Privacy Policy
Last Updated: February 2026
Scope and Acceptance
This Privacy Policy ("Policy") governs the collection, use, disclosure, and retention of information in connection with the mobile application "Plantfolio Plus" (the "App"), operated by Chunhou Li ("we," "us," or "our"). By installing, accessing, or using the App, you ("User" or "you") acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree to this Policy, you must not use the App.
Definitions
For the purposes of this Policy:
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation or set of operations performed on Personal Data (e.g., collection, storage, alteration, disclosure).
- "Data Controller" means the natural or legal person who determines the purposes and means of Processing.
- "User Data" means all data entered, generated, or stored by the User within the App, including without limitation plant data, photos, care records, collections, and settings.
Data Controller and Key Principle
The Data Controller in respect of Personal Data Processed in connection with the App is Chunhou Li. Correspondence may be sent to: diveintothefog@gmail.com. A physical address may be requested for legal or regulatory purposes by contacting the Data Controller at the foregoing email.
We do not operate any servers and do not store, retain, or Process any User Data on systems under our control. All User Data remains solely on the User’s device or, where the User has enabled iCloud sync, on infrastructure operated by Apple Inc. ("Apple") as part of the iCloud service (under the User’s Apple ID). We do not have access to, and do not receive or transmit, User Data.
1. Categories of Data Processed
1.1 Data Provided by the User
In the course of using the App, the User may input or otherwise provide the following categories of data, which are Processed locally on the User’s device and, where iCloud sync is enabled, by Apple on behalf of the User:
- Plant and collection data: Names, scientific names, plant types, descriptions, research notes, light and soil preferences, pot materials, seasonal watering schedules, and start dates.
- Photographs: Images of plants or collections added to the App, with optional categorical labels (e.g., growth, flowers, problems).
- Care records: Watering logs (dates and notes), growth measurements (height, width, notes), fertilization logs (type, NPK, dosage, method, notes), pruning logs (type, technique, notes), and watering rescheduling or postponement.
- Collection structure: Grouping of plants into collections and membership of each plant in at most one collection.
- App settings: Date format, language preference (e.g., English, Chinese, Spanish), notification preferences (enabled/disabled, reminder time), default sort and filter options, custom soil or pot types, and preference to hide archived plants.
1.2 Data Obtained Automatically by the App
The following data may be obtained or derived by the App on the User’s device only; none of such data is transmitted to us:
- Photo metadata: EXIF data (e.g., date taken) or the creation date of the photo asset may be read to populate date fields automatically. Such Processing occurs solely on the User’s device.
- Date and season: The device’s date and calendar may be used to determine the current season (for watering schedules) and the current date for reminders and calendar views. No location or timezone data is transmitted to us.
- Device information: Apple’s App Store and system services may collect information (e.g., iOS version, device model) in accordance with Apple’s policies. We do not use third-party analytics or tracking.
1.3 Data Not Collected
We do not collect, and the App is not designed to collect:
- Personal identification information (name, email, physical address) except where voluntarily provided by the User when contacting us (e.g., support inquiries).
- Precise or approximate location data.
- Payment or financial information (the App does not process payments).
- Browsing history or activity outside the App.
2. Purposes and Legal Basis for Processing
2.1 Purposes
User Data is Processed solely for the following purposes:
- To provide and maintain the core functionality of the App (plant and collection management, calendar, watering schedules, photographs, care logs).
- To enable optional features such as watering reminders, calendar views, and plant organization.
- Where the User has enabled iCloud sync, to permit storage and synchronization of User Data across the User’s devices via Apple’s iCloud service. Such Processing is performed by Apple pursuant to the User’s Apple ID and Apple’s terms and privacy policy; we do not perform or control such Processing.
Where the User contacts us for support (e.g., by email), we Process only the information contained in or attached to that communication for the purpose of responding to the inquiry.
2.2 Legal Basis (EEA / UK GDPR)
To the extent that Processing of Personal Data occurs in connection with the App, such Processing takes place only on the User’s device or on infrastructure operated by Apple (when iCloud sync is enabled). We do not Process Personal Data on systems under our control. Insofar as the App may be considered to Process Personal Data on the User’s device, the legal bases under the General Data Protection Regulation (EU) 2016/679 and the UK GDPR are:
- Performance of a contract (Art. 6(1)(b)): Processing is necessary for the performance of the contract between the User and us (provision of the App and its core functionality).
- Consent (Art. 6(1)(a)): Where the User explicitly enables optional features such as iCloud sync or notifications, Processing is based on the User’s consent.
3. Storage and Security
3.1 Location of Data
We do not store User Data. All User Data is held in one or both of the following locations only:
- User’s device: User Data is stored locally on the User’s device using the SwiftData framework. Such data remains on the device and is not transmitted to us.
- Apple iCloud (optional): Where the User has enabled iCloud sync, the App uses SwiftData’s CloudKit integration such that a copy of User Data is also stored on infrastructure operated by Apple (iCloud), associated with the User’s Apple ID. We do not have access to such data.
3.2 iCloud Synchronization
When iCloud sync is enabled, User Data may be stored on the User’s device and on Apple’s iCloud infrastructure. Such data is:
- Encrypted in transit and at rest by Apple’s iCloud service.
- Subject to Apple’s iCloud Terms and Conditions and Apple’s Privacy Policy.
- Accessible only to the User on devices signed in with the User’s Apple ID.
- Not accessible to us or to any third party under our control; we do not operate servers or store User Data.
iCloud sync is optional and may be disabled at any time via the App or the device’s system settings.
3.3 Technical and Organizational Measures
Security of User Data is determined by its storage location:
- On the User’s device: data is stored using iOS secure storage mechanisms (SwiftData).
- When iCloud sync is enabled: data is encrypted and stored on Apple’s iCloud infrastructure.
- No User Data is transmitted to us or to any system operated by us.
4. Third-Party Services and External Links
4.1 Apple Services
The App integrates with the following services operated by Apple Inc.:
- App Store: Distribution and updates of the App. Apple may collect information in accordance with its Privacy Policy.
- iCloud: Optional synchronization of User Data. When enabled, User Data is stored on the User’s device and on Apple’s iCloud infrastructure; we do not store such data.
- Push Notifications: Delivery of watering reminders. Notification content is Processed by Apple’s notification services.
Apple’s Privacy Policy is available at: https://www.apple.com/privacy/. Users are encouraged to review it.
4.2 Export and Import
The App permits the User to export User Data (plants, collections, photos, watering and care logs, settings) to a ZIP file on the User’s device or to the Files app, and to import from a previously exported ZIP (replace all or merge). Export and import operations are performed solely on the User’s device or in locations selected by the User. We do not receive, store, or Process exported or imported data.
4.3 External Links and On-Device Reference Data
The App may contain links to third-party resources (e.g., Wikipedia) for plant care information. Accessing such links takes the User outside the App; the privacy practices and terms of those third parties apply. The App also includes built-in reference data (e.g., plant types and care information) stored locally on the device; such data is not used to identify the User.
5. Disclosure of Personal Data
We do not sell, rent, or trade Personal Data. We do not disclose User Data to third parties, except:
- With the User’s consent: When the User enables iCloud sync, User Data is stored on the User’s device and on Apple’s iCloud infrastructure pursuant to the User’s choice; we do not store or access such data.
- Legal obligation: Where we are required by applicable law or by a valid legal process (e.g., court order, subpoena) to disclose information. Because we do not store User Data, we would have no such data to disclose unless the User has voluntarily provided it to us (e.g., in a support communication).
6. Data Subject Rights and Choices
6.1 Access, Correction, Deletion, and Portability
Subject to applicable law, the User may:
- Access: View all User Data (plants, collections, photos, care records, settings) within the App.
- Rectification: Edit, update, or delete plants, collections, photos, watering logs, growth measurements, fertilization and pruning logs, and settings at any time.
- Erasure: Delete individual items or archive plants; uninstalling the App removes data stored locally on the device (data stored in iCloud remains until deleted by the User via Apple ID settings).
- Data portability: Export a complete copy of User Data (plants, collections, photos, logs, settings) to a ZIP file from within the App; the exported file remains on the User’s device or in a location chosen by the User.
6.2 Notification Preferences
Notifications may be enabled or disabled at any time via the App’s settings. Notification permissions may also be managed through the device’s system settings.
6.3 iCloud Data
Where iCloud sync is used, the User may manage iCloud data through Apple ID settings. iCloud sync may be disabled at any time via the App or the device’s system settings.
7. Minors
The App is not directed at minors. We do not knowingly collect or Process Personal Data from minors.
- United States (COPPA): We do not knowingly collect Personal Data from children under 13 years of age. We do not operate servers or store User Data; accordingly, we do not have access to or possession of any such data to delete. If you are a parent or guardian and believe your child under 13 has used the App, you may remove all data by uninstalling the App from the device and, where iCloud sync was used, by deleting the relevant data from the child’s Apple ID / iCloud account.
- European Economic Area / UK (GDPR): We do not knowingly collect Personal Data from children below the age of 16 (or the applicable age of digital consent in the relevant jurisdiction, which may be lower). We do not operate servers or store User Data; accordingly, we do not have access to or possession of any such data to delete. If you are a parent or guardian and believe your child has used the App, you may remove all data by uninstalling the App from the device and, where iCloud sync was used, by managing or deleting the data in the child’s Apple ID / iCloud account.
8. International Transfers
Where the User is located outside the United States and uses iCloud sync:
- User Data stored on Apple’s infrastructure may be stored or Processed in the United States or in other countries in which Apple operates.
- For Users in the European Economic Area ("EEA") or the United Kingdom, transfers of Personal Data to countries outside the EEA or UK may be subject to appropriate safeguards, including Apple’s adherence to Standard Contractual Clauses or other mechanisms approved by the European Commission or the UK authorities, and Apple’s participation in the EU-U.S. Data Privacy Framework or UK extension where applicable.
- By enabling iCloud sync, the User acknowledges that User Data may be stored on Apple’s servers in accordance with the foregoing.
We comply with applicable data protection legislation, including the GDPR where it applies.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you may have the right, under the California Consumer Privacy Act (as amended by the California Privacy Rights Act) and its implementing regulations:
- To know what Personal Information is collected, used, shared, or sold. We do not store or sell your Personal Information.
- To request deletion of your Personal Information. Because we do not store your data, deletion is effected by you (e.g., by deleting data in the App, uninstalling the App, or managing data in your Apple ID / iCloud settings).
- To opt out of the sale or sharing of Personal Information. We do not sell or share Personal Information.
- To non-discrimination for exercising your privacy rights.
To assert these rights or for questions, contact the Data Controller using the contact details in Section 13.
10. EEA and UK Data Subject Rights (GDPR)
If you are in the European Economic Area or the United Kingdom, you may have the following rights in respect of your Personal Data, subject to the conditions and limitations set out in the GDPR:
- Right of access (Art. 15): To obtain confirmation as to whether Personal Data is being Processed and to access it. Your data is held in the App on your device and, where iCloud sync is enabled, in your iCloud account.
- Right to rectification (Art. 16): To have inaccurate Personal Data corrected. You may correct data directly in the App.
- Right to erasure (Art. 17): To request erasure of your Personal Data (“right to be forgotten”). You may delete data in the App, uninstall the App, and/or remove data from your Apple ID / iCloud account.
- Right to restriction of processing (Art. 18): To request restriction of Processing (e.g., by disabling iCloud sync; we do not Process your data on our systems).
- Right to data portability (Art. 20): To receive your Personal Data in a structured, commonly used, machine-readable format. You may use the App’s export feature to obtain a ZIP file of your data.
- Right to object (Art. 21): To object to Processing based on legitimate interests.
- Right to withdraw consent: Where Processing is based on consent, to withdraw consent at any time (e.g., by disabling iCloud sync or notifications in the App).
To exercise these rights or for any related inquiry, contact the Data Controller using the details in Section 13. We will respond within one month of a valid request, or inform you of any extension and the reasons therefor.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority in the EEA or UK. A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en.
11. Retention and Breach
11.1 Retention
We do not retain User Data, as we do not store it. User Data remains solely on the User’s device and, where iCloud sync is enabled, on Apple’s iCloud infrastructure. Retention is determined by the User: data is removed from the device when deleted in the App or when the App is uninstalled; data on Apple’s infrastructure remains until the User deletes it via Apple ID settings.
11.2 Automated Decision-Making
We do not engage in automated decision-making or profiling within the meaning of Article 22 of the GDPR that produces legal effects concerning the User or similarly significantly affects the User. Features such as watering schedule calculations and “next due” dates are based on User-provided data and the device date and are performed locally on the device; they do not constitute such automated decision-making.
11.3 Personal Data Breach
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, we will, where required by applicable law:
- Notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach (as required under the GDPR for EEA/UK).
- Notify affected data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
- Communicate the nature of the breach and the measures taken or proposed to address it.
We do not operate servers or store User Data. All User Data remains on the User’s device or on Apple’s iCloud infrastructure (when sync is enabled). We therefore do not hold User Data that could be subject to a breach of our systems; the foregoing obligations apply only to the extent we Process or hold Personal Data.
12. Amendments
We may amend this Policy from time to time. Amendments will be communicated by:
- Publishing the revised Policy at this URL;
- Updating the "Last Updated" date at the top of this Policy; and
- Where reasonably practicable, providing notice within the App when material changes are made.
Your continued use of the App after the effective date of any amendment constitutes acceptance of the amended Policy. You are responsible for reviewing this Policy periodically.
13. Contact and Data Controller
For questions, requests, or complaints regarding this Policy or the Processing of Personal Data in connection with the App, contact the Data Controller:
Chunhou Li
Email: diveintothefog@gmail.com