Plant Sensei · American Sangha

Privacy Notice

Plant Sensei is operated by American Sangha (“we”, “us”). American Sangha is the data controller for the personal data described in this notice. This notice explains what we collect, why, who we share it with, how long we keep it, and the rights you have.

1. Data we collect and why

  • Account data — name, email address, login credentials. Used to create and secure your account (legal basis: contract performance).
  • Plant and care data — plant profiles, photos you upload, light/soil/watering readings, journal entries. Used to provide the service: identification, condition assessment, history graphs, and personalized teaching (legal basis: contract performance).
  • Preferences — experience level, measurement units, voice/audio settings, notification choices. Used to personalize content (legal basis: contract performance and legitimate interests).
  • Questions to Sensei — the questions you ask our plant teacher and the answers given, including which plant they were about. Shown back to you as your question history (you can delete any entry or clear it all), and reviewed in aggregate to improve the teaching content. Questions asked without an account are stored with only a random browser token, never a name or email (legal basis: contract performance and legitimate interests).
  • Support and Idea Garden messages — suggestions and issue reports you send us. Used to respond and improve the service (legal basis: legitimate interests).
  • Usage and device data — feature usage, device identifiers, IP address, and basic telemetry. Used for security, fraud prevention, and product improvement (legal basis: legitimate interests).

Payment card and billing details are collected and processed directly by our payment provider (see below); we never see or store your card numbers.

2. Who we share data with

  • Payment processor: for the sale of our products, subscription management, payments, tax calculation, and invoicing. The processor handles payment-related personal data under its own privacy terms.
  • Service providers / subprocessors: cloud hosting and database, AI processing (for plant identification and teaching), analytics, and customer-support tooling — each limited to what's needed to provide their service.
  • Professional advisers: legal and accounting, where needed.
  • Authorities: where required by law.

We do not sell your personal data.

3. Retention

We keep your data for as long as your account is active. When you delete your account (Settings → Privacy & Data), your personal data is deleted or anonymised within 30 days, except where we must retain records for legal, tax, or fraud-prevention reasons. Guest-purchase records held pending account creation are deleted if never claimed within 12 months.

4. Your rights

Depending on your jurisdiction, you have the right to access, correct, export, or delete your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. You can export or delete your data yourself from Settings → Privacy & Data, or contact us via the Idea Garden page — we respond within one month. If you are in the UK/EEA, you also have the right to complain to your supervisory authority.

5. International transfers

Our service providers may process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level data isolation so each member can only access their own records.

7. Cookies

We use essential cookies/storage to keep you signed in and remember preferences. We do not use marketing cookies. If we add analytics cookies in future we will ask for your consent first and let you manage preferences.

Questions about this notice? Contact us through the in-app Idea Garden page. Last updated: September 2026.