Privacy Policy

Overview

Amzu Information Technology Ltd ("we," "our," or "us") built GrowHut's Verna (the "App") as a native iOS gardening journal application. This Privacy Policy explains what information the App collects, how that information is used, with whom it is shared, and what rights you have over your data.

The App does not collect any personal information such as your name, email address, phone number, or any account credentials. All data synced to our servers is identified only by an anonymous UUID generated on your device and stored in your iOS Keychain. This identifier cannot be linked to your real-world identity.

By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Location Data

The App requests access to your device's approximate location ("Location When In Use") solely to fetch weather forecast data from the Open-Meteo weather API. Your coordinates are used to retrieve a 5-day local weather forecast and generate watering recommendations. Location data is:

• Processed in real time to query the Open-Meteo API.
• Transmitted to Open-Meteo's servers as a pair of latitude/longitude coordinates.
• Rounded to two decimal places (~1 km precision) before being included in any analytics or cloud sync payloads.
• Never sold or shared with advertisers.

You may alternatively enter a fixed garden location manually in the App settings, in which case your device's GPS is not accessed for weather purposes.

1.2 Photos and Camera

The App requests access to your camera and photo library to allow you to capture or select progress photos for your plants. Photos are:

• Stored locally on your device using SwiftData with Apple's external storage attribute.
• Optionally synced to iCloud via Apple CloudKit if iCloud sync is enabled.
• Optionally included in cloud backup payloads only if you enable the optional cloud backup feature.
• Never uploaded to third-party advertising, analytics, or AI training platforms.

1.3 Garden Data

The App stores the following types of data you create:

• Plants: Name, species, category, location in garden, lifecycle, toxicity notes, care requirements, watering schedules, and associated progress photos.
• Garden Tasks: Task type, due date, completion status, and linked plants.
• Sowing Records: Seed name, sow dates, germination dates, and harvest notes.
• Wildlife Sightings: Species name, date, and optional notes.
• Fertiliser Logs: Product name, date, quantity, and linked plants.
• Disease Records: Condition name, date of detection, treatment notes, and health scan results.
• Vision Board Items: Goals, notes, and optional reference images.
• Garden Projects: Project name, status, start/end dates, and task associations.

Garden data is stored on your device using Apple's SwiftData framework and may also be synced to iCloud via Apple CloudKit if iCloud is enabled on your device.

When cloud backup is enabled, your garden data (excluding photos) is synced to our backend infrastructure on Railway (railway.com) - a Next.js API and a Railway-managed PostgreSQL database. Each record is associated only with your anonymous UUID and device identifier. No personally identifiable information (name, email, etc.) is attached to any synced record. This sync occurs automatically when the App moves to or from the background, allowing you to restore your data on a new device.

1.4 Anonymous Analytics (Session Tracking)

When you use the App with cloud backup enabled, the App records anonymous session data to help us understand how the App is used in different climates and regions. Each session record includes:

• An anonymous user ID (a random UUID stored in your device's Keychain - not linked to your name, email, or any personal account).
• A device vendor identifier and device name (reset if you uninstall and reinstall the App).
• Your city name and rounded latitude/longitude coordinates (~1 km precision).
• Current temperature and weather code at the time of the session.
• Approximate USDA climate hardiness zone derived from your latitude.
• Session start timestamp.

The App also maintains an anonymous user profile on our servers containing your anonymous UUID, device info, city, rounded coordinates, climate zone, a randomly generated display name (e.g. "Curious Gardener"), last-seen timestamp, and total session count. This profile does not contain your real name, email, or any personally identifiable information.

1.5 Cloud Backup (Optional)

If you choose to enable the optional cloud backup feature, your garden data (excluding photos) is synced to our backend infrastructure on Railway (railway.com): a Next.js API and a Railway-managed PostgreSQL database. The sync occurs automatically when the App moves to or from the background. Data synced includes plants, tasks, sowing records, wildlife sightings, fertiliser logs, disease records, vision board items, and garden projects. Each record is tagged with your anonymous UUID and device identifier only.

You can disable cloud backup at any time from the App's Settings. Disabling backup stops future sync but does not automatically delete data already stored in the cloud. You may request deletion of your cloud backup data at any time by contacting us at support@amzuit.com.

1.6 Push Notifications

The App may send local push notifications for watering reminders and task due dates. These notifications are scheduled entirely on-device. No personal data is transmitted to any server for notification delivery purposes.

2. How We Use Your Information

We do not use your data for advertising, profiling, or resale to third parties.

3. Third-Party Services

The App integrates with the following third-party services. Each service operates under its own privacy policy.

4. Data Storage and Security

• On-device storage: Garden data is stored on your device using Apple SwiftData. Photos are stored in your app's sandboxed file system using Apple's external storage attribute.
• iCloud: If iCloud sync is active, data is synced across your Apple devices via Apple CloudKit under your personal Apple ID. Amzu Information Technology Ltd has no access to this data.
• Cloud backup: When enabled, garden data (excluding photos) is synced over HTTPS to a Railway-managed PostgreSQL database accessed via a Next.js API hosted on Railway. API requests are authenticated with a private API key. All synced records are identified by your anonymous UUID only.
• Keychain: Your anonymous user ID and device ID are stored in your device's iOS Keychain, protected by the operating system and not accessible to other applications.

5. Data Retention

• Local data: Retained on your device until you delete it or uninstall the App.
• iCloud data: Retained in your iCloud account until you delete it or revoke iCloud access.
• Cloud backup data: Retained until you request deletion at support@amzuit.com.
• Analytics data: Anonymous session records are retained for up to 24 months.

6. Your Rights and Choices

Regardless of where you are located, you have the following rights:

• Access: You may request a summary of the data we hold about you.
• Deletion: You may request deletion of your cloud backup data and analytics records at support@amzuit.com.
• Opt-out: You can disable cloud backup at any time in the App's Settings tab.
• Location: You can revoke location access at any time via iOS Settings.
• Photos: You can revoke camera and photo library access at any time via iOS Settings.
• Delete all local data: Uninstalling the App removes all locally stored data from your device.

7. GDPR (European Economic Area and UK)

If you are located in the EEA or the United Kingdom, the following additional information applies.

Your EEA/UK rights include: right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. To exercise any of these rights, contact us at support@amzuit.com.

Data transfers: When cloud backup is enabled, your data is transferred to servers operated by Railway (railway.com) in the region selected by Amzu Information Technology Ltd, under appropriate safeguards.

8. CCPA (California Residents)

If you are a California resident, the CCPA and CPRA grant you additional rights. We do not sell or share personal information for cross-context behavioural advertising.

Your CCPA rights include: right to know, delete, correct, opt out of sale/sharing, and non-discrimination. To submit a verifiable consumer request, contact us at support@amzuit.com with "CCPA Request" in the subject line.

9. Children's Privacy

GrowHut's Verna is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. For users in the EEA, the App is not directed at individuals under 16 years of age.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this document. If changes are material, we will provide a prominent notice within the App.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us: