Privacy Policy

Who is responsible for your data?

Verdant is run by Marco, an individual data controller based in the Netherlands. For privacy questions, reach out through the feedback form once you are signed in.

What we collect

• Account data: email address, password hash, and optional profile details (display name, username, phone, bio, avatar).
• Location data: optional city, region, country, timezone and approximate latitude/longitude for weather-based plant alerts.
• Plant data: nicknames, species, locations, notes, sensor readings, watering logs, photos and AI-generated care summaries.
• Social data: friend connections, posts, comments, reactions and messages.
• Marketplace data: listings, orders, wallet transactions and payout requests if you use the marketplace.
• Technical data: browser user-agent and page path when you submit feedback.

Why we process it

We process your data to provide the Verdant service: tracking your plants, generating care advice, sending you notifications, connecting you with other plant lovers and operating the marketplace. The legal basis is performance of the contract with you and, where applicable, your consent.

Who else sees your data

We use trusted processors: Supabase (database, auth, storage and email), Google (OAuth sign-in), Open-Meteo (weather data) and Lovable's AI gateway (plant care summaries). See the subprocessors page for details.

Other users can only see what you explicitly share: public plant care pages, your profile page (username, bio, country, plant count and join date), your social posts and marketplace listings.

Cookies and local storage

We store your Supabase auth session and your cookie-consent choice. We do not use advertising or third-party analytics cookies during the beta. See Cookie Policy.

Your rights

Under the GDPR you can access, correct, export and delete your data. Use Settings → Privacy while signed in, or contact us through the feedback form.

Retention

We keep your data while your account is active. If you delete your account, plant and personal data are soft-archived for 30 days and then permanently removed, except where we must keep records for legal obligations (for example marketplace tax records).

Changes

This policy may change as Verdant grows. We will notify you of material changes via email or the in-app notification bell.