Privacy

The short version:
your plants stay yours

Effective date: May 26, 2026

What we collect

Nothing on our servers, because we don't run any. What lives on your device:

• Plants you've added (nickname, species, photo, notes, light/pot conditions)
• Care history (watering, fertilizing, etc., with timestamps)
• Settings (notification time, theme, language)

All of this stays in a local SQLite database. Uninstalling the app deletes it. We have no copy.

What third parties may collect

Google AdMob (always)

Leafminder is free and shows ads served by Google. When ads load, the AdMob SDK may collect device-level information (advertising ID, IP address, approximate location, app interaction events) per Google's privacy policy. We don't access or store any of this.

• EU / UK users: Google's Consent Management Platform (UMP) asks you on first launch whether to allow personalized ads. Declining means you'll still see ads, just non-personalized ones.
• iOS users: Apple's App Tracking Transparency prompt also appears. Declining limits the data Google can use for ad personalization.

Google Drive (only if you sign in)

If you tap Sign in with Google in Settings → Backup, Leafminder requests the drive.appdata scope only. This lets us write backups into a per-app folder in your Drive that's invisible from your main Drive UI.

• Backups contain your plants database and photos.
• Backups go to your own Drive, never to us.
• Signing out at any time disconnects Drive immediately. Existing backups stay where they are unless you delete them.

Permissions we ask for and why

• Notifications — a single daily reminder summarising which plants need water. You can disable in Settings or your OS.
• Camera / Photo Library — to attach a photo when you add a plant. Photos stay in the app's private documents directory; they're never uploaded anywhere except to your own Drive backup (if you turn it on).
• App Tracking (iOS only) — for ad personalization through AdMob. Declining is fine.

Children

Leafminder is not directed at children under 13. We don't knowingly collect data from them — partly because we don't collect data from anyone.

Your rights

Because all your data lives on your device:

• To delete it: uninstall the app, or use your OS's "Clear app data" option. Done.
• To export it: use Settings → Backup to write a copy to your Google Drive.
• To request what we have on you: nothing. We don't have a server.

EU / UK / California users: GDPR and CCPA give you rights to access, delete, and port your data. Since we don't hold any, those rights are exercised against us by uninstalling. AdMob's data handling is governed by Google directly — see their privacy policy linked above for opt-out details.

Security

Your local database is unencrypted at rest, like most apps. Anyone with access to your unlocked phone can read it. Use a device passcode. If you enable Drive backup, OAuth tokens are stored in your platform's secure storage (Keychain on iOS, Keystore on Android).

Changes to this policy

If we change something material, we'll update the effective date at the top and call it out in the next app release notes. There's no email list because we don't have your email.