Privacy Policy
Last Updated: January 15, 2025
1. Introduction
Welcome to DigiPlanter, operated by Digisubs Agency ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our DigiPlanter smart planter device, mobile application, website, and related services (collectively, the "Services").
2. Information We Collect
2.1 Account Information
- Name, email address, and phone number
- Date of birth (optional)
- Profile image (optional)
- Authentication credentials (passwords are hashed using bcrypt)
- Third-party OAuth data (Google ID, Apple ID) if you use social sign-in
2.2 Device & Sensor Data
- Device MAC addresses and device names
- Sensor readings: soil moisture, temperature, humidity, light levels, water levels
- Device configuration and automation settings
- WiFi credentials (stored locally on the device, not transmitted to our servers)
2.3 Usage Data
- App usage patterns and feature interactions
- Plant selections and care preferences
- Push notification preferences
3. How We Use Your Information
- Provide Services: Operate the DigiPlanter system, including real-time monitoring, automated care, and mobile app functionality
- AI-Powered Insights: Generate personalized plant care recommendations using OpenAI integration based on your plant type and sensor data
- Communications: Send password reset emails via SendGrid, push notifications about plant care, and important service updates
- Improvement: Analyze aggregated, anonymized usage data to improve our products and services
- Security: Protect against unauthorized access and ensure the integrity of our services
4. Data Storage & Security
Your data is stored securely using industry-standard practices:
- Passwords are hashed using bcrypt with 10 salt rounds — we never store plaintext passwords
- Authentication uses JWT tokens with 7-day expiration and token blacklisting on logout
- Data is stored in MongoDB databases with encrypted connections
- Real-time sensor data is synced via Firebase with security rules
- OTP codes for password reset expire after 10 minutes
5. Third-Party Services
We use the following third-party services to operate DigiPlanter:
- Firebase (Google): Real-time database for sensor data sync and push notifications
- OpenAI: GPT-4 integration for generating plant care conditions (plant type data only — no personal data is shared)
- SendGrid: Email delivery for password resets and notifications
- Google & Apple OAuth: Authentication providers for social sign-in
6. Your Rights
You have the right to:
- Access your personal data through the mobile app or by contacting us
- Update or correct your profile information at any time via the app
- Delete your account and associated data by contacting our support team
- Export your sensor data and plant care history
- Opt-out of push notifications through your device settings
- Withdraw consent for data processing at any time
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our Services. Sensor data logs are retained for 12 months to provide historical insights. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
8. Children's Privacy
DigiPlanter is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: contact@digiplanter.com
- Phone: +216 12 345 678
- Address: Tunis, Tunisia
- Company: Digisubs Agency