Legal

Privacy Policy

Last updated: draft version. Effective date to be set at production launch.

Draft - requires legal review before production launch. This policy is written in good faith to describe how myEdenry actually processes data during the Founding Beta, but it has not been reviewed by a qualified lawyer and should not be treated as final or legally binding until it is.

This Privacy Policy explains how myEdenry (“we”, “us”, the “Service”) collects, uses, discloses, and protects information when you use our Android application and this website. We are committed to complying with India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) as the primary framework governing this policy.

1. Roles under the DPDP Act

Under the DPDP Act, myEdenry acts as the Data Fiduciary for personal data you provide through the app, and you are the Data Principal. Where we engage third-party service providers (see Section 6) to process data on our behalf, they act as our Data Processors under contractual obligations consistent with the Act.

2. What we collect

Account data: name, email address, and a securely hashed password. We never store your password in plain text.
Garden data: plants you add, locations, containers, beds, care events, journal entries, notes, and voice-journal transcripts.
Photos: images you upload for plant records, identification, and diagnosis.
Location: an approximate or precise location, only if you grant permission, used to tailor weather-based recommendations and planting windows. You may enter a location manually instead of sharing device location.
Usage and diagnostic data: feature usage counts (for beta usage limits), app interaction events, and error logs, used to operate and improve the Service.
Device and technical data: device type, OS version, and app version, for compatibility and debugging.

3. Consent

We collect personal data only with your informed consent, obtained at account creation and at each point we request additional permissions (such as location, camera, or microphone access). You may withdraw consent for optional processing (for example, location-based recommendations) at any time through your device settings or in-app permissions, without affecting your ability to use core features that do not require that data.

4. How we use your data

To operate core features: garden tracking, recommendations, journal, identification, and diagnosis.
To generate weather-aware recommendations for your approximate location.
To process photos and voice recordings through AI service providers strictly for the feature you invoked (see Section 6).
To enforce Founding Beta usage limits and prevent abuse of costly AI processing.
To send you notifications you have opted into (plant checks, frost/heat alerts, diagnosis follow-ups, planting opportunities).
To respond to support requests and improve the Service based on aggregated, de-identified usage patterns.

5. AI processing

Certain features send data to AI service providers for processing: plant identification, plant diagnosis, speech-to-text transcription for the voice journal, and the garden assistant. Only the specific image, audio, or text needed for that feature is sent, only when you actively use that feature. AI providers do not have standing access to your full garden data. We never use AI to make binding decisions about your account, subscription, or data - AI outputs are always presented to you as suggestions, not facts.

6. Third-party processors

The following categories of third-party service providers may process data on our behalf, strictly as Data Processors:

Cloud infrastructure and database hosting - for storing account, garden, and journal data.
Object storage - for photos you upload.
Large language model providers - for the garden assistant, voice-journal event extraction, and recommendation explanations.
Speech-to-text providers - for transcribing voice journal recordings.
Plant identification and plant health providers - for the Scan feature.
Weather data providers - for location-based recommendations, using only your approximate coordinates.
Email delivery providers - for account and transactional email.
Push notification providers - for delivering notifications you have opted into.

Some of these providers may process data outside India. Where cross-border transfer occurs, we take steps consistent with DPDP Act requirements and will name specific providers and transfer mechanisms here before production launch.

7. Data retention

We retain your account and garden data for as long as your account remains active. If you delete your account, we permanently delete your personal data, garden data, and photos within a reasonable period, as described in our Account Deletion page, except where retention is required by law or for legitimate operational purposes such as fraud prevention, which will be minimized and documented before production launch.

8. Your rights

Under the DPDP Act, you have the right to:

Access a summary of the personal data we hold about you.
Correct or update inaccurate or incomplete personal data.
Withdraw consent for optional processing at any time.
Request erasure of your personal data, as described in our Account Deletion page.
Nominate another individual to exercise your rights in the event of death or incapacity.
Lodge a grievance with our Grievance Officer, and subsequently with the Data Protection Board of India if unresolved.

9. Grievance Officer

For any privacy-related questions, requests, or grievances, contact our Grievance Officer at privacy@myedenry.com (placeholder contact - a named Grievance Officer will be designated before production launch, as required by the DPDP Act).

10. Breach notification

In the event of a personal data breach, we will notify affected users and, where required, the Data Protection Board of India, in accordance with the DPDP Act and its rules.

11. Children's data

myEdenry is not directed at children under 18. We do not knowingly collect personal data from children. If we become aware that a child's data has been collected without verifiable parental consent, we will delete it.

12. Changes to this policy

We may update this policy as the Service evolves, particularly as we move from beta to a production release with paid tiers. Material changes will be communicated in-app or by email before they take effect.

13. Contact

Questions about this policy can be sent to privacy@myedenry.com or through our contact page.