Poti: Plant Care

Privacy Policy

Effective date: August 18, 2026 · Last updated: October 1, 2026

1. Data Controller

Operator: Jingyeong Hong
Service: Poti: Plant Care
Privacy contact: poti.plantcare@gmail.com

You may contact us at the email address above regarding privacy questions or to exercise your data protection rights.

2. Information We Process

Account and authentication information

Poti creates an anonymous user account by default. We may process:

  • Internal user identifier (UUID)
  • Anonymous-account status
  • Authentication session and sign-in information
  • Technical information processed during authentication, such as IP address and User-Agent
  • Login- and session-related timestamps

This information is used for authentication, account continuity, user-level data separation and service security.

Sign in with Apple

If you optionally connect your account using Sign in with Apple, Apple may provide your email address and name information. The information actually provided depends on your Apple account settings and Apple privacy features. Connecting an Apple account is optional.

Profile and plant-care information

You may enter or create:

  • Nickname
  • Registered plants and plant nicknames
  • Plant species and cultivar information
  • User-defined location or room tags
  • Date you met or acquired a plant
  • Watering mode and interval
  • Plant active/inactive status
  • Other settings required for plant care

Location or room tags such as “living room” or “bedroom” are labels entered by the user. Poti does not collect GPS location.

Watering and care history

We may store watering dates, watering history, notes entered by the user and, for shared plants, the identifier of the user who performed a care action. This information is used to show care history and calculate upcoming watering dates.

Shared-care information

If you use shared-care features, we may process group names, group owner/creator information, memberships, join times, inviter information, group location tags, shared plant information and shared-care activity history. Invitation codes are not stored in plaintext; a hashed value is stored instead. Limited security data such as failed invitation-code attempts may also be stored.

Community safety and reports

We process the accepted sharing-terms version and time, blocks, report reasons, targets and submission time, and minimal content needed for review. Only the operator can view reports. This protects users and prevents abuse. Account deletion removes consent and blocks and removes user identifiers from reports. Resolved reports are deleted within 90 days under the operational policy, except information subject to legal retention requirements. Do not include personal information in a report’s body.

3. Information Stored Only on Your Device

Certain settings are stored only on your device and are not sent to Poti servers. These may include:

  • Whether watering reminders are enabled
  • Reminder time
  • Local notification identifiers
  • App language and theme
  • Onboarding completion state
  • Certain local activity dates

Poti currently uses local device notifications for watering reminders. Poti does not collect or store Expo Push Tokens, APNs Tokens or FCM Tokens on its servers.

4. Purposes of Processing

We process information to provide and maintain user accounts, store and display plant data, calculate watering schedules, show care history, maintain user settings, provide shared-care groups, connect Apple accounts, process account/data deletion requests, protect service security, prevent abuse and diagnose errors.

Poti does not currently use personal data for targeted advertising, advertising tracking or the sale of personal information.

5. Legal Bases for Processing

For users in the European Economic Area (EEA), Poti processes personal data under applicable data-protection law, including the GDPR. Data required for core account, plant-care, watering-history and shared-care features is processed as necessary to provide the Poti service requested by the user. Authentication security, access control, abuse prevention and limited technical logs may be processed on the basis of legitimate interests in protecting users and operating the service securely.

6. Service Providers

Supabase

Poti uses Supabase for user authentication, PostgreSQL database services, Edge Functions and storage of account and plant-management data. Poti’s current Supabase project uses the EU North region (eu-north-1). Supabase infrastructure may process IP addresses, User-Agent information and authentication/technical logs for security and service operation.

Apple

If you choose Sign in with Apple, Apple participates in the authentication process and may provide your name or email address according to your choices and settings.

7. International Data Processing

Poti’s primary database is hosted in the EU. Some information may nevertheless be processed outside the EEA through service-provider operations, support, security infrastructure or subprocessors. Where this occurs, appropriate safeguards required by applicable data-protection law are used.

8. Retention and Deletion

Poti keeps personal information for as long as necessary to provide the service. If you use the in-app “Delete account and all data” function, data directly linked to your account is deleted through the account-deletion process.

This generally includes your authentication account, profile and nickname, personal plant information, personal location tags, watering history for personal plants, group membership information directly linked to you and Poti settings stored on your device.

Because shared-care history is also used by other group members, some shared management records may remain after your account is deleted. In that case, the user identifier associated with the deleted account is removed so that the record is no longer directly linked to you.

Security logs, backups or operational records maintained by service providers may remain for a limited period under their applicable retention policies.

9. Deleting an Individual Plant

Deleting an individual plant may mark that plant as inactive so that it is no longer shown in normal app views. This is different from deleting your entire account.

10. Shared Groups and Account Deletion

If you own a shared-care group, you may need to transfer ownership to another member or delete the group before deleting your account. This helps prevent unexpected deletion of data used by other group members.

11. Local Notifications

Watering reminders are currently scheduled locally on the user’s device. Reminder settings and reminder times are stored on the device and are not sent to Poti servers. You can change notification permissions in the app or your operating system settings.

12. Sale of Personal Data and Advertising Tracking

Poti does not sell personal information and currently does not use third-party ad networks, personalized advertising, advertising-identifier tracking, or cross-app/cross-site tracking.

13. Security

Poti applies technical and organizational safeguards appropriate to the nature of the service, including authenticated access controls, user-level data restrictions and server-side permission checks. No method of transmission or storage over the internet can, however, guarantee absolute security.

14. Your Rights

Depending on applicable law, users in the EEA may have rights including access, correction, deletion, restriction of processing, data portability, objection to processing based on legitimate interests, withdrawal of consent where consent is used as a legal basis, and the right to lodge a complaint with a competent data-protection authority.

To exercise your rights, contact poti.plantcare@gmail.com. You can also request account deletion using the in-app “Delete account and all data” function.

15. Children’s Privacy

Poti is not primarily designed for children. If we become aware that personal information relating to a child is being processed without procedures required by applicable law, we will take appropriate steps to delete or otherwise address that information.

16. Changes to This Privacy Policy

This Privacy Policy may be updated when Poti’s features, data-processing practices or applicable legal requirements change. Where appropriate, significant changes may be communicated in the app or by another suitable method. The latest version will show the date of the most recent update.

17. Contact

Poti: Plant Care
Operator: Jingyeong Hong
Email: poti.plantcare@gmail.com
Effective date: August 18, 2026