1. What we collect
| Category | What it is |
|---|---|
| Account | Email address, display name, handle, hashed password. Nobody at LeafRanger can read your password. |
| Your garden | The plants you own, your homes, rooms, spots and placements, and your watering and care history. |
| Photographs | Images you upload to identify a plant, diagnose a problem, read soil, or attach to a post. |
| Approximate location | Coarse location used to fetch local weather, because that is what moves your watering schedule. |
| Conversations | Your messages to Herb, and the small set of facts he retains from them. |
| Community | Posts, comments, votes, follows, and reports you file. |
| Orders | What you bought, from which shop, the delivery address, and the payment reference. |
| Technical | Device type, app version, IP address and error logs — used to keep the service working and to detect abuse. |
We never see your card details. Payments are handled by our payment provider, and card and bank data never reaches our servers. We hold a reference to the transaction, not the instrument.
2. Why we collect it
- To run the app — a garden has to be remembered across years and phones.
- To answer accurately — Herb reads your plants’ records so he can answer about them specifically.
- To schedule watering — your weather is why the schedule moves.
- To take and settle payments, and to issue invoices.
- To keep the marketplace honest — spotting shops that keep failing buyers.
- To keep everyone safe — moderation, abuse detection and security.
Where we rely on your consent — for example, attaching location to a post — you give it separately and can withdraw it just as easily.
3. What we never do
- We do not sell your data. Not to advertisers, not to brokers, not to anyone.
- We do not run advertising. There is no ad surface in the app, on any tier.
- We do not hand your photographs or conversations to anyone to train their models.
- We do not build an advertising profile of you.
These are architectural facts rather than promises: there is no pipeline in the product that would do any of them.
4. Photographs and Herb
To identify a plant or diagnose a leaf, the image is sent to a third-party AI provider for processing and the result is returned to you. The same applies to a message you send Herb. We send what is needed to answer and no more.
Herb answers from your own garden data plus our plant catalogue. He has no access to other people’s gardens, and none to payment data. The small set of facts he remembers about you is visible to you and can be cleared.
One category is deliberately never AI-written: plant toxicity. Only a checked source or a person may set it, at any tier, even when the field is empty — because a wrong toxicity answer is the one mistake in this product that can hurt an animal.
6. How long we keep it
- While your account is open — your garden, photographs and history.
- Order and invoice records — retained as long as Indian tax and company law requires, even after account closure.
- Technical logs — a short rolling window for security and debugging.
- Backups — encrypted, and aged out within 90 days.
- Deletion requests — kept as proof a request was made and honoured.
7. Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- Tell you what we hold about you, and who we have shared it with.
- Correct anything inaccurate or incomplete.
- Delete your data — see Delete your account.
- Give you a copy of your data in a portable form.
- Withdraw consent you previously gave, as easily as you gave it.
- Nominate someone to exercise these rights if you die or become incapacitated.
Write to legal@leafranger.com. We acknowledge within 48 hours and complete within 30 days. We may ask you to confirm your identity first — that check is what stops someone else exercising your rights.
If you are unhappy with how we handle a request, you can complain to the Data Protection Board of India.
8. Security and breaches
Data is encrypted in transit and at rest, passwords are hashed, and access to production data is limited to the people who need it. No system is perfect, and we would rather tell you that than claim otherwise.
If a breach affects your personal data, we will notify you and the Data Protection Board of India within 72 hours of becoming aware of it, with what happened, what was affected, and what to do about it.
9. Children
LeafRanger is not intended for children under 18. We do not knowingly collect data from a child. If you believe a child has created an account, tell us and we will remove it.
10. Changes and contact
If we change this policy materially, we will tell you in the app or by email before it takes effect. The date at the top always reflects the current version.
Data queries: legal@leafranger.com · Country Devs LLP, Bengaluru, Karnataka, India – 560001.