Privacy Policy

1. Information We Collect

We collect the minimum information necessary to provide the App's functionality:

• Google Account Information: When you sign in with Google, we receive your name, email address, and profile picture for authentication and session management.
• Google Drive OAuth Tokens: If you connect Google Drive, we store encrypted OAuth tokens on our server to maintain your Drive connection.
• App Preferences: Your display settings are stored locally in your browser and on our server.

2. Information We Do Not Collect

We do not collect, store, or have access to:

• Your plant data, photos, or any content you create in the App.
• Your Google Drive contents beyond the "PlantInventory" folder.
• Your browsing history, location, contacts, or any other personal data.

3. Where Your Data Is Stored

Google Drive Mode: All plant data and photos are stored exclusively in your personal Google Drive account. We never copy or retain this data on our servers.

Local Mode: All data is stored in your browser's local storage (IndexedDB) on your device. No data leaves your device except when using AI identification, which sends a photo to Google's Gemini API.

4. How We Use Your Information

• Authenticate your identity and manage your session.
• Connect to your Google Drive to read and write plant data on your behalf.
• Send photos to Google Gemini AI for plant identification (only when you explicitly request it).

5. Third-Party Services

The App integrates with:

• Google Sign-In — for authentication.
• Google Drive API — for data storage.
• Google Gemini AI — for plant identification.

We do not sell, share, or provide your data to any other third parties.

6. Data Retention

We retain your session data only while your account is active. If you log out, your session data is deleted from our server. Your plant data in Google Drive or local storage remains under your control.

7. Data Security

• HTTPS encryption for all data in transit.
• Content Security Policy (CSP) to prevent cross-site scripting.
• Rate limiting to prevent abuse.
• Encrypted storage of OAuth tokens.

8. Your Rights

• Access, modify, or delete any plant data you have created.
• Disconnect Google Drive access at any time through your Google Account settings.
• Delete your session and log out at any time.
• Use the App in local mode without providing any personal information.

9. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top. Your continued use of the App constitutes acceptance of the revised policy.

11. Contact

If you have any questions about this Privacy Policy, please contact us through the application.