Privacy Policy of the Permaplans App

1. Controller
The controller responsible for data processing within the meaning of the GDPR is:
Christoffer Montenero
privacy@permaplans.com

2. General Information on Data Processing
We only process personal data in accordance with legal requirements (GDPR, TMG, etc.).
Data processing is carried out solely as required for the functionality, security, analysis, and further development of the app.

3. Collected Data

a) User Account & Profile Data
When creating an account or editing your profile, the following data may be collected:

• First and last name (optional)

• Nickname

• Email address

• Avatar image (optional)

• Language

• Country of origin (optional)

• Bio, interests (voluntary)

• Referral code (optional)

Purpose: User identification, profile functionality, community features

b) Usage Data
We store the following usage data for app functionality, reward logic, and error analysis:

• Last login

• Usage time

• Number of games played

• In-app currency (“Pachams”)

• Feature usage counters (e.g. plant search, PlantNet requests)

• Number of reported contents

• App version, device model, language

• Onboarding completed (yes/no)

• Push notifications enabled (yes/no)

Purpose: Feature control, monetization (e.g. limits), abuse detection, app improvement

c) Location Data
If you agree, we collect your location via GPS or network to localize your garden or use location-based features.

Purpose: Garden management, local offers, weather features (planned)

d) Gardens & Content
User-generated content we store includes:

• Your gardens, plant lists, notes, photos

• Favorites, comments, reviews

• Marketplace entries (offers & requests)

• Feedback & abuse reports

• Game progress

Purpose: App functionality, community interaction, moderation

e) Plant Identification via PlantNet
For plant identification, image data is sent to the PlantNet API (https://plantnet.org).
Their privacy policy also applies.

Purpose: Plant identification

4. Permissions & Device Access
The app uses the following permissions only with your consent and strictly for the stated purposes:

5. Login & Third Parties

Google OAuth (optional)
When logging in with Google, we receive your name, email, and profile picture.
This is used only for user identification.

Payment Providers (future)
If you pay via Google Pay or similar services, data processing is handled by the respective provider.
We do not store any payment data ourselves.

6. Data Sharing
We do not share data with third parties.
All data is used exclusively for internal purposes.
There is no advertising tracking, data sale, or third-party marketing.

7. Retention Period
Your data remains stored as long as your account is active.
Upon account deletion, all personal data will be permanently deleted unless legal retention obligations exist.

8. Your Rights
You have the following rights at any time:

• Information about stored data

• Correction of incorrect data

• Deletion of your data (“right to be forgotten”)

• Restriction of processing

• Objection to specific processing

• Data portability

Contact for exercising your rights: privacy@permaplans.com

9. Changes
This privacy policy may be updated due to functional or legal changes.
You will be informed of any significant changes.