Privacy Policy

Effective date: April 16, 2026

PlantaeLight LLC ("we", "us", or "our") operates the PlantaeLight mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.

1. Information We Collect

Data Type	Purpose	Stored Where
Email address	Account creation and authentication	AWS Cognito (EU)
Password	Account authentication (hashed, never stored in plaintext)	AWS Cognito (EU)
Device identifiers	Linking your PlantaeLight hardware to your account	AWS DynamoDB (EU)
Push notification tokens	Sending device status alerts	AWS DynamoDB (EU)
Purchase history	Managing your Pro subscription	Apple / Google + AWS DynamoDB (EU)
Light recipes & schedules	Storing your custom growing configurations	AWS DynamoDB (EU)
Activity logs	Showing you a history of device events	AWS DynamoDB (EU)

2. Information We Access Temporarily

Bluetooth: Used during device setup to discover nearby PlantaeLight devices. Not stored.
Location: Required by the operating system for Bluetooth scanning. We do not track or store your location.
Local network: Used to communicate with your PlantaeLight devices on your home WiFi. Not sent to our servers.
WiFi credentials: Your WiFi network name and password are sent directly to your PlantaeLight device during setup. They are never transmitted to or stored on our servers.
Face ID / Biometrics: Used for convenient sign-in. Biometric data is processed entirely on your device by the operating system. We never receive or store biometric data.

3. How We Use Your Information

To create and manage your account
To connect and control your PlantaeLight devices
To send push notifications about device status (online/offline, firmware updates)
To manage your Pro subscription
To store your custom light recipes and schedules

4. Data Sharing

We do not sell, trade, or share your personal information with third parties. We use the following service providers to operate the App:

Amazon Web Services (AWS): Cloud infrastructure, authentication, data storage, IoT device communication. Data is processed in the EU (eu-central-1, Frankfurt).
Apple / Google: In-app purchase processing and push notification delivery.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account through the App's settings, we delete or anonymize all your personal data, devices, recipes, and activity logs within 30 days.

6. Data Security

All communication between the App and our servers is encrypted using TLS. Authentication is handled by AWS Cognito with industry-standard security practices. Device communication uses AWS IoT Core with mutual TLS certificate authentication.

7. Your Rights

You have the right to:

Access your personal data (visible in the App)
Correct your data (editable in the App's settings)
Delete your account and all associated data (available in Settings)
Export your data by contacting us

8. Children's Privacy

The App is not intended for children under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by email.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

PlantaeLight LLC
509 E Maple St, Madison, TN 37115
Phone: +1 615 510 0011
Email: privacy@plantaelight.com