Privacy Policy

Controller

GospodApp is operated by Futuristic SRL, CUI 49637694, J08/607/2024, Str. Lebedei 27, Bl. B56, Et. 5, Ap. 27, Brasov, Romania.

Account and app data

We may process account identifiers, sign-in details, billing entitlement status, plant photos, messages, diagnoses, saved Plant Plans, notes, reminders, support requests, app language, and the technical information needed to deliver these features.

AI-assisted plant guidance

When you ask for a plant check or follow-up, GospodApp uses AI to analyze the photo, message, and relevant Plant Plan context and suggest a likely issue and a practical next step. Those details may be sent to our AI and hosting providers to produce the requested answer. The result is guidance, not a guaranteed or professional diagnosis, and your plant content is not used for advertising.

Security and quota protection

To enforce usage limits and prevent repeated account creation from resetting free allowances, we briefly process the app installation identifier and network address in memory. We use a keyed cryptographic method to create pseudonymous values. We also process whether a successful request used image analysis or text, when it happened, and app-integrity results such as a broad recent-device-activity category.

Pseudonymous does not mean anonymous, but it reduces the data exposed in our anti-abuse records. The 31-day anti-abuse ledger does not contain the raw installation identifier, raw network address, photos, messages, prompts, diagnoses, or other plant content.

Short-lived server logs

Operational and security logs may contain a raw IP address, request time, route, response status, and technical error details. New API access and error logs rotate after approximately seven days. Older shared server logs created before August 24, 2026, may take up to 14 days to expire during this transition. We do not intentionally place plant photos, messages, access tokens, integrity tokens, or full anti-abuse pseudonyms in these logs.

Why we use data

We use data to provide plant checks, keep saved plans available, restore Premium access, answer support requests, maintain reliability, enforce plan limits, investigate abuse, and control fraud-related operating costs.

Legal basis

We process data when it is needed to provide the service or perform our agreement with you. For service security, quota enforcement, and fraud prevention, we rely on our legitimate interests, balanced against your rights and expectations. We process billing or accounting records when required by law.

Retention and account deletion

Account content is kept while needed to provide your account and saved features, then deleted under our account-deletion process unless a legal duty requires a specific record. Pseudonymous quota and anti-abuse events are kept for 31 days from the event and then deleted automatically. Deleting an account does not reset that short anti-abuse period, but the retained record cannot be used to recover deleted photos, messages, diagnoses, or Plant Plans.

Processors and transfers

We use providers for hosting, databases, AI-assisted guidance, App Store and Google Play billing, diagnostics, and support. They process data only as needed to provide those services under their contracts and applicable safeguards. Some providers may process data outside Romania or the European Economic Area using available legal transfer safeguards.

Advertising status

The Free plan does not currently contain third-party advertising. Test versions include Google Mobile Ads and Google User Messaging Platform. Planned optional rewarded ads offer one extra text question after the Free text allowance is exhausted; they never add a photo check. Premium is ad-free while a paid entitlement is active.

When an eligible adult chooses an ad, Google and the advertising partners listed in the consent message may process the IP address, approximate location, app or device identifiers, ad interactions and diagnostic data for advertising, measurement and fraud prevention. Requests are configured for non-personalized ads; this does not remove consent requirements.

Ads require an explicit declaration that you are 18 or older. Unknown age and under-18 users cannot start an ad. We do not collect a birth date. You can decline the offer and, where required, change consent through Ad privacy choices. Your existing Free allowance does not change.

Plant content and advertising

Plant content and anti-abuse records are not sold. Plant photos, messages, diagnoses, email addresses and anti-abuse records are not sent to Google for advertising or used to build advertising profiles. To verify a reward, we store the adult declaration with a reward session linked to your app account. Google receives an opaque session code, not your GospodApp account ID. Only server-verified completion adds the extra question.

Your rights

Depending on applicable law, you may ask for access, correction, deletion, restriction, portability, or objection. You may object to processing based on legitimate interests; we will stop unless we have compelling security or legal grounds to continue. You may also complain to the Romanian data-protection authority or another competent supervisory authority.

Privacy contact

For a privacy request or a question about these safeguards, write to privacy@gospodapp.com. We may need to verify your identity before acting on an account-specific request.