Privacy Policy

Last updated: 24 September 2026

Poth.OS ("the app") is operated by Kwame Poku ("we", "us", "our"). This policy explains what we collect, why, and the choices and rights you have. Contact us any time at support@pothosapp.app.

Information we collect

Account email, plant records, care events, optional coarse location, optional photos, chat messages, private reflections, notification preferences, subscription status, and crash/diagnostic data. Location and photos are only collected if you choose to grant those permissions.

Why we collect it, and on what basis

We use this information to operate your account and the app's core features (contract necessity), to keep the service secure and working (legitimate interest), and — where required by your jurisdiction — with your consent, such as for optional location or camera access, which you can withdraw at any time in your device settings.

Who we share it with

We do not sell your personal information. We share it only with the service providers that run the app on our behalf, each acting under their own data processing terms:

• Supabase — database, authentication, and file storage.
• OpenAI — generates AI chat replies from the message you send at the moment you send it.
• Sentry — crash and error diagnostics.
• Google Play Billing and RevenueCat — processes and verifies Pro subscription purchases.

We may also disclose information if required by law, to protect the rights and safety of our users, or in connection with a merger, acquisition, or sale of assets, in which case this policy would continue to apply to your information under the new operator.

Private writing

Reflections and one-to-one plant chats are private. They are not shown socially, not used to train AI models, and not reviewed by staff unless you file a report that requires review.

AI processing

Messages you send to AI chat are sent to OpenAI to generate a reply. We do not include your email in that request, and under OpenAI's API terms your messages are not used to train their models.

Crisis resources and sensitive content

Poth.OS is not a medical, mental health, or crisis service, and no one monitors your messages in real time. If something you write suggests immediate risk, the app may automatically show you crisis resources — we record only that a card was shown and when, never the message that triggered it. If you are in crisis or in danger, please contact local emergency services or a crisis line directly; do not rely on this app for that purpose.

Public surfaces

Wall posts, marketplace listings, and your display name can be visible to other users when those features are enabled. Do not post anything there you want to keep private.

Location and photos

Coarse location is optional and used only to estimate local weather and daylight for your plants' care schedule. Photos are optional and used for plant records, AI-assisted diagnosis, or marketplace listings you choose to create.

International data transfer

Our service providers may process and store your information in the United States or other countries outside where you live. By using Poth.OS, you understand your information may be transferred to, and processed in, those countries, which may have different data protection laws than your own.

Retention and deletion

Chat history is retained for up to 400 days unless you delete it sooner. Other account data is retained for as long as your account is active. Deleting your account (see our deletion policy) removes your active data immediately; backup copies are fully purged within 30 days.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or receive a copy of your personal information. To exercise any of these rights, email support@pothosapp.app — we will respond within the time required by applicable law.

California privacy rights

California residents have the right to know what personal information we collect, request its deletion or correction, and opt out of its "sale" or "sharing" as those terms are defined by the CCPA/CPRA. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, email support@pothosapp.app.

Security

We use reasonable technical and organizational measures to protect your information, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children

Poth.OS is not directed to, and is not intended for use by, children under 13. If we learn that a child under 13 has provided us with personal information, we will delete it promptly. A parent or guardian who believes their child has provided us information may contact support@pothosapp.app to request its deletion.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above, and where changes are material, we will provide additional notice such as an in-app message.

Contact: support@pothosapp.app