This Privacy Policy explains how Leafline ("the App", "we", "us", or "our") handles information when you use our mobile application on iOS and Android.
Leafline is a houseplant watering-reminder app built to be offline-first. Our guiding principle is simple: your plant data stays on your device, and we collect as little information as possible.
This policy is provided by Nikola Kretschmer ("the developer"), based in Lower Saxony, Germany.
Summary
Leafline's core plant-care features work offline without an account. Your plant records, names, photos, notes, schedules and detailed care history stay on your device. Optional photo identification and purchase management involve service providers. Optional analytics is disabled until you explicitly agree.
Local app data
Plant records, attached photos, settings, schedules and care history are stored locally. Removing records or uninstalling removes local data subject to device backup behavior. Device/cloud backups may preserve these records and settings. We do not upload these records through analytics. Coarse usage summaries described below are distinct from the underlying records.
Optional photo identification
Photo identification is available to free and Premium users. When you explicitly choose a photo for identification, it is sent over an encrypted connection to our Supabase proxy, then to Kindwise Plant.id for species identification. It is not used to make watering decisions. Results are cached locally to avoid repeat requests. Ordinary attached plant photos are not sent for analytics.
Provider privacy information:
Before publication, confirm the proxy/provider regions, logging, photo retention and deletion terms in the deployed configuration. This draft does not invent retention guarantees for those existing providers.
Purchases
Premium is a one-time lifetime unlock, with no subscription. Apple App Store or Google Play processes payment, and RevenueCat validates entitlements and supports Restore Purchases. We do not receive your full payment-card details. Stores and RevenueCat may process transaction information and their app-user identifiers.
- https://www.apple.com/legal/privacy/
- https://policies.google.com/privacy/
- https://www.revenuecat.com/privacy/
Optional analytics
If you affirmatively allow analytics, limited usage events are sent over HTTPS to PostHog Cloud EU, hosted in Frankfurt, to improve setup, reminders, retention and the Premium purchase experience. PostHog processes this information for Leafline under a data processing agreement. See https://posthog.com/privacy.
Events include app version, iOS/Android platform, selected app language, Premium status, onboarding step/outcome, add method, coarse plant/care count buckets, whether completed care involved an overdue plant, reminder type, and the Premium entry point and purchase-options result. Results distinguish purchases, restores, cancellation and failure. Analytics does not include prices, receipts, transaction IDs, RevenueCat IDs, payment details, plant IDs, species, names, photos, notes, room names, search text, or detailed care logs.
A random identifier links events during one consent period. It is not derived from your name, advertising identifiers, hardware or RevenueCat identity. These events are pseudonymous, even though the app uses “anonymous analytics” as a short label. PostHog person-profile creation is disabled. Device backup restoration may preserve the local identifier/settings; we do not intentionally link devices or separate consent periods.
We do not enable replay recordings, automatic screen/tap capture, advertising attribution, or analytics background jobs. We configure IP storage and geographic enrichment off for product events; PostHog and network infrastructure still process connection metadata needed to receive requests.
You may decline without losing functionality and change your choice in Settings. Turning analytics off stops new requests, removes the local identifier, and discards unsent in-memory analytics state. An already-sent request may finish. Re-enabling creates a fresh identifier. Offline/error events are dropped rather than retained for later transmission.
Retention, access and deletion
Local records remain until removed through the app, uninstall or platform behavior. PostHog Free event retention is one year for the selected deployment; confirm this account setting before publication. Withdrawal/uninstall does not itself erase events already received.
While enabled, Settings shows an Analytics privacy reference. Copy it before turning analytics off if you want help with previously shared events. We remove it locally on withdrawal and do not recover/relink it on a later opt-in. Contact support@kre-ative.co to request access or deletion; we may need information to securely verify and fulfill your request. The request covers raw analytics events, even when no PostHog person profile exists.
Before publication, verify the supported raw-event deletion/access process for the account, including any support-assisted process. Do not promise that deleting a person profile alone deletes anonymous events.
Permissions, advertising and rights
Camera/photos permissions support your optional photo actions. Notifications are scheduled locally for plant-care reminders. OS permission choices are separate from analytics consent and can be changed in device settings. This analytics design does not use Apple's advertising identifier or request ATT tracking authorization. Leafline has no third-party advertising and does not sell data.
Depending on your location, you may have rights to withdraw consent, access, correct, delete or restrict processing, and complain to a supervisory authority. Contact us for assistance. EU hosting does not replace the operator's duty to review provider terms and international processing arrangements.
Leafline is not directed to children under the applicable age for consent in their region. The operator must confirm appropriate launch-market wording. We will update the published effective date and provide required notice when material privacy practices change.