Privacy Policy

We collect only what the app needs to work. There is no advertising SDK and no third-party analytics or tracking in Siy.

• Account details. When you sign in with Apple or Google we receive and store your email address, your name (where the provider supplies it), which provider you used, and the unique user ID that provider assigns to you. We never receive or store your Apple or Google password.
• Your garden records. The content you create in the app: plots (name, description, colour, notes), plantings (crop, variety, notes, dates), treatments (product, notes, dates), harvests (crop, quantity, unit, review, dates), and reminders (title, due date, completion status).
• Plant photos. Only when you use the plant diagnosis feature. See Plant photos and AI diagnosis below.
• Subscription information. If you subscribe, we store the transaction identifier, product identifier, platform, subscription status and expiry date returned by Apple or Google. We never see or store your payment card or billing details — those stay with Apple and Google.
• Server logs. Our servers and hosting provider record standard technical information about requests, which can include IP address and timestamps. We retain these for 30 days.

• No location data. The app does not request or record your GPS location.
• No push notification tokens. Reminders are scheduled locally on your device. Nothing about your reminders is sent to a push service, and no device token leaves your phone.
• No analytics or advertising. We do not use analytics SDKs, advertising identifiers, or cross-app tracking, and we do not sell personal data.

• To create and maintain your account and sign you in.
• To store and sync the garden records you create, so they are available on your devices.
• To schedule the reminders you set up.
• To analyse a plant photo when you explicitly request a diagnosis.
• To verify and manage your subscription with Apple or Google.
• To keep the service secure, diagnose faults, and prevent abuse.

Where the GDPR applies, we rely on the performance of our contract with you for account, garden data and subscription processing; on your consent for plant photo analysis; and on our legitimate interest in keeping the service running and secure for server logs.

The plant diagnosis feature is optional and only runs when you choose to take or select a photo and request an analysis.

• The photo is sent to our server and forwarded to OpenAI, which analyses it and returns a diagnosis. OpenAI processes the image on servers that may be outside your country.
• We do not store your photos in our database — the image is passed through for analysis and the result is returned to your device.
• Please avoid including people, faces, documents, or other sensitive content in photos you submit for diagnosis.

OpenAI’s handling of data submitted through its API is governed by its own terms and privacy policy.

We do not sell your personal data. We share it only with the providers needed to run the service:

• Apple — Sign in with Apple, and verification of App Store subscriptions.
• Google — Google Sign-In, and verification of Google Play subscriptions.
• OpenAI — plant photo analysis, only when you use the diagnosis feature.
• Our hosting provider — hosting of our servers and database.

We may also disclose data where we are legally required to, or to establish or defend legal claims.

Some of the providers above process data outside your country, including in the United States. Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on the transfer mechanisms offered by those providers, such as the European Commission’s Standard Contractual Clauses.

We keep your account and garden records for as long as your account exists. When you delete your account, your user record and all garden data linked to it — plots, plantings, treatments, harvests and reminders — are deleted from our database.

Server logs and backups are retained for 90 days, after which they are overwritten. Records that we must keep for tax or accounting reasons, such as subscription transactions, are retained for the period the law requires.

You can delete your account at any time from Account in the app. This is immediate and permanent — we cannot restore deleted garden records, so export anything you want to keep first.

Deleting your Siy account does not cancel your subscription. Manage or cancel subscriptions in your App Store or Google Play account settings.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. The app provides direct access to most of these:

• Access and correction — view and edit your records directly in the app.
• Portability — export your garden data from the app at any time.
• Deletion — delete your account from the Account screen.

For anything else, contact us at privacy@siy-app.com. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

Traffic between the app and our servers is encrypted in transit. Access to the production database is limited to those who need it to operate the service. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

Siy is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the app changes. When we do, we will revise the “last updated” date above, and for significant changes we will notify you in the app.

Questions about this policy or your data? Email us at privacy@siy-app.com.