Legal

Privacy Policy

Effective May 17, 2026. This Privacy Policy explains what data MyGarden collects, why we collect it, and your rights.

1. Who we are

MyGarden is based in California, USA (“MyGarden,” “we,” “us,” or “our”). This Privacy Policy applies to the MyGarden iOS application and the website at mygarden.guru (collectively, the “Service”).

Questions about this policy or about your personal data can be sent to privacy@mygarden.guru.

2. Data we collect

We collect only what we need to operate MyGarden and to improve it. We do not sell your data. We do not share it with advertising networks.

CategoryExamplesWhy
AccountEmail addressSign in, password reset, customer support
Plant contentPhotos you take, plant notes, care logsPlant identification, health analysis, your history
LocationCoarse location of your yardHardiness zone, weather-aware care, sun-path estimates
DeviceApple Push Notification Service (APNs) tokenDelivering the alerts you opt in to
UsageScreens visited, features used, crashes, performance timingsDiagnosing bugs, improving reliability

We do not collect precise (GPS-level) location, your contacts, your browsing history outside MyGarden, your health or fitness data, your financial information, or biometric data.

3. Sensitive categories we don’t handle

MyGarden does not collect health data, financial information, government identifiers, precise location, or other sensitive personal information as defined under the California Privacy Rights Act (CPRA) and GDPR.

4. How we use your data

  • Operate the core Service (sign you in, store your plants and photos, send the alerts you’ve enabled).
  • Generate AI-based plant identifications, care plans, and health assessments.
  • Diagnose crashes and improve performance, reliability, and quality.
  • Reply to support requests you send us.

We do not use your data to train third-party AI models for commercial reuse. When we send plant photos to AI providers (currently Google Gemini), they are processed solely to return results for you, under the contractual terms of those providers.

5. Who we share data with

We share the minimum necessary data with a small set of service providers acting on our behalf:

  • Amazon Web Services (AWS) — hosting, database, image storage.
  • Google Gemini — AI plant identification and care advice.
  • Apple Push Notification Service (APNs) — delivering notifications.
  • Apple WeatherKit and OpenWeather — local weather data.

We do not sell your data, share it with advertising networks, or share it with data brokers. We may disclose data when required by law, valid legal process, or to protect rights, safety, or property.

6. How long we keep data

  • Account and plant content: as long as your account is active.
  • Crash and performance logs: 90 days.
  • Backups: up to 30 days after deletion.

You can delete your account from within the app or by emailing privacy@mygarden.guru. When you delete your account, we remove your personal data from active systems within 30 days and from backups within 60 days, except where retention is required for legal, financial, or fraud-prevention reasons.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Delete your data
  • Export your data (data portability)
  • Object to certain processing
  • Withdraw consent you previously gave

To exercise any of these rights, email privacy@mygarden.guru. We respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority. If you are in California, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information.

8. Children

MyGarden is not directed to children under 13 (or 16 in the European Union). We do not knowingly collect personal data from children below the applicable age. If you believe a child has provided us with personal data, email privacy@mygarden.guru and we will delete it.

9. International transfers

MyGarden is operated from the United States. If you use the Service from outside the US, your data is transferred to and processed in the US. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers of EU and UK personal data.

10. Security

We use industry-standard practices to protect your data: TLS encryption in transit, encrypted storage at rest, scoped access controls, and minimal data retention. No system is perfectly secure; if a breach affects your personal data, we will notify you as required by applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective” date at the top of this page reflects the latest revision. For material changes, we will notify you in the app or by email before they take effect.

12. Contact

Privacy questions or rights requests: privacy@mygarden.guru.

Legal inquiries: legal@mygarden.guru.

Mailing address available on request to the addresses above.