TwigletPrivacy Policy
Effective as of 2026-09-26
The short version: we use your data only to make the app work. We don't sell it, there are no ads, and you can download or delete everything whenever you want.
This policy explains what personal data Twiglet (the "App") handles, what for, who we share it with and what rights you have. The controller is BalcarDev, based in Argentina ("we"). For any question about your data, write to us at twigletapp@gmail.com.
1. What data we use and what for
| Data | What for | Where it's stored |
|---|---|---|
| Account: email, name and profile photo (if you sign in with Google or Apple) and a user identifier. | Creating your account, letting you sign in from another phone and showing your name. | Firebase Authentication (Google). |
| Your plants: name, species, room of the house, light, pot, watering frequency, watering history, journal notes, health diagnoses and your watering days and vacation dates. | Working out when it's time to water, sending you reminders and showing you the history. | Cloud Firestore (Google), in a space that only your account can access. |
| Photos: of your plants, from the journal and from health checks. | Showing you your plants and saving the diagnosis with its photo. | Cloud Storage for Firebase (Google), accessible only by your account. |
| Photos you send for recognition or diagnosis. | Identifying the plant or assessing its health with artificial intelligence (see section 2). | They are sent to Google Gemini; we don't store them separately on our servers beyond the plant or health-check photo that is already saved in your account. |
| Usage statistics: actions within the App (for example, "added a plant" or "marked a watering"), technical device data and an installation identifier. They don't include your name, your email, your photos or the text of your notes. | Understanding which parts of the App get used and improving it. | Google Analytics for Firebase. You can turn them off in Settings > Privacy. |
| Crash reports: what failed, in which part of the code, phone model and system version. | Finding and fixing bugs. | Firebase Crashlytics (Google). |
| App verification: a signal that the request comes from the original App installed from the store. | Preventing abuse of the artificial intelligence service. | Firebase App Check, with Play Integrity (Android) or App Attest (iPhone). |
| Preferences on your phone: language, theme, reminder time and whether you accepted the artificial intelligence notice. | So the App remembers how you set it up. | Only on your phone. |
What we don't do: we don't ask for your location, we don't read your contacts, we don't use your phone's advertising identifier, we don't track you across other apps or websites, we don't show ads and we don't sell or rent your data.
Watering reminders are scheduled on your own phone: they don't go through our servers.
2. Photos and artificial intelligence
- Before you send your first photo to the artificial intelligence, we ask for your permission. If you don't accept, you can add your plants by hand.
- Before it leaves your phone, the photo is shrunk and its metadata is removed (including GPS location, if it had any).
- The photo is sent, along with the App's language, to Gemini, a Google service, only to get the identification or the diagnosis. Your name, your email and other account data are not sent.
- We use Gemini under the terms of its paid service: Google doesn't use those photos to train its models and may keep them for a limited time only to detect abuse, according to its terms.
- Avoid taking photos that show people or documents: the App is meant for plants.
3. Who we share data with
Only with providers we need to make the App work, who process the data on our behalf and under their own security and confidentiality obligations:
- Google (Firebase, Google Analytics, Crashlytics, Gemini, Sign in with Google and Google Fonts, which serves the App's fonts). Privacy and security in Firebase.
- Apple, if you sign in with Apple or use the App on an iPhone.
We may also have to disclose data if a law or a competent authority requires us to. If the App ever changes owners, your data would remain protected by this policy and we would let you know beforehand.
When you share the vacation card or a card of your plant, the image is put together on your phone and you choose who to send it to and through which app. We don't receive it.
4. Where it's stored
Google's servers may be outside your country, for example in the United States. Google provides safeguards for these international transfers (such as the European Union's standard contractual clauses), which are part of its data processing terms.
5. How long we keep it
- Your account, your plants and your photos: for as long as you have the account. When you delete a plant, it no longer appears in the App, but its data and photos are kept in your account until you delete the account. Deleting the account removes your account and all that data.
- Usage statistics: up to 14 months, according to Google Analytics retention.
- Crash reports: up to 90 days.
- Artificial intelligence usage counter: resets every day and is deleted with your account.
6. Why we can use it (legal bases)
- To provide you the service you asked for when you created the account: account, plants, photos, reminders.
- Your consent: to send photos to the artificial intelligence and for notifications. You can withdraw it whenever you want (without affecting what was done before): by adding plants by hand or turning off reminders.
- Our legitimate interest in improving the App and keeping it stable and secure: usage statistics (which you can turn off), crash reports and App verification.
- Legal obligations, where applicable.
7. Your rights
You can ask to access your data, correct it, delete it, take it with you, object to its processing or restrict it. You can do a lot of this yourself from the App:
- Download your data: Settings > Export my data (plants, waterings, journal and health checks, in JSON and CSV).
- Correct it: by editing the plant or your name.
- Turn off statistics: Settings > Privacy.
- Delete your account and all your data: Settings > Delete account, or as explained on this page if you no longer have the App.
For everything else, write to us at twigletapp@gmail.com. We'll answer within 10 business days (in Argentina) or one month (in the European Union). We may ask you to confirm that the account is yours.
Argentina: you can exercise the right of access free of charge at intervals of no less than six months, unless you show a legitimate interest (art. 14, para. 3, Law 25,326). The Agency for Access to Public Information (AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA), in its capacity as the Supervisory Authority of Law No. 25,326, has the power to handle the complaints and claims filed by those whose rights are affected by non-compliance with the rules in force on personal data protection.
European Union and United Kingdom: you can also lodge a complaint with the data protection authority of your country. Brazil: with the ANPD.
8. Security
Everything travels encrypted (HTTPS). The rules of our database and storage only allow each account to read and write its own data. The keys for the artificial intelligence services are never inside the App: they live on our servers, and each request is verified with Firebase App Check and has a daily limit. No system is foolproof, but if there were ever an incident affecting your data, we will let you know as the law requires.
9. Children
The App is not directed at children under 13 and we don't knowingly collect data from them. If you believe a child under 13 has given us data, write to us and we'll delete it.
10. Changes to this policy
If we change something important (for example, if we add ads or a new service that receives your data), we'll let you know in the App before it takes effect, and we'll update the date above.
11. Contact
BalcarDev · twigletapp@gmail.com