Privacy Policy

Information We Collect

Account information. When you create an account we collect your name, email address, and a password. If you sign in with Apple or Google, we receive your name and email address from that provider instead of a password. You can also use parts of the app as a guest without providing any of this — guest sessions use an anonymous identifier only.

Plant and device data. Your sensor reports soil moisture and battery levels, along with a device identifier derived from the sensor’s hardware. We store this telemetry, your plant names and types, care thresholds, and reading history so the Services can monitor your plants and alert you.

Plant photos. If you use plant identification, the photo you take or choose is sent to our identification partner (PlantNet) to determine the species. We do not store your photos on our servers — only the identification result (the plant’s scientific name) is kept.

Purchase information. When you buy a sensor, checkout is handled by Shopify. We receive and store your email address, order number, the items you bought, and order totals so you can track your order and get support. We never receive or store your payment card details — payment, billing, and shipping details are collected and processed by Shopify on its secure checkout pages.

Notifications. If you enable push notifications, we store a push token for your device so we can deliver plant alerts.

Website usage. Our website uses Google Analytics for Firebase to understand how visitors use the site (pages viewed, general device and usage information). See “Cookies” below.

What we deliberately do not collect: your home Wi‑Fi password is sent directly from your phone to your sensor over your local network during setup and is stored only on the sensor itself — it never reaches our servers. We do not collect your precise location, contacts, or advertising identifiers, and we do not use advertising trackers.

How We Use Information

• Provide the Services: monitor your plants, sync your data across devices, and send the alerts you enable.
• Create and secure your account, verify your email, and help you reset your password.
• Fulfill orders, provide order status, and respond to support requests.
• Generate plant-care recommendations. Only your plant’s species name — never your personal information — is sent to our AI provider to generate care guidance.
• Operate the plant-sharing feature when you choose to share a plant with someone.
• Understand website usage and improve the Services.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Plant Sharing

If you share a plant, anyone who redeems your invite code can see that plant’s name, its species, its moisture readings and history, and the owner name on your profile. Invite codes are single-use and expire after 24 hours. You can revoke a person’s access at any time from the app, and invited viewers can leave at any time. We do not show your email address to people you share with, and we do not show you theirs.

Service Providers We Share Data With

We use a small set of service providers to run the Services. They process data on our behalf for the purposes described in this policy:

• Google Firebase (Google LLC) — authentication, database, cloud functions, and website analytics. Firebase privacy
• Shopify — e-commerce checkout, payment processing, and order fulfillment. Shopify collects your name, shipping address, and payment details directly on its checkout pages. Shopify privacy
• EmailJS — delivers transactional email (verification codes and password-reset links) to your email address.
• PlantNet — receives plant photos you submit for identification. PlantNet privacy
• NeuralWatt — our AI provider; receives only plant species names to generate care recommendations.
• EMQX — the encrypted messaging broker (hosted in the European Union) that relays telemetry between your sensor and your app.
• Expo — delivers push notifications to your device.
• Hostinger — hosts our website (receives standard server logs such as IP addresses).
• Apple and Google — if you choose to sign in with them.

Integrations you connect. If you connect an irrigation service (such as Rachio, Rain Bird, or Home Assistant), we send watering commands and moisture information to that service using credentials you provide. Those services handle your data under their own privacy policies, and you can disconnect them at any time in the app.

We may also disclose information if required by law, or to protect the rights, safety, and security of KEMTECH LLC, our users, or others.

Cookies and Local Storage

Our website uses Google Analytics for Firebase, which sets cookies and similar identifiers to measure site usage. We also use your browser’s local storage to remember your shopping cart and to complete checkout. The mobile app does not use advertising or analytics trackers.

You can control cookies through your browser settings, including blocking or deleting them. The website works with cookies disabled, though analytics will not function. Like most sites, our website does not currently respond to browser “Do Not Track” signals.

Data Retention

• Account and profile data: kept while your account is active, and deleted when your account is deleted.
• Sensor readings and plant data: kept while your account is active so you can view history.
• Order records: kept as long as needed for support, warranty service, and legal/accounting requirements.
• Email verification codes: stored only as a one-way hash and deleted within minutes of use or expiry.
• Share invite codes: expire within 24 hours.
• Plant photos: not retained by us (processed for identification only).

Your Rights and Choices

You can update your name in the app, disable push notifications in your device settings, revoke plant sharing, and disconnect any irrigation integration at any time.

Account deletion. You can delete your account from the Account page on this website or from the EverGreen mobile app (Account → Delete account). That permanently removes your profile and plant data. You may also contact us at support@dr-evergreen.com from the email address on your account. We will delete your account, profile, and plant data, subject to records we must keep for legal, security, or accounting reasons (such as order history required for tax purposes).

Access and portability. You may request a copy of the personal data we hold about you by contacting support@dr-evergreen.com.

European Economic Area, United Kingdom, and Switzerland. If you are located in these regions, you have rights to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Our legal bases for processing are: performance of our contract with you (providing the Services), our legitimate interests (securing and improving the Services), your consent (where required, such as analytics cookies), and legal compliance. You may also lodge a complaint with your local supervisory authority.

California. California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA/CPRA. To exercise any right, contact support@dr-evergreen.com.

International Data Transfers

We are based in the United States, and our service providers process data in the United States and the European Union (our telemetry broker is EU-hosted). When data crosses borders, we rely on our providers’ safeguards, including standard contractual protections, to protect it.

Security

We protect your data with encryption in transit (HTTPS and secure WebSockets), managed authentication (passwords are handled by Firebase Authentication and are never stored in our database), server-side secret management, and access rules that limit data to its owner. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security — but we work to protect your information and to improve our safeguards over time.

Children

The Services are not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at support@dr-evergreen.com and we will delete it.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the effective date above and provide notice on our website or through the Services. Your continued use after changes take effect means you accept the updated policy.

Contact Us

KEMTECH LLC — EverGreen is a product of KEMTECH LLC.

Questions or requests about privacy: support@dr-evergreen.com