Privacy Policy

Effective October 29, 2026

Plantlet is a garden journal. Your plants, batches, notes and photos are private to you. We don't sell your data, show ads, or use third-party analytics or tracking.

Plantlet is currently operated by RZNCE LLC, an Oregon limited liability company doing business as Plantlet ("Plantlet", "we", "us"). Questions: [email protected].

What we collect

Account details from your sign-in provider. When you sign in with Google, Apple or email, we receive your email address, your name if the provider shares it, and an account identifier. We never see or store your password.
Profile details you choose to add: display name, bio, country, state or province, and a profile photo.
What you put in Plantlet: plants, batches, stages, notes, photos and the dates you record.
Settings: your time zone (detected from your browser so dates display correctly) and appearance preference.
Feedback you send, along with the page you sent it from and your browser type, so we can reproduce problems.
How the app is used: which features you use (for example "added a note with 2 photos" or "opened the week-by-week view"), the day you last opened Plantlet, errors and failed uploads you run into, and catalog searches that find nothing. This is tied to your account so we can follow up on problems. It never includes the text of your notes or your photos.
Server logs: IP address, browser type and the pages requested. We use them for security and troubleshooting and delete them within 30 days.

Cookies

We use only cookies needed to run the app: one that keeps you signed in, one that protects forms from forgery, and one that remembers your time zone. No advertising or analytics cookies.

Your photos

Photos are stored in private cloud storage. They can only be opened through links that expire after a few hours and are only issued to your signed-in account. If we add sharing features later, sharing will be something you turn on per photo or per item; anything already in Plantlet stays private unless you change it.

How we use your information

To run Plantlet and show you your own data.
To respond to your feedback and support requests.
To keep the service secure and fix problems.
To send essential account emails, and occasional product updates you can opt out of.

We don't sell or rent your information, and we don't use your content to train AI models. Usage information is collected by Plantlet's own servers only; no outside analytics company receives it.

Who else handles your data

We use a small set of service providers to run Plantlet. They process data on our behalf and only as needed to provide their service:

Auth0 (Okta) for sign-in, plus Google or Apple if you sign in with them.
Google Cloud for application hosting (United States).
Neon for the database (United States).
Cloudflare for photo storage, backups, DNS and network protection.

We may disclose information if the law requires it, or to protect the rights, property or safety of our users or others.

Who at Plantlet can see your data

Plantlet is run by one person. Your content is only looked at when you ask for help, to investigate a security or abuse problem, or when legally required.

How long we keep it

Your plants, batches, notes and photos stay until you delete them or your account. Usage records are deleted after 12 months; before that, they're rolled up into anonymous totals (such as "notes added per day" and "people active per week") that can't be traced to anyone, which we keep to compare one season with the next.

Deleting a note removes it and its photos right away. Deleting your account removes everything right away; database backups age out within 30 days.

Your choices

See and edit everything in the app.
Download all your data from You → Download my data.
Delete your account from You → Delete account.
Ask us anything about your data at [email protected]. Depending on where you live you may have additional rights, and we'll honor those requests.

Security

All traffic is encrypted. Passwords are handled by Auth0, never by us. Each account can only reach its own data, and photo storage is private. No system is perfectly secure; if we learn of a breach affecting you, we'll tell you.

If Plantlet changes hands

Plantlet may move to a different company in the future: for example, a holding company we form for Plantlet and related apps, a company of its own, or a new owner through a merger or sale. If that happens, your account and data move with Plantlet, and the new operator must honor this policy for the information it receives. We'll email you at least 30 days before the move so you can download or delete your data first if you'd rather not come along.

Children

Plantlet isn't intended for children under 13, and we don't knowingly collect their information. If you believe a child has signed up, contact us and we'll delete the account.

Where your data lives

Plantlet runs in the United States. If you use it from elsewhere, your information is transferred to and stored in the U.S.

Changes

If we change this policy, we'll update the date above. For significant changes we'll also notify you by email or in the app before they take effect.