// PHỤ LỤC A — PHÁP LÝ
Chính sách quyền riêng tư
Cách ứng dụng Rootless Farm thu thập, sử dụng và bảo vệ dữ liệu cho chẩn đoán qua ảnh, ghi chép Nhật ký, đăng nhập, gói thuê bao và quảng cáo.
Chính sách này chỉ được công bố bằng tiếng Anh. Bản tiếng Anh là bản có hiệu lực ràng buộc — dịch ra có thể làm thay đổi chính điều chúng tôi cam kết. Hãy viết cho privacy@rootlessfarm.com bằng ngôn ngữ của bạn, chúng tôi sẽ trả lời bằng ngôn ngữ đó.
Overview
This Privacy Policy covers the Rootless Farm mobile app (com.mobtive.rootlessfarm) for iOS and Android — an AI-powered plant-disease-diagnosis app with a photo-based camera diagnosis feature, a personal growing Journal, and an optional Pro subscription. It explains what data the app collects, why, and how you can control or delete it. Last updated: 2026-08-30.
Information We Collect
Account information — when you sign in with Apple or Google, we receive your name and an email address (or, if you choose to hide your email with Apple, a private relay address) to create and identify your account. We do not receive your Apple or Google password.
Camera and photos — the app requests camera and photo library access so you can capture or upload plant photos for AI-based disease diagnosis. Photos you submit are uploaded to our servers to generate a diagnosis and, if you choose to save it, stored under your account so you can review it later.
Journal entries — notes, photos, and records you create in the Journal are stored under your account so they sync across your sessions and remain available to you.
Subscription and billing data — Pro subscription purchases (monthly $4.99 / yearly $39.99, with a 7-day free trial) are processed by Apple's App Store or Google Play and managed through RevenueCat, our subscription infrastructure provider. We receive your subscription status and entitlement (active, expired, trial) from RevenueCat — we do not receive or store your payment card details.
Diagnostic and crash data — we use Sentry to capture crash reports and error logs so we can fix bugs. These reports may include device type, OS version, and the app state at the time of the error, but are not linked to your photos or journal content.
Advertising data — if you are not a Pro subscriber, the app shows ads served through Google AdMob. Ad requests are non-personalized: we do not request App Tracking Transparency permission and do not collect your advertising identifier (IDFA/GAID) for ad personalization. Google may still process limited technical data (such as IP address) to serve and measure ads — see Google's own privacy policy at https://policies.google.com/privacy. Pro subscribers see no ads.
How We Use Your Information
We use the information above to: operate the diagnosis feature and return results; save and sync your Journal across devices; authenticate you and maintain your account; process and validate your Pro subscription through RevenueCat; diagnose and fix crashes via Sentry; and serve non-personalized ads to non-subscribed users via AdMob. We do not sell your personal information, and we do not use your diagnosis photos or journal content to train third-party advertising models.
Third-Party Services
The app relies on the following third-party services, each of which processes a limited slice of your data on our behalf:
• Apple Sign In / Google Sign In — authentication only.
• RevenueCat — subscription status and entitlement management.
• Google AdMob — non-personalized ad serving for non-Pro users.
• Sentry — crash and error reporting.
Each provider processes data under its own privacy policy in addition to this one.
Data Storage and Retention
Your account data, diagnosis history, and Journal entries are stored under your account for as long as your account remains active, so you can access your history across sessions and devices. You can delete individual diagnoses or Journal entries from within the app at any time. Deleting your account (Account → Delete Account, where available, or by emailing us) permanently removes your journal entries, diagnosis history, and profile information from our systems, other than what we are required to retain for legal, security, or fraud-prevention purposes.
Your Rights
Depending on where you live, you may have rights under GDPR, KVKK, LGPD, CCPA/CPRA, or similar laws to access, export, correct, or delete your personal data. To exercise these rights, email privacy@rootlessfarm.com. We respond within 30 days.
We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of under CCPA/CPRA's "sale" or "share" definitions.
Children's Privacy
Rootless Farm is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact privacy@rootlessfarm.com and we will delete it.
Changes to This Policy
We may update this policy as the app changes. Material changes will be reflected by updating the "last updated" date above. Continued use of the app after a change constitutes acceptance of the revised policy.
Contact Us
Privacy requests and data deletion: privacy@rootlessfarm.com
General support: hello@rootlessfarm.com