Privacy Policy

Overview

OMG (Oh My Garden) is an AI-powered plant care app. We process account data via Supabase (authentication and database services) and analyze plant-related content using Google Gemini to deliver diagnostics, treatments, and insights. This policy applies to users worldwide.

Scope

This policy describes how we collect, use, disclose, and safeguard personal data when you use OMG mobile and web experiences.

Information We Collect

• Account and profile information (name, email, avatar) managed via Supabase Auth.
• Plant data you provide (species, notes, care history) stored in Supabase database.
• Media you upload (images/videos of plants) used for AI analysis; thumbnails or derived metadata may be stored.
• Device and usage data (app interactions, crash logs, coarse location if enabled) for performance and personalization.
• Payment information processed by trusted third parties (e.g., Paddle, Razorpay). We do not store full payment card details on our servers.

How We Use Data

• Provide and improve core features including AI plant analysis, health treatments, schedules, reminders, and the AI dashboard.
• Personalize care recommendations and garden insights.
• Maintain security, prevent fraud and misuse, and comply with legal obligations.

Legal Bases

Where applicable (e.g., the EU/EEA/UK), we rely on consent (e.g., for AI analysis of uploads), contract (to deliver the service), legitimate interests (to improve and secure the app), and compliance with legal obligations.

Sharing and Disclosure

• Service providers: Supabase for authentication and data storage; Google Gemini for AI processing of plant-related content.
• Payment processors: Paddle and Razorpay for billing and payment processing; their use is subject to their terms and privacy policies.
• Compliance: We may disclose information when required by law or to protect rights, safety, and security.
• No sale of personal data. We do not sell your personal information.

Affiliate Program

If you join the OMG affiliate program, we also collect your legal name, entity type, postal address, phone number, tax details (your PAN if you are in India, a tax ID if you are elsewhere, and a GSTIN if you give one), your date of birth or a business's date of incorporation if you give it, and payout details (a UPI ID, bank account and IFSC, IBAN or SWIFT code, or a Wise or PayPal email address). We use them only to review your application, verify your PAN with the Income Tax Department, pay your commission, and meet tax and legal obligations such as deducting and reporting tax at source. We show you only masked copies of sensitive numbers, share them only with our bank or payment provider and with tax authorities when a payment or the law requires it, and keep payment records for as long as tax law requires.

When someone follows an affiliate's link, their browser remembers the affiliate's code for up to 90 days so the referral can be credited, and if they create an account or subscribe we record which code referred them. Affiliates see only anonymised numbers about the people they referred, never their names or contact details.

International Transfers

Your data may be processed in regions outside your country. We use appropriate safeguards such as standard contractual clauses and service-provider commitments.

Data Retention

We retain data for as long as your account is active and as needed to provide the service. You can request deletion of your account data, subject to legal and operational requirements.

Security

We employ technical and organizational measures, including Supabase access controls and encryption in transit. No system is perfectly secure; we continuously improve protections.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export your data, and to object to certain processing. You can exercise rights via the app settings or by contacting us.

Children

OMG is not directed to children under 13 (or as defined by local law). We do not knowingly collect personal data from children without verifiable parental consent.

Cookies and Tracking

We may use cookies or similar technologies to remember preferences and improve experiences. You can manage preferences in your browser or device settings.

Third-Party Services

Supabase provides authentication and database services; use is subject to Supabase terms and privacy.

Google Gemini processes plant-related content to generate insights; use is subject to Google terms and privacy.

Paddle and Razorpay process payments and billing; use is subject to their respective terms and privacy policies.

Contact

For privacy requests or questions, contact: privacy@ohmygarden.in

Changes

We may update this policy. Material changes will be communicated through the app or website, with the "Effective date" updated.