Privacy.

What this policy covers

This policy covers the spruit.app website and the Spruit mobile app for iOS and Android. Some parts apply to only one of them, so each section is labelled: "Website" for the marketing site, "App" for the mobile app, and "Both" where it applies to everything.

Website: what we collect, when, and why

Two kinds of data, and we keep both lists short on purpose.

Website: your email (only if you fill in the form)

• What: your email address and a small "source" tag that tells us which button you used (hero, footer, etc.).
• Why: so we can email you Spruit news and updates.
• Legal basis: your consent (GDPR Art. 6(1)(a)).
• Stored where: at Loops (loops.so), our email service.
• Retention: until you unsubscribe. The unsubscribe link is in every email; you can also email us.

Website: aggregate visit stats (everyone who visits)

• What: page views, country (from IP, then discarded), referrer, browser, screen size. We never see your IP and there's no identifier that ties two visits together.
• Why: to know which sections people actually read so we can write better ones.
• Legal basis: legitimate interest (GDPR Art. 6(1)(f)). The data is aggregate and cookie-free, so the interest is genuinely low-impact.
• Stored where: Umami (cloud.umami.is), a privacy-focused analytics service.
• Retention: indefinite, but only as aggregate counts.

Website: who we share data with

Three processors, and only what each one needs:

• Loops (USA) is our email service. Receives your email and source tag. Data transferred to the US under Standard Contractual Clauses.
• Netlify (USA) hosts the site and runs the function that forwards your email to Loops. The function sees your email transiently while the request is in flight and doesn't store it. SCCs apply.
• Umami (USA) handles cookie-free analytics. Sees a hashed visitor fingerprint that even we can't reverse. No email or personal identifier ever.

We don't sell, rent, or trade your data. We never share it for advertising.

Website: cookies and local storage

We don't use cookies on this site.

We do use a small amount of local storage (state your browser keeps locally) for two things: remembering your language choice, and remembering which homepage variant you saw so you don't see a different one on refresh.

Neither is sent to us or anyone else. Clearing site data in your browser will reset both.

App: the account you sign in with

You sign in with Sign in with Apple or with Google. We never see a password.

• What: your email address, display name, and a user id, sent to us by Apple or Google when you sign in. With Sign in with Apple you can use Apple's Private Relay email, and that works fine.
• Why: to create and run your account.
• Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• Stored where: Supabase, in the EU (Frankfurt).

App: your plants and garden

• What: plant photos you take or upload, species, nicknames, care history (watering, feeding, diagnoses), notes, rooms and spaces, achievements, and cosmetic items.
• Why: this is the content you create to track your plants. It is the app.
• Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• Stored where: Supabase, in the EU (Frankfurt).

App: location, timezone, and reminders

• Approximate location and timezone: an approximate latitude and longitude and your IANA timezone, used to work out seasonal care, local weather, and when to send reminders. Used by the app and by our server-side reminder job. Optional, and only with your permission.
• Push notification token: a device push token, the platform, and a "last seen" timestamp, used to send watering reminders and to skip inactive accounts. Optional.
• Legal basis: legitimate interest for reminders and security (GDPR Art. 6(1)(f)), and your consent for optional location and notifications (Art. 6(1)(a)).

App: subscriptions and purchases

Spruit+ and credit packs are bought through the app store.

• What: your entitlement and purchase status, managed through RevenueCat.
• What we never get: we do not receive or store your card or payment details. Payment is handled entirely by Apple or Google.

App: shared gardens

When you create or join a shared garden, the other members of that garden can see the shared plants, photos, history, and schedule. Only share a garden with people you trust.

App: local mode (when you're signed out)

If you use the app without signing in, your plant data stays on your device. On iOS it lives in your own iCloud Key-Value storage (your Apple account, not our servers). On Android it stays on the device. None of it reaches our backend unless you sign in and choose to sync.

App: sub-processors

These are the services that help run the app. Each gets only what it needs:

• Supabase (EU, Frankfurt): database, sign-in, file storage, and serverless functions. This is where your account and plant data live.
• Anthropic (Claude) (USA): powers plant identification, the plant doctor and diagnosis, AI care plans, and chat. Your plant photos and related text are sent to Anthropic to generate these results.
• Open-Meteo (EU): weather and geocoding for climate-aware schedules. Receives an approximate latitude and longitude, plus place-name text when you search a location. No account needed.
• Apple: Sign in with Apple, push notifications (APNs), iCloud Key-Value storage for local mode, and App Store billing.
• Google: Sign in with Google, push notifications (Firebase Cloud Messaging) on Android, and Google Play billing.
• RevenueCat (USA): manages your subscription and purchase status.

Where a processor is in the US, the transfer runs under Standard Contractual Clauses, the same as for the website. We don't sell, rent, or trade your data, and we never share it for advertising.

App: permissions we ask for

The app may ask for a few device permissions. Each one is optional and used only for the stated purpose:

• Camera: to photograph your plants.
• Photo library: to pick plant photos.
• Notifications: to send care reminders.
• Approximate location: for local weather and the right season.

Both: your rights

Under the GDPR and Dutch privacy law, you can ask us to:

• Tell you what we have on you (right of access).
• Fix anything that's wrong (rectification).
• Delete it (erasure, the "right to be forgotten").
• Restrict or object to how we use it.
• Hand over what we have on you so you can take it somewhere else (portability).
• Withdraw consent at any time, with no effect on what we did before.

Email hello@spruit.app and we'll handle it within 30 days. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Both: deleting your data and account

Website: unsubscribe using the link in any email, or email us.

App: you can delete your account from inside the app, which removes your account and the garden data tied to it. You can also email hello@spruit.app and we'll take care of it. Local-mode data that never left your device is removed by deleting the app or clearing its data.

Both: automated decisions and children

We don't make automated decisions that have legal or similarly significant effects on you, and we don't build advertising profiles. Plant identifications and care plans are generated by AI, but they're guidance for you, not decisions made about you.

Spruit isn't aimed at children. The site and the app are not directed to children under 16, and we don't knowingly collect their data.

Both: who we are

Spruit is made by This Is Roman, based in the Netherlands. The app's backend runs in the EU (Frankfurt). Contact us any time at hello@spruit.app.

Changes

If we change this page, we'll update the date at the top and, for anything material, tell you in the app or by email.