Privacy Policy

Who we are

Petunia is operated by Supertrained Inc., a United States company.

Privacy and support: team@supertrained.ai. We have not appointed a data protection officer.

What we collect

Website and waitlist

• Your email address; whether you asked for the Android beta or the iPhone waitlist; the page you used; and a broad device category (Android, iPhone or computer) worked out from your browser.
• We add your email to a mailing list for that request with Resend, and send one confirmation email.
• Server logs that Vercel keeps to run and secure the site, including IP address, browser and time.
• Website analytics, so we can see which pages and buttons are used: the page you view, the website that sent you (its name only) and any campaign tags in the link you followed; which sign-up or app button you press; that a sign-up happened (never the email address); and the country worked out from your IP address. Your browser sends this to this website, which passes it to PostHog Inc. in the United States. We use no cookies, localStorage or other storage on your device for it. Each event carries a pseudonymous ID made from your IP address and browser details, with a secret key and the date, so it changes every day. We do not use it to identify you or to link your visits across days. We do not store your IP address or browser details for analytics, and we do not send them to PostHog. We honour Global Privacy Control and Do Not Track: if your browser sends either, nothing is sent. For an access or deletion request, we cannot reliably find the website events that belong to one person.
• If advertising measurement is configured and you make a choice in the cookie banner, a random visitor ID, your choice, whether your browser sent Global Privacy Control, the country worked out from your IP address, and the time. We keep this record to show what you chose.

We do not put your email address in a page URL.

Petunia app

• Your email and password, or your Google email and name if you use Google Sign-In; your name, time zone and app preferences.
• Your plants, wishlist, notes, care logs, garden-space details, and photos you add, send to Petunia or use for plant identification.
• Your messages to Petunia and her replies.
• Location, if you allow it. The app reads your phone’s location while you use it to set up garden climate and weather. It can be precise. You can turn it off in your phone’s settings. Coordinates, and any address you type, are sent to Google for weather, address and time-zone lookup.
• Feedback you send us, with your email so we can reply.
• Technical logs our infrastructure providers keep for security and troubleshooting.
• Usage data, only if you agree in the app: which screens you open and which features you use, such as adding a plant, logging care or asking Petunia a question. It records the kind of action, not its content: we do not include your name, email, garden address, GPS coordinates, photos or what you write to Petunia. Events also carry technical information such as your device and app version, language and time zone, and PostHog receives your connection’s IP address. Usage data is linked to a random account ID that we can connect to your account. If you also turn on screen recordings, we record how you move through the app, with all text and images hidden. We use PostHog for this.
• Crash reports, when the app breaks: where in the app it failed, the error message, your device model, operating system and app version, and your random account ID. Sentry also receives technical session information used to measure crash-free use, and your connection’s IP address. For errors in the app’s JavaScript code, the app removes common patterns of email addresses, phone numbers, street addresses and coordinates from the error text on your phone; these patterns can miss personal information. Crashes in native code skip that on-phone filter and rely on Sentry’s server-side filtering. We use Sentry for this. You can turn crash reports off in Settings.

Petunia’s memory

After you send a message and Petunia replies, an AI model may pick out dated notes worth keeping: things you did, problems you saw, observations, milestones and preferences you mentioned. We call these memories. Notes about a plant are kept with that plant and its space. Gardening preferences are kept with your account. Petunia uses them in later chats.

This happens automatically. Memories only shape Petunia’s gardening replies. They are not used for advertising or to make decisions about you that have legal or similarly significant effects.

Deleting a conversation does not delete memories taken from it. To stop Petunia using saved memories, use Forget what Petunia knows on a plant, or Clear Petunia’s memory in Settings. Forgetting does not delete your conversations, notes or care logs, which Petunia can still use when answering. Forgotten memories are erased when you clear all account data, delete the related plant, or delete your account. Memories are included when you export your data.

How we use information

• Send the access email you asked for.
• Run and secure this website and the Petunia app.
• Run your app account, garden, chat, plant identification and memories.
• With your agreement, understand which parts of the app help people and what to fix or build next.
• Find and fix errors that make the app crash.
• Answer support and privacy requests.
• Meet legal duties and prevent form abuse.

Where information is stored

Website sign-ups, privacy requests and opt-outs are stored with Supabase in the United States. Petunia app data is stored with Supabase in Singapore. App usage data and website analytics go to PostHog’s United States service, and crash reports to Sentry’s United States service. Some providers, including AI model providers and Google, may process information in other countries, including the United States.

Service providers

These providers process information to run Petunia and this site.

We may also disclose information when required by law or to protect users and the service.

Advertising, cookies and tracking

Today this site runs no advertising tags and no third-party analytics tags. It does not set cookies or use your device’s storage on ordinary visits. Its own analytics script sends the page and button events described under Website and waitlist. We do not sell personal information.

In the Petunia app, we use usage analytics only if you agree, and crash reports, as described above. Neither is used for advertising, and we do not use them to track you across other apps or websites. You can change both in the app under Settings → Privacy.

If we turn on Google Ads measurement, tags will load only after you choose Accept advertising, in every country. They will not load if your browser sends Global Privacy Control or if you have opted out. Under California law this measurement can count as sharing. We will update this policy and Cookies before we turn it on.

If you send an opt-out request, we store an advertising rejection and a random visitor ID for that request. See Cookies.

Global Privacy Control. We honour Global Privacy Control. If your browser sends it, we treat it as an opt-out of sale and sharing, advertising stays off, and website analytics sends nothing.

Do Not Track. Some browsers send a Do Not Track signal. If yours does, this site’s analytics sends nothing. Do Not Track has no other effect here, because the site does nothing else that it covers. We also honour Global Privacy Control.

Tracking by other companies. Today no other company collects information on this site about what you do over time or across other websites. PostHog receives the page and button events described above as our service provider, under an ID that changes every day. If we turn on Google Ads measurement and you allow it, Google may do so. See Cookies.

Retention

• Waitlist: until the invitation is sent or you ask us to remove it.
• Privacy requests and opt-outs: until we no longer need the record to show how we handled the request.
• Cookie-choice records, only if the banner runs: until we no longer need them to show what you chose. The cookie itself lasts 180 days.
• Website analytics events: up to 1 year, with app usage events.
• Server logs and email sent to team@supertrained.ai: for as long as the provider or inbox needs them to run, secure or answer the service.
• App usage events: up to 1 year. Screen recordings: up to 30 days. Crash reports: up to 90 days. PostHog also keeps a profile for your random account ID, holding device and app details, until we delete it. Deleting your app account does not yet delete any of these automatically; email us to ask for them to be deleted.
• App account and garden data, including conversations, photos and memories: while your account is open. Account deletion takes effect 30 days later and you can restore it until then. Encrypted backups are overwritten within 7 days after that.

International transfers

We collect information directly from you. If you are in the EEA, UK or Switzerland, it goes to the United States and, for the app, to Singapore. These countries may not have the same data-protection laws as yours. Providers use their own transfer safeguards where required.

We have not appointed a representative in the EU or the UK. Our service is aimed at people in the United States. If that changes, we will appoint one and list it here.

Your privacy rights

Depending on where you live, you may ask for access, correction, deletion, restriction, objection or a copy of your information. Use Your data or email team@supertrained.ai. We reply within one month. If a request is complex, we may take up to two more months and will tell you why.

You can object to processing based on legitimate interests. You can withdraw consent at any time: turn off location in your phone’s settings, turn off usage data or screen recordings in the app under Settings → Privacy, or ask us to take you off a list. Withdrawing consent does not undo what we did before. You will not be treated differently for making a privacy request, and you can ask us to stop contacting you.

Appeals. If we turn down a privacy request, reply to our answer or email team@supertrained.ai with “Appeal” in the subject. We will answer within 60 days. If you are unhappy with the result, you can contact your state attorney general.

You do not have to give us information. Without an email, we cannot add you to a list or reply to you. Without an account, you cannot use the app.

Legal bases

• Sending the access emails you asked for and keeping you on that list: consent.
• Running your app account, garden, chat, plant identification and memories: contract.
• Device location: consent through your phone’s permission prompt.
• Keeping the site and app secure, preventing form abuse and server logs: our legitimate interest in keeping the service safe and working.
• Handling privacy requests, opt-outs and cookie-choice records: legal obligation and our legitimate interest in keeping a record.
• App usage data and screen recordings: consent.
• Website analytics: our legitimate interest in knowing which pages and buttons are used and whether the site works. It stores nothing on your device, and Global Privacy Control and Do Not Track switch it off.
• Crash reports: our legitimate interest in keeping the app working. You can turn them off in Settings.
• Advertising cookies, if we turn them on: consent.

California and other US states

We collect identifiers, app usage data if you agree to it, device information and crash diagnostics, internet activity related to advertising only if it is enabled, geolocation, and garden content. We get it from you, your phone and browser, and Google if you use Google Sign-In.

Sensitive information includes your account login and precise location if you allow it. We use it only to run the app and do not use it to infer things about you. In the past 12 months we have not sold or shared personal information. We do not sell or share the personal information of anyone under 16.

For an access, correction, export or deletion request, we email the address you gave and ask you to reply from it. We will not ask for your password. An authorized agent must send signed permission; we may ask you to confirm your identity directly. For an opt-out, no identity verification is needed. See Do not sell or share.

Children and age

Petunia and this site are for people aged 18 and over. They are not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we delete it. If you think a child has given us information, email team@supertrained.ai.

Your choices

• Your data — access, correction, export or deletion.
• Do not sell or share — an opt-out, including Global Privacy Control.
• Cookies — change advertising in this browser if it is ever enabled.
• App: Settings → Delete account, or Settings → Export my data.
• App: Settings → Privacy — usage data, screen recordings and crash reports.

Changes

If this policy changes, we will update the date on this page. We will post material changes here before they apply.

Contact

team@supertrained.ai