GardenSage AI Privacy Policy

Last updated: September 19, 2026

GardenSage AI is operated by Sanva, an independent developer (sanva.top). This policy explains the information the app processes and your choices. Feature details depend on the installed version.

1. Account and identity

Sign in with Apple supplies an app-specific user identifier and, when you choose to share them, your email or name. Supabase validates sign-in and stores account records. Session credentials are stored securely on your device. We do not require a phone number or payment card details.

2. Garden, photos, and care history

Garden records, saved plant photos, and care history are primarily stored on your device and separated by signed-in account. Automatic cross-device synchronization is not included. Uninstalling the app, clearing app data, or losing a device can remove these local records.

The app sends selected photos and notes only when you choose identification or diagnosis and allow AI processing. Camera and photo permissions support the capture or import you request. Notification permission supports local care reminders you set.

3. AI processing and external services

Selected photos and text pass through GardenSage Supabase Edge Functions and Sanva’s NewAPI gateway to configured external AI model services. A self-hosted gateway does not mean the model runs on your device or on Sanva’s own servers. External model providers receive the information needed to process a request.

We do not guarantee that every upstream service never retains data, never uses it for training, or deletes logs within a fixed 24-hour period. Gateway, model, and infrastructure services may process requests or operating logs according to their settings and policies. Do not submit faces, addresses, or sensitive information unrelated to plant care.

You may decline AI processing and continue viewing existing local records. New AI requests require your consent. AI answers and citations can be wrong; reference links help you check a result and do not guarantee accuracy.

4. Subscriptions

Apple processes payments. RevenueCat processes app user identifiers, purchases, and subscription status and links active access to your account to support Pro features and purchase restoration. We do not receive full payment card information.

Monthly and yearly prices appear in Apple’s purchase sheet. Eligible new yearly subscribers can receive a 7-day free trial, with eligibility determined by Apple. Deleting your app account does not cancel an Apple subscription. Manage renewal in Apple Account subscription settings.

5. Diagnostics and service operations

GlitchTip receives crash and error diagnostics through a Sentry-compatible SDK, including app version, device and operating system information, error stacks, and necessary event metadata. Client configuration filters sensitive fields such as credentials and request bodies. Supabase, gateway, and model services may also keep technical logs needed to operate their services.

We use this information to investigate errors, maintain security, and improve reliability. We do not promise a fixed 24-hour deletion window. Data is retained according to service configuration and applicable law and deleted or de-identified when no longer needed.

6. Services and purposes

Service	Purpose	Information it may process
Sign in with Apple	Identity verification	App user identifier, shared email or name
Supabase	Authentication and AI request processing	Account, session, request, and operating metadata
Sanva NewAPI gateway and external model services	Identification and leaf analysis	Submitted photos and notes, technical request information
RevenueCat and Apple	Payments, subscriptions, and restoration	App user identifier, purchases, and subscription records
GlitchTip	Crash and error investigation	Device, app version, and diagnostic events

Transmission uses HTTPS. We do not use third-party advertising SDKs or sell your personal information. Service providers may process data outside your region.

7. Deletion and your choices

Choose Delete account in app Settings and confirm again with the same Apple account. On success, the app revokes Apple authorization, deletes the Supabase account and applicable linked records, and clears the current account’s garden, photos, and care history from the device. If verification or revocation fails, the app reports the failure rather than showing deletion as complete.

Apple and RevenueCat may retain transaction, legal, or financial records under their policies and legal obligations. Account deletion does not cancel a subscription. You can also disable camera, photo, or notification permissions in system settings, or email us with access, correction, or deletion requests.

8. Children, changes, and contact

The app is not directed to children under 13. Contact us if you believe we processed a child’s information. We update the date on this page when this policy changes and request additional consent where needed.

For privacy questions, contact support@sanva.top.