leafing

Privacy Policy

Effective October 6, 2026

Introduction

Leafing ("we", "our", or "us") is operated by Stavit Rubin Guerstein, who is responsible for the personal data described in this Privacy Policy. You can reach her at [email protected].

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how it is shared, how long we retain it, and the choices available to you when using the Leafing mobile application and related services.

This Privacy Policy applies to all users of Leafing and is publicly available to anyone using the app.

What we collect

Account information

Leafing requires a Google or Apple account to use.

When you sign in with Google, we receive and store certain information through Firebase Authentication, including your name, email address, profile photo, and a unique account identifier associated with your Google account.

When you sign in with Apple, we receive your name (on your first sign-in only), your email address or, if you choose Hide My Email, an Apple private relay address, and a unique Apple account identifier.

Plant and app data

We store the plant data you create in Firebase Firestore under your account, including plant names, species information, watering schedules, watering logs, fertilizer settings, fertilizing logs, plant groups, care preferences, care schedule settings, and other plant-related information you choose to save.

Plant photos are stored in Firebase Cloud Storage under your account so they can sync across your devices, and are deleted when you delete the plant or your account. A copy of your data is also kept on your device for offline use.

Analytics and technical information

We collect analytics, usage, and technical information to operate, maintain, secure, and improve the app. This may include app screens viewed, feature usage, subscription status, plant identification usage, device type, operating system, app version, browser information (where applicable), language and regional settings, diagnostic information, and approximate timestamps of app activity.

Analytics data may be collected through third-party analytics providers.

Analytics uses a random identifier generated by the app, which is linked to your account once you sign in. We do not use advertising identifiers and we do not track you across other apps or websites.

Location

Our analytics provider (PostHog) determines an approximate location (country, region, and city) from your IP address. We never collect your precise or GPS location.

Push notifications

If you enable care reminders, we store a device push token so we can send notifications to your device through Firebase Cloud Messaging and, on iPhone, the Apple Push Notification service.

Timezone and season detection

When automatic season mode is enabled, we use your device's timezone to infer whether you are in the northern or southern hemisphere. This is used solely to determine your current growing or resting season for fertilizing reminders. Your timezone is processed locally on your device. This feature does not use your precise location, GPS coordinates, or address.

Subscription information

If you purchase Leafing Pro, we may receive limited subscription-related information from the app store you purchased through, such as subscription status, purchase validation information, and subscription expiration or renewal status.

We do not receive or store your payment card information.

How we use your information

We use collected information to provide, operate, and maintain Leafing services; synchronize your data across devices when signed in; identify plant species; generate plant care recommendations; provide plant management features; improve app functionality and user experience; monitor performance, reliability, and security; detect, prevent, and address technical issues, abuse, or fraud; manage subscriptions and premium features; respond to support requests; and comply with legal obligations.

We do not sell your personal information.

Plant identification and AI features

When you use plant identification features, plant photos are sent to Pl@ntNet for species identification. Photos submitted for identification may be processed by Pl@ntNet in accordance with its own privacy practices and retention policies.

To generate care recommendations, plant names, species information, and relevant care context may be sent to Google Gemini AI via a Cloudflare Worker proxy. We do not intentionally send your Google account credentials, payment information, or unrelated personal information to AI providers.

AI-generated recommendations are provided for informational purposes only and may not always be accurate.

Data sharing and disclosure

We only share information as described in this Privacy Policy. Your information may be shared with trusted service providers that help us operate the app, including providers of authentication, cloud storage and databases, analytics, AI processing, plant identification services, infrastructure and hosting, and subscription management.

We do not sell, rent, or share your personal information with advertisers or data brokers.

We may also disclose information if required by law, regulation, court order, or legal process; to enforce our terms or protect our legal rights; to investigate fraud, abuse, or security incidents; or in connection with a merger, acquisition, or sale of assets, subject to applicable legal requirements.

Payments and subscriptions

If you purchase Leafing Pro, payment processing and subscription management are handled by the app store of your platform (Google Play on Android). We do not collect, process, or store your payment card details, banking information, or other payment credentials.

Subscription purchases, billing, refunds, and payment disputes are governed by that app store's policies and terms. Leafing Pro is not currently sold on iOS.

Third-party services

Each provider operates under its own privacy policy and may process, store, transfer, and retain data according to its own practices.

  • Your account details, plant data and plant photos are stored with Google Firebase in the European Union.
  • Analytics data is processed by PostHog in the United States.
  • Some services we use (Apple, Pl@ntNet, Google Gemini, Cloudflare, Google Play) may process data in other countries when you use the related feature.
  • Where data is transferred outside the EU, we rely on the safeguards those providers offer, such as Standard Contractual Clauses.

Security

We use reasonable administrative, technical, and organizational measures designed to protect your information from unauthorized access, disclosure, alteration, misuse, or destruction. These measures may include authentication controls, encrypted communications, access restrictions, and monitoring tools where appropriate.

However, no method of electronic storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.

Data retention

Your account, plant data, and plant photos are retained for as long as your account remains active. You can delete individual plants and related records at any time, and delete your account and associated cloud data through Settings.

Following an account deletion request, we will take reasonable steps to delete or anonymize associated personal information, except where retention is required for legal, security, fraud prevention, or dispute resolution purposes.

Analytics and diagnostic information may be retained for a limited period as necessary to maintain, secure, and improve the app.

Your rights

Depending on your location and applicable laws, you may have the right to access, receive a copy of, correct, or request deletion of your personal information, restrict or object to certain processing activities, withdraw consent where applicable, or lodge a complaint with a relevant data protection authority.

To make a request, contact us at [email protected]. We may need to verify your identity before fulfilling certain requests.

Account deletion

To delete your account, use the in-app flow: Settings → Account settings → Delete my account. All cloud data associated with your account, including plant photos, is deleted. If you signed in with Apple, we also revoke Leafing's Apple sign-in tokens.

Our Delete Account page explains how to delete your account and data.

Children

Leafing is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If local laws require a higher minimum age for processing personal information, that higher age requirement may apply.

If you believe a child has provided personal information through the app, please contact us and we will take reasonable steps to delete it.

Changes

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, technologies, or business practices. When we make changes, we will update the effective date at the top of this page. Continued use of Leafing after changes become effective constitutes acceptance of the updated policy.

Contact us

If you have questions about this Privacy Policy, our privacy practices, or requests relating to your personal information, contact us at [email protected].