Plantable Privacy Policy
This policy explains what information Plantable (“the app”) collects, why, and how it is stored and deleted. If this translation and the Korean version differ, the Korean version prevails.
1. Information we collect
| When | What |
|---|---|
| Signing up with email | Email address and password (stored as a one-way hash) |
| Signing in with Google | Your Google account's email address, name and profile picture URL |
| Using the app | The todos, routines, schedule slots and reminder settings you enter |
| Automatically | Sign-in records (time and IP address) |
The app does not collect advertising identifiers, location or contacts, and uses no advertising or analytics tools.
2. Why we collect it
- To identify you and keep you signed in
- To store your todos, routines and schedule and show them on each of your devices
- To prevent abuse and respond to security incidents
3. How long we keep it
We keep your information until you delete your account. Deleting your account immediately removes the account together with all of its todos, routines and slots; this cannot be undone. Sign-in records are kept for security only as long as Supabase's log retention policy allows, then deleted.
4. Information kept only on your device
The token that keeps you signed in is stored in your device's secure storage, and your theme preference stays on the device. Reminders are scheduled on the device itself; no device information or push token is sent to our servers for them.
5. Sharing
We do not share your personal information with third parties, except where required by law.
6. Service providers
| Provider | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Authentication, database hosting and operation | Seoul, South Korea (AWS ap-northeast-2) |
| Google LLC | Google sign-in, if you choose it | Per Google's privacy policy |
7. Your rights
- Access and correction: you can view and edit your todos, routines and slots in the app at any time.
- Deletion: you can delete your account and all of its data from Settings → Delete account in the app.
- For any other request, email us at the address below and we will handle it without delay.
8. Security
- All traffic is encrypted with HTTPS.
- Row-level security in the database lets each user reach only their own data.
- Passwords are stored as one-way hashes.
9. Children
The app is not directed at children under 14, and we do not knowingly collect their personal information.
10. Contact
Questions or complaints about your privacy: noah.dev4127@gmail.com
11. Changes
We will post changes to this page 7 days before they take effect, or 30 days before for changes that materially affect your rights.