Privacy Policy

1. Data controller and contacts

The data controller is the owner of angryivy.com — a private individual. For any questions about data processing, or to exercise your rights, write to hello@angryivy.com.

2. What data we collect

To run the Service we process the following categories of data:

• Account data: email address, display name (derived from your email by default, editable in your profile), city (used for weather-aware reminders). Your password is stored only as an irreversible hash — we never see it in plain text.
• Content you upload: profile photo (avatar), photos of your plants, plant names and care parameters.
• AI assistant requests: the text of your questions and photos uploaded for recognition — so the Service can identify a plant and give care advice.
• Technical data: IP address, cookie identifiers, browser and device type, on-site actions. Collected automatically via web analytics and to protect the Service from abuse.

3. Purposes of processing

• Registration and authentication, and providing access to your account.
• The core function of the Service — tracking your plants, care reminders based on the weather in your city, and AI-assistant recommendations.
• Sending service emails (registration confirmation, password reset, important notices).
• Keeping the Service secure and stable, and protecting it from abuse and automated attacks.
• Analysing traffic and improving the Service based on anonymised statistics.

4. Legal bases (GDPR Article 6)

We rely on the following legal bases for processing your data:

• Consent (Art. 6(1)(a)) — for analytics cookies and optional processing; you give it at registration and via the cookie banner, and can withdraw it at any time.
• Performance of a contract (Art. 6(1)(b)) — to provide the Service’s features to you.
• Legitimate interests (Art. 6(1)(f)) — to keep the Service secure and to prevent abuse.

5. Who we share data with

We do not sell your data. To run the Service we rely on third-party providers who act as processors on our behalf and only to the extent needed for their function:

• Google (Google Analytics 4) — web analytics and cookie identifiers (loaded only after you consent via the cookie banner).
• OpenRouter — processing AI-assistant requests (question text and photos for recognition).
• Resend — delivery of service emails.
• Supabase — hosting the Service’s database.
• Object storage (S3-compatible) — storing the photos and avatars you upload.
• OpenWeatherMap — retrieving the weather forecast for the city you specify.
• Hosting provider that runs and serves the Service.

6. International data transfers

Some of these providers (for example Google, OpenRouter and Resend) may process data on servers located outside the European Economic Area (EEA). Where that happens, the transfer is covered by appropriate safeguards — such as the European Commission’s Standard Contractual Clauses — or by an adequacy decision.

7. Retention

Account data and the content you upload are kept for as long as your account exists. After you delete your account, the data is deleted or anonymised within a reasonable time, except where the law requires longer retention. Anonymised analytics statistics are kept according to the analytics service’s settings.

8. Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy of it;
• have inaccurate data corrected (rectification);
• have your data deleted (erasure) or delete your account;
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw consent at any time, without affecting processing done before withdrawal.

To exercise any of these rights, write to hello@angryivy.com. We will respond within the time set by law. Some actions (editing profile data, deleting your account) are available directly in the Service’s settings.

9. Cookies and web analytics

The Service uses technical cookies (needed for authentication and for the site to work) and analytics cookies from Google Analytics 4. Analytics loads only after you consent via the cookie banner; no analytics cookies are set before you consent. Learn more in the Cookie Policy.

10. Consent to personal-data processing

By registering with the Service, you consent to the owner of angryivy.com processing the personal data you provide (email address, name, city, uploaded photos and plant parameters, and the text of your AI-assistant requests) for the purposes listed in Section 3 of this Policy.

Consent stays in effect until withdrawn; you can withdraw it at any time by writing to hello@angryivy.com or by deleting your account. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Changes to this Policy

We may update this Policy. The current version is always published on this page, and the date at the top reflects the date of the last change.

Complaints

If you are in the EU/EEA and believe your data is being processed unlawfully, you have the right to lodge a complaint with your local data protection authority. We’d appreciate the chance to address your concern first — please reach out to hello@angryivy.com.