Legal
Privacy Policy
Version 2026-04-25. Placeholder copy — must be reviewed by a lawyer before launch.
What we collect
- Account: email address, optional display name and avatar.
- Plant data: nicknames, locations, care logs, photos you upload.
- Diagnosis artifacts: prompts and responses produced by AI providers.
- Device info: notification subscriptions if you opt in to push.
- Operational logs: standard request and error logs to keep the service running.
Why we collect it
To run the service: store your plants, generate diagnoses, deliver reminders, and improve features. We do not sell your data. We do not show third-party advertising.
Where data goes
- Supabase (database, authentication, file storage) — primary data host.
- AI providers (currently Google Gemini; Plant.id and others may be added) — receive plant images, environment notes, and species hints during a Smart Scan. Their data-use policies apply to that exchange.
- Vercel — hosts the application and serverless functions.
- Push notification services (Web Push, APNs, FCM) — when you opt in.
What we do not do
We do not pass your name, email, or precise GPS coordinates to AI providers. We do not train provider models on your data; provider retention follows their stated policies (typically up to 30 days for abuse review and not used for training).
Your controls
From the profile page you can export all of your data as JSON or delete your account permanently. Account deletion cascades to your plants, photos, care logs, and diagnoses. We may retain minimal operational logs for a limited period as required by law.
Children
Dewy is not intended for children under 13 (or the minimum age of digital consent where you live).
Changes
We may update this Policy. Material changes bump the version above and trigger a re-acceptance prompt at next sign-in.
Contact
Questions or data requests: privacy@dewy.live.