Growen — Privacy Policy

Who is responsible? Dijimania operates the Growen app and determines how your personal data is used for that service.

What this policy covers: This policy describes what data we process when you use Growen, why we do it, who we work with, and what choices you have. It should be read together with the Terms of Service.

Children: Growen is not directed at children under 13 (or the digital-consent age in your country). We do not knowingly collect personal data from children. If you believe we have, contact us and we will take appropriate steps.

1. Data we may collect

Depending on how you use Growen, we may process:

Category	Examples
Account & profile	Email address, sign-in/verification data, display name, language or preferences, profile fields you choose.
Plants & app content	Nicknames, notes, care-related fields, and photos you upload (for example, plant and leaf images) for identification, diagnosis features, and your garden.
Activity & product data	Care tasks, history, in-app events needed for reminders and sync, and similar operational records.
Device & technical data	App version, device or OS type, limited diagnostics to keep the app working and secure, and (if you enable them) push notification registration tokens.
Support & comms	What you send when you contact support.
Purchase-related data	Subscription status and transaction references as provided by app stores and our subscription partner—we do not store your full card number (payments are handled by the stores).
Analytics (if used)	Aggregated or pseudonymous usage to understand feature usage and improve the product, as configured in the app.

We do not sell your personal data in the "sale of data" sense.

2. Why we use your data (purposes and legal bases)

We process data as necessary to:

Provide the service — create and secure your account, sync your data, run identification and care features, and show your plant history.
Transactional messages — for example, sign-in codes to your email, important service updates.
Reminders and notifications — if you turn them on, to schedule local/remote notifications you asked for.
Improve and protect the service — reliability, abuse detection, and security.
Legal compliance — respond to lawful requests, enforce our terms, and meet accounting or regulatory obligations.

Where the GDPR or similar law applies, we rely on: contract (to deliver Growen), legitimate interests (security, product improvement, limited analytics where appropriate), and, where required, your consent (e.g. optional marketing, where offered).

3. How we keep data and security

Data is stored using vendors and cloud infrastructure with access controls, encryption in transit, and other reasonable safeguards. No method of transmission or storage is 100% secure. If we become aware of a significant breach that affects you, we will act in line with applicable law, which may include notification.

4. Who we share data with

We share data only as needed to run Growen:

Auth and database / hosting (for example, Supabase or similar backend) to store and sync your account and content.
App stores (Apple, Google) for distribution and in-app purchase handling.
Subscription and entitlement providers (for example, RevenueCat) to verify your plan.
Push / messaging (for example, OneSignal or the platform's push service) if you enable notifications.
Analytics providers if enabled (for example, Google Analytics-compatible measurement), in aggregated or limited form.
AI / model providers only to the extent required to process content you send to obtain features (for example, image and text for identification or diagnosis-style outputs), under our instructions and their terms.
Professional advisers and authorities when required by law or to protect rights, safety, and security.

Processors are bound to use data only for our purposes, not for their own marketing.

International transfers: Your data may be processed in the EU and other countries where our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses for EU/UK data).

5. Retention and account deletion

We keep data as long as your account is active and for a reasonable period after deactivation, or longer where legal obligation, dispute resolution, or legitimate security/audit needs require.

Delete Account in the app deactivates your access and may start a deletion process, but we may retain certain records as described in the Terms of Service and this policy, where required or permitted by law. You can ask us about specific deletion rights by emailing support@dijimania.com.

6. Your rights

Depending on where you live, you may have the right to access, rectify, delete, port, or restrict processing of your personal data, and to object to certain processing. You may also withdraw consent where processing is based on consent. To exercise these rights, contact support@dijimania.com. You can also lodge a complaint with a supervisory authority in your country.

7. Cookies and the website

If the dijimania.com site sets cookies or similar technologies, we will use them only for necessary site function, or—where required—for consented analytics or marketing, as explained in a cookie notice on that site. The mobile app is not a website cookie banner; the main processing is as described in sections 1–4.

8. Changes

We may update this Privacy Policy. The "Last updated" date will change. We will take reasonable steps to notify you of material changes (for example, in the app or by email) where the law requires.

9. Contact

Dijimania – Growen
Email: support@dijimania.com