Privacy Policy

    Last updated: April 17, 2026

    BotaNotes ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, mobile applications, and related services (collectively, the "Service").

    1. Information We Collect

    • Account information: name, email address, and password (stored hashed).
    • Profile data: ZIP code, USDA planting zone, and preferences you provide during onboarding.
    • Garden content: plants, garden layouts, journal entries, photos, and tasks you create.
    • Photos: images you upload of plants, seed packets, or pest issues for AI analysis or your records.
    • Payment data: processed and stored by Stripe. We never see or store your full card details.
    • Technical data: device type, browser, and anonymous usage analytics.

    2. How We Use Your Information

    • To provide and personalize the Service (e.g., zone-adjusted task schedules).
    • To process AI requests such as plant diagnosis and seed packet scanning.
    • To manage your account, subscription, and free trial.
    • To send essential service emails (verification, password reset, billing).
    • To improve features and troubleshoot issues.

    3. Third-Party Services

    We use trusted third-party providers to deliver the Service:

    • Supabase — database, authentication, and file storage.
    • Stripe — payment processing and subscription billing.
    • Google Gemini & OpenAI — AI processing for plant analysis, diagnosis, and content generation. Photos sent for analysis are not retained for model training.

    We do not sell, rent, or trade your personal data to third parties.

    4. Data Security

    All data is transmitted over HTTPS with TLS encryption. Your account data is protected with row-level security, ensuring only you can access your own plants, journals, photos, and garden plans. Passwords are hashed and never stored in plain text.

    5. Data Retention

    We retain your data for as long as your account is active. You may delete your account at any time by contacting us, and we will permanently remove your personal data within 30 days, except where retention is required by law (e.g., billing records).

    6. Your Rights

    Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to:

    • Access the personal data we hold about you.
    • Request correction or deletion of your data.
    • Export your data in a portable format.
    • Withdraw consent or opt out of marketing communications.

    To exercise any of these rights, email us at the address below.

    7. Children's Privacy

    BotaNotes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

    8. Cookies & Local Storage

    We use cookies and local storage to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

    9. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date at the top reflects the most recent revision.

    10. Contact Us

    Questions about this Privacy Policy or your data? Email us at privacy@botanotes.com.