up the nickname, plan and number of plants and crews | When sent from "Send feedback" in the app |
| Account deletion request | Sign-in method, nickname, email of the social account (can be left empty if you signed up with Apple's "Hide My Email"), note (optional), and a hash of the connecting IP address (used only to stop the same place sending requests over and over) | When applying with the web form because the app cannot be used |
| On deleting an account (optional) | The reason chosen and any comments the user wrote | Entered on the account deletion screen |
- The app uses these device permissions: camera (taking plant photos), photo library (choosing photos), location (showing weather) and notifications. If you refuse one, only the feature that needs it is unavailable.
- The Company does not use advertising SDKs or behavioural analytics tools (for example Firebase Analytics), and does not collect advertising identifiers.
- Error reports do not include account identifiers. Feedback sent through "Send feedback" does include the identifiers of recent app errors, so that feedback can be matched with the error reports.
- Location coordinates for the weather are sent by the app straight to the weather provider and are not stored on the Company's servers.
2.Purposes #
- Verifying accounts and signing in, and providing the Service (plant records, calendar and tasks, shared crew management, AI photo check, Crew Q&A, expert questions)
- Sending push notifications (care schedules, crew news, announcements and offers)
- Checking subscription status and access, and managing usage (AI photo check and expert question counts)
- Telling devices apart to prevent an account being shared across devices
- Finding errors, keeping the Service stable, and showing weather
- Answering enquiries and feedback, and resolving disputes
- Checking and processing account deletion requests, and preventing abuse of them
3.Retention and deletion #
- When you delete your account you are signed out immediately and leave the crews you were in, and photos you added to the encyclopedia are taken down at once. If you sign in again with the same account within the 30-day grace period, you can restore it; you will need to be invited to crews again.
- When the grace period (30 days) ends, we delete your personal information, plants, diary entries, records, Crew Q&A posts and photos uploaded in plantcrew. Photos that have passed to another user remain that user's, and photos in posts under a report or dispute are kept until it is resolved and then deleted.
- Care records and notes you left in someone else's crew remain in that crew as records from a "former crew member".
- Account deletion request details (the email and note you wrote in the request, and so on) are kept for 30 days after the request has been dealt with, and then deleted. A request is dealt with on the day the grace period ends if it was approved, and on the day it was declined if it was declined.
- A crew's activity list shows the last 90 days, and older activity is cleared automatically. Care records and diaries stay.
- Records the law requires us to keep are stored separately for the periods set by Korea's Act on the Consumer Protection in Electronic Commerce and used only for that purpose: records of contracts and withdrawals for 5 years, records of payment and supply for 5 years, and records of consumer complaints and disputes for 3 years.
4.What is visible inside a crew #
Plant details, care records, activity, questions and answers you post in a crew, along with your nickname and profile photo, are visible to the other members of that crew. Photos that may be unpleasant, such as pest photos, can be posted blurred.
5.Service providers and sharing #
The Company entrusts the processing of personal information to the providers below, to the extent needed to provide the Service. The Company does not sell users' personal information.
| Provider | Country | What it does | Information passed |
|---|---|---|---|
| Amazon Web Services | Republic of Korea (Seoul region) | Running the servers, storing and processing data and photos | Account and usage information, photos |
| Apple · Google | United States | Social sign-in, App Marketplace payments and subscription management | Sign-in tokens, subscription and receipt information |
| Google Firebase (FCM) | United States | Delivering push notifications | Notification token, notification content |
| Sentry | United States | Error and performance monitoring | Error reports, device and app information |
| WeatherAPI.com | United Kingdom | Looking up the weather at the current location | Location coordinates (latitude and longitude) |
| Kindwise (plant.id) | Czech Republic | AI photo check (plant identification and leaf diagnosis) | Photos sent for the AI photo check (whether it uses them for training follows its own policy) |
| Anthropic (Claude) | United States | Drafting answers to expert questions | Expert question text and photos, plant details (whether it uses them for training follows its own policy) |
6.International transfers #
The providers below process data outside the Republic of Korea, so personal information is transferred abroad when you use the related feature or when the Company processes information for it.
| Recipient | Country | Information transferred | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| Apple · Google | United States | Sign-in tokens, subscription and receipt information | Social sign-in, App Marketplace payments and subscription management | Each time the Service is used, sent over an encrypted network | Under each provider's privacy policy |
| Google Firebase (FCM) | United States | Notification token, notification content | Delivering push notifications | Each time the Service is used, sent over an encrypted network | Under each provider's privacy policy |
| Sentry | United States | Error reports, device and app information | Error and performance monitoring | Each time the Service is used, sent over an encrypted network | Under each provider's privacy policy |
| WeatherAPI.com | United Kingdom | Location coordinates (latitude and longitude) | Looking up the weather at the current location | Each time the Service is used, sent over an encrypted network | Under each provider's privacy policy |
| Kindwise (plant.id) | Czech Republic | Photos sent for the AI photo check (whether it uses them for training follows its own policy) | AI photo check (plant identification and leaf diagnosis) | Each time the Service is used, sent over an encrypted network | Under each provider's privacy policy |
| Anthropic (Claude) | United States | Expert question text and photos, plant details (whether it uses them for training follows its own policy) | Drafting answers to expert questions | When Company staff prepare an answer draft, sent over an encrypted network | Under each provider's privacy policy |
If you do not want these transfers, you can stop them by turning off location (weather) or notifications, or by not using the AI photo check or expert questions. Sign-in, payments and error monitoring cannot be switched off in the app, so if you do not want those transfers you can stop using the Service and delete your account.
7.Your rights #
- You may access, correct or delete your personal information, ask us to stop processing it and withdraw consent.
- You can edit your nickname and profile photo in your profile in the app, and delete your account from "Delete account" in the app. If you cannot use the app, you can apply for deletion with the form in Delete account. You can turn off notifications and location in your device settings.
- For other requests, contact admin@hannunplant.com.
- For users in the European Economic Area (EEA) and the UK, information is processed on the basis of contract (providing the Service and managing subscriptions), legitimate interests (finding errors, preventing misuse, keeping the Service stable), consent (location and notification permissions) and legal obligation (keeping records the law requires). These users also have the right to data portability and the right to object, and may complain to the supervisory authority in their country.
8.Children #
The Service is only for people aged 14 or over (or the higher age set by the law of the country where they live; Terms of Service, Article 4). If we find an account below that age, we suspend it and delete the related information without undue delay.
9.Security measures #
- Data between the app and the servers is encrypted in transit (HTTPS).
- Access to systems that handle personal information is limited to people who need it for their work, and is managed.
- Servers and photo storage run in an access-controlled cloud environment.
- We do not receive card numbers or other payment details. Payments are processed by the App Marketplace.
10.Privacy officer and contact #
- Officer: Jeehan Yang (CEO)
- Contact: admin@hannunplant.com
- You can also report or ask about a privacy infringement to the Personal Information Infringement Report Center (118 in Korea, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (+82 1833-6972, www.kopico.go.kr).
11.Changes to this policy #
If this policy changes, we will announce the effective date and the changes by the means in Article 3.3 of the Terms of Service (such as an in-app notice or notification) and on the website from 7 days before the effective date. Changes that matter to your rights are announced from 30 days before.