1. Data Controller

Responsible under GDPR:

Christoffer Montenero
privacy@permaplans.com

2. General Information

We process personal data only in accordance with applicable laws (GDPR, TMG, etc.). Data is processed solely to provide functionality, ensure security, analyze usage, and improve the app.

3. Collected Data

a) User Account & Profile

When creating an account or using profile features, we may collect:

• First and last name (optional)
• Nickname
• Email address
• Avatar image (optional)
• Language
• Country of origin (optional)
• Bio, interests (optional)
• Referral code (optional)

Purpose: Identification, profile functionality, community features

b) Usage Data

We store the following usage data:

• Last login
• Usage time
• Number of games played
• In-app currency (“Pachams”)
• Feature usage counters (e.g., plant search, PlantNet queries)
• Reported content
• App version, device model, language
• Onboarding completed (yes/no)
• Push notifications enabled (yes/no)

Purpose: Feature logic, monetization, abuse detection, app improvement

c) Location Data

If you consent, your location may be collected via GPS or network.

Purpose: Garden localization, regional offers, weather features (planned)

d) Gardens & Content

We store the following user-generated content:

• Gardens, plant lists, notes, photos
• Favorites, comments, reviews
• Marketplace entries (offers and requests)
• Feedback & abuse reports
• Game progress

Purpose: App functionality, community interaction, moderation, as well as the display and illustration of plants within the PermaPlans app and in printed Permaplay plant portraits.
Usage is strictly limited to the features, content, and products of PermaPlans and Permaplay. Content will not be shared with third parties or used for external advertising purposes.

d2) Admin Access for Support & Consulting

For technical troubleshooting and personal garden consulting (e.g., when you send a garden vision to our designer), the controller may obtain read access to the content of your garden (plants, layout, vision, notes, photos) – but not to your password, your private direct messages, or your payment data.

Access is strictly occasion-based and limited to what is necessary to fulfill the respective purpose. Content will not be shared with third parties.

Legal basis:

• Art. 6 (1) (b) GDPR – performance of a contract or pre-contractual measures (e.g., when consulting is actively requested)
• Art. 6 (1) (f) GDPR – legitimate interest in troubleshooting and the security of the app

Objection: You may object to this processing at any time by email to privacy@permaplans.com.

e) Plant Identification via PlantNet

Uploaded plant photos are sent to the PlantNet API (plantnet.org). Their privacy policy also applies.

Purpose: Plant identification

4. Permissions & Device Access

Permissions are only used with your consent and for the purposes described:

5. Third-Party Services

Apple OAuth (optional)

When signing in via Apple, we receive your name, email, and profile image.
Purpose: User authentication.

Google OAuth (optional)

When signing in via Google, we receive your name, email, and profile image.
Purpose: User authentication.

Payment Providers (planned)

If using Google Pay or similar, processing is handled by the provider. We do not store payment data.

6. Data Sharing

No data is shared with third parties. All data is stored and used internally only. We do not sell or market user data. No tracking by ad networks.

7. Data Retention

Your data is stored as long as your account is active. Upon deletion, all personal data is permanently erased, unless required by law.

8. Your Rights

You may request at any time:

• Access to your data
• Correction of incorrect data
• Deletion (“Right to be Forgotten”)
• Restriction of processing
• Objection to specific data usage
• Data portability

Contact: privacy@permaplans.com

9. Changes

This privacy policy may be updated due to functional or legal reasons. You will be informed of major changes.