Kipos Privacy Policy
Effective Date: September 26, 2026
This Privacy Policy (the “Policy”) describes how Kipos (“Kipos,” “we,”
“our,” or “us”) collects, uses, discloses, and otherwise processes your personal
information when you use our mobile application and related services (together,
the “Services”), and explains the privacy rights and choices available to you.
Kipos is operated by Yazan Badran, an individual developer. You can reach us at
any time:
- Email: support@kipostracker.com
- Post: 2967 Dundas St. W. #295D, Toronto, ON M6P 1Z2, Canada
- Phone: +1 437 212 8843
By using the Services, you agree to the practices described in this Policy. This
Policy forms part of, and should be read together with, our Terms of Service.
Terms not defined here have the meaning given in the Terms of Service.
Children. The Services are not directed to children. If you reside in the
United States, you should not use the Services if you are under 13 years of age.
If you reside in the European Economic Area (EEA), Switzerland, or the United
Kingdom (UK), you should not use the Services if you are under 16 years of age.
We do not ask for your date of birth and we do not verify your age, so we
have no way to know how old you are unless you tell us. If we become aware that
we have collected personal information from a child below the applicable age, we
will take reasonable steps to delete that information and the associated account.
If you believe a child has given us personal information, contact us at
support@kipostracker.com and we will delete it.
If you reside in the EEA, Switzerland, or the UK, please also see the
Additional Information for Certain Jurisdictions
section below.
We collect personal information directly from you, automatically through your use
of the Services, and from a small number of third-party providers who help us run
the Services.
- Account information. When you save your progress, we collect your email
address and a password that you choose. We confirm your email address by
sending you a one-time code. Your password is never stored in a readable form:
our authentication provider, Supabase, keeps only a salted cryptographic hash
of it, so neither we nor they can see or recover the password itself. If you
forget it, we email you a one-time code so you can set a new one.
You may instead sign in with Google or Apple, in which case we receive your email
address and basic profile details from that provider — see
Information From Third Parties below.
- Profile information. A display name if you choose to set one.
- Anonymous accounts. You can use Kipos before you give us an email
address. When you first open the app we create an anonymous account — a
randomly generated account identifier with no email attached — so that your
garden can be saved and kept private to you. If you later save your progress,
that same account is upgraded in place — with your email address, or with your
Google or Apple identity if you sign in that way — and the data you already entered
is preserved.
- Plant and garden data. Information you enter about your plants and your care
activity, including plant names, plant types/species, locations (for example,
“kitchen windowsill”), notes you write, how often you water each plant, and the
care actions you log (such as watering, feeding, pruning, and other actions you
name), with any note you add to them.
- Onboarding answers. When you first set up Kipos we ask a short series of
questions and keep your answers: whether you have plants growing, how you
heard about Kipos, whether you used a gardening app before, and how much time
a day you want to spend. Versions 1.1.2 and earlier also asked about your
growing space, the difficulty you most wanted help with, and your climate, and
we keep those answers if you gave them. We use your answer about how you heard
about Kipos to count which channels bring people to the account screen.
- Plant photos. If you choose to add a photo to a plant (or, in versions
1.1.2 and earlier, scan a plant with your camera), we collect the image you
capture or upload. A plant photo may show
parts of your home, balcony, or yard in the background — please frame it so it
shows only what you are comfortable sharing. Camera and photo-library access
are used only for these features and only after you grant the relevant device
permission.
- Communications. If you contact us for support or feedback, we collect your
email address and the contents of your message.
- Server logs. When the app contacts our backend, our hosting provider
records standard technical information such as your IP address, the date and
time of the request, the app version, and the request that was made. IP
addresses reveal a general, city-level location; we do not collect precise
GPS location, and the app never asks for location permission. If something
goes wrong while our backend is handling a request, the error is recorded in
those same logs, and that record can include your account identifier.
- Service usage counters. For app versions 1.1.2 and earlier, we count how
many AI requests (plant scans and care plans) each account makes per day, so
that we can enforce a fair-use limit on features that cost us money to run.
- Product analytics. We use PostHog, a product-analytics service, to
understand how the app is used and to find problems. When you use Kipos, the
app sends PostHog the screens you open, the actions you take (for example
“added a plant” or “logged a watering”), and a small set of technical
details: app version, operating system and version, language, time zone, and
screen size. It does not send your email address, your name, your plant
names or notes, your photos, the text you type, or your device model. Counts
are sent as ranges and errors as categories, not as their contents. Until you
save your progress, this activity is tied to a random identifier that PostHog
generates; once you sign in, it is tied to your Kipos account identifier —
never your email — so that one account’s activity is seen as one. PostHog
works out your country and city from your IP address and then discards the
address; it does not keep your IP. For app versions 1.1.2 and earlier, our
own servers also report the outcome of each plant-identification and care-plan
request — how long it took,
whether it succeeded, and how much AI capacity it used — but never the photo,
your answers, or the result.
- Session replay. For a small sample of sessions — at most 1 in 10 in
the released app — PostHog also records a short screen replay: taps,
scrolling, and timing, so we can see how a screen behaves. Replay runs on a
limited set of screens and never on sign-in, camera, subscription, or account
screens. Everything you type and every image is
hidden in the recording before it leaves your device. Console logs and
network traffic are not recorded. Replays are deleted after 30 days.
- Your control. The Share analytics switch on your Profile screen turns
both of these off at any time. Turning it off stops collection immediately;
it does not delete what was already collected, which ages out on the schedule
under How Long We Keep Your Information.
If you have signed in, deleting your account also deletes your PostHog
profile and its recordings; an anonymous account’s activity is tied only to
the random identifier above and ages out on the same schedule. The switch is
kept on your device, so it stays off after you sign out or delete your
account.
No advertising or cross-app tracking. Kipos is a native mobile app and
does not use website cookies. It contains no advertising or attribution SDKs,
and we do not track you across other apps or websites.
- Sign-in providers. As well as email sign-in, Kipos offers Sign in with
Google and Sign in with Apple. These are optional — you can always use
email instead. If you choose one, we receive a limited set of account
information from that provider so we can create or recover your Kipos
account:
- Google: your Google account identifier, email address, name, and profile
picture, under the standard
openid, email, and profile scopes.
- Apple: your Apple account identifier and email address, and your name if
you choose to share it. Apple lets you hide your email address, in which
case we receive a private relay address rather than your real one and never
learn the latter. Everything in Kipos works the same either way.
We use this information only to identify you, create or sign you in to your
account, and contact you about your account. We do not post, read posts,
like, repost, follow, or send messages on your behalf; we do not read your
contacts, followers, timeline, or any other content held by these providers;
and we do not receive your Google or Apple password. What each provider shares is also subject
to your settings with them, and you can revoke Kipos’s access at any time
from your Google or Apple account security settings. If you do, you may need
another sign-in method to get back into your Kipos account.
- App store and subscription-management provider. The app store you bought
your subscription through, and our subscription-management provider
RevenueCat, tell us whether your subscription is active. They do not give us
your payment details (see below).
- Service providers. Our infrastructure providers may supply us with
technical and usage information to help us operate, secure, and improve the
Services.
Kipos offers a paid subscription with an optional free trial. Subscriptions
are sold and processed by the app store you bought them through, under that
platform’s own terms. Today that is the Apple App Store. We do not operate a
payment interface, and we do not use an independent payment processor.
- We never receive your payment details at all. You pay Apple using the
payment method already on your app-store account. Your card number, expiry
date, security code, and billing address are handled entirely by Apple and are
never transmitted to, processed by, or stored on our systems. We do not receive
a card token, a card brand, or the last four digits, and we cannot charge you
directly.
- What we receive and store. Only what is needed to know whether your
subscription is active: an anonymous subscriber identifier, your plan (monthly
or annual), your subscription and trial status, renewal, expiry and
cancellation dates, and whether a billing problem has been reported by the
store. This is linked to your Kipos account identifier so that the features
you paid for are unlocked on your devices.
- Subscription-management provider. We use
RevenueCat to receive and interpret the
purchase and renewal information the app store sends, and to tell the app
whether your subscription is active. RevenueCat processes this information as
a service provider acting on our instructions. It receives your Kipos
account identifier, the store’s transaction and subscription data, and basic
device and app information such as platform, app version, and country. It does
not receive your payment details either.
- Billing information you give Apple. Apple may collect your name, billing
address, phone number, and tax-related information in connection with your
purchase. That collection is governed by Apple’s own privacy policy, not this
one.
- Fraud prevention. Detecting and preventing fraudulent payments,
chargebacks, and abuse of free trials is carried out by the app store as part
of processing your payment. We do not run our own payment fraud checks and do
not receive the signals used for them.
Apple processes your payment information as an independent controller for its
own purposes, including fraud prevention, regulatory compliance, and its
obligations under financial-services and anti-money-laundering law. Its handling
of your information is governed by the
Apple Privacy Policy, which we encourage
you to read.
If we add another store or payment method. Should Kipos later be sold
through Google Play or take payment by another route, the same division applies —
the store takes the payment, we never see the payment details — and this Policy
will be updated to name the relevant provider before that happens.
We may aggregate, de-identify, or anonymize information so that it no longer
identifies you. We may use and disclose such information for any purpose permitted
by applicable law, and we will not attempt to re-identify it except as permitted
by law.
We use your personal information to:
- Provide the Services. Create and manage your account, store your garden and
plant data and care history, schedule the watering reminders you set, and run
the day-to-day operation of the app.
- Run older AI features. For app versions 1.1.2 and earlier, process plant
photos and plant details to return an identification or a care plan (see
AI and Automated Processing below).
- Send notifications. Deliver the plant-care reminders you have enabled.
These reminders are scheduled on your device by the app; we do not operate
a push-notification server and do not collect a push token.
- Manage your subscription. Recognise the purchase you made through the app
store, start and end your free trial, unlock paid features across your
devices, reflect renewals and cancellations, and keep the records required for
tax and accounting. The payment itself, and any refund, is handled by the app
store.
- Communicate with you. Respond to support requests, send you the one-time
codes needed to confirm your email address or reset your password, and send
administrative messages such as changes to our terms or policies.
- Analyze and improve the Services. Understand how the app is used, diagnose
problems, fix crashes, and develop new and improved features.
- Maintain security and prevent abuse. Protect the Services and our users,
detect and prevent fraud, and prevent misuse of resource-intensive features
(such as automated abuse of the AI features in older app versions).
- Comply with law. Meet our legal obligations and respond to lawful requests.
- Business transactions. Evaluate or complete a merger, acquisition,
financing, reorganization, or sale of assets, where permitted by law.
AI and Automated Processing
The current version of Kipos does not send your photos or garden data to an AI
provider. App versions 1.1.2 and earlier included the AI features below. They
keep working for anyone still using those versions:
- Plant identification. When you scan a plant, the photo is sent to our
server, which forwards it to a third-party AI provider (Anthropic) to
identify the plant and generate care guidance. The image is processed to
produce your result.
- Care personalization. Details you provide about your plants and answers to
onboarding questions may be sent to the same AI provider to generate a
personalized care plan and follow-up questions.
- Garden scoring. Information about the plants in your garden may be sent to
the same AI provider to generate your garden-balance score and its suggestions
for what to add.
Photos and prompts sent for these features are processed to return your result;
we do not use your photos or garden data to train AI models, and our AI provider
is contractually engaged to process this content on our behalf rather than for
its own model training.
These features produce suggestions to help you care for your plants; they do not
make decisions that produce legal or similarly significant effects about you.
Identification and care guidance may not always be accurate — please use your own
judgment, especially before consuming, handling, or acting on information about
any plant. If you are in the EEA/UK, see your rights regarding automated
processing below.
We do not sell your personal information for money, and we do not use it for
cross-context behavioral advertising. We disclose personal information only as
described below:
- Service providers. We share information with vendors who process it on our
behalf to run the Services, including our backend, database, authentication and
photo-storage host (Supabase), our AI provider for plant identification and
care personalization in app versions 1.1.2 and earlier (Anthropic), our email delivery provider
(Resend), which sends the one-time codes described above, and our
product-analytics provider (PostHog), which receives the usage data and
sampled screen replays described under
Information We Collect Automatically.
These vendors are permitted to use the information only to provide services
to us.
- App store and subscription-management provider. We share the information
described under Payment Information with RevenueCat
so that it can tell the app whether your subscription is active. Your payment
is taken by the Apple App Store, which processes your payment information
as an independent controller for its own legal and fraud-prevention purposes;
we do not send it to them, and we do not receive it from them.
- Sign-in providers. If you choose Sign in with Google or Sign in with Apple,
that provider necessarily learns that you signed in to Kipos, and handles
that interaction under its own privacy policy
(Google,
Apple). We do not send them your garden
data, plant photos, or care history, and we do not disclose your Kipos
activity to them.
- Platform providers. Apple and Google, in connection with app-store
purchases, if you buy a subscription through the App Store or Google Play.
- Legal and safety. We may disclose information to comply with applicable law
or a lawful request, to enforce our Terms, or to protect the rights, property,
or safety of Kipos, our users, or others.
- Business transfers. We may disclose information in connection with a merger,
acquisition, financing, reorganization, bankruptcy, or sale of assets, in which
case your information may be among the transferred assets.
- With your direction or consent. We may disclose information to other parties
when you ask us to or otherwise agree.
Storage, Photos, and Public Links
Plant photos you add are stored with our storage provider in a folder scoped to
your account. Please note that plant photo links are public-read: anyone who
has the specific link to a photo can view it, without signing in and without an
account. The links contain randomly generated identifiers, and other users
cannot list or browse your folder, so links are not intended to be discoverable
by guessing or by browsing our storage. This is still not an access-controlled
read: treat a photo link like a password, because anyone you send it to can open
it and can pass it on. We and our storage provider can access your photos where
that is necessary to operate the Services, including to delete them when you
delete your account — see
How We Disclose Personal Information.
Please avoid including sensitive or personally identifying content in plant
photos.
Deleting a single plant removes it from your garden, but does not immediately
remove its photo from storage — the existing link to that image may keep working.
Deleting your account removes all of your photos.
If you use the in-app share feature, the image you create is generated on your
device and shared only where you choose to send it.
Your Choices
- Camera and photos. You can grant or revoke the app’s camera and
photo-library permissions at any time in your device settings. Adding plant
photos will not work without them.
- Notifications. You can turn plant-care reminders on or off in the app and
manage notification permissions in your device settings.
- Analytics. The Share analytics switch on your Profile screen turns
product analytics and session replay off. It takes effect immediately, stays
off after you sign out or delete your account, and you can turn it back on at
any time. See
Information We Collect Automatically.
- Subscription. You can cancel your subscription at any time, which stops
future charges. Because your subscription is bought through the app store,
cancel it in that platform’s subscription settings — deleting the app does not
cancel it.
- Account deletion. You can delete your account and associated data directly
in the app from the Account screen. You can also contact us to exercise the
deletion rights described in Your Privacy Rights.
We maintain reasonable technical, organizational, and administrative safeguards
designed to protect personal information from loss, misuse, and unauthorized
access, disclosure, alteration, and destruction. Access to your garden data is
scoped to your own account. However, no method of transmission or storage is
completely secure, and we cannot guarantee absolute security.
We retain your personal information for as long as your account is active or as
needed to provide the Services, and thereafter as necessary to comply with our
legal obligations, resolve disputes, and enforce our agreements. When information
is no longer needed, we delete or de-identify it. If you delete your account, we
will delete or de-identify your personal information within a reasonable period,
except where retention is required or permitted by law.
Subscription records. When you delete your account we delete our own copy
of everything, including the record linking your account to a purchase. Records of
the purchase itself are held by the app store and by our subscription-management
provider, RevenueCat, under their own retention policies — commonly for as long as
tax, accounting, and anti-fraud law requires, and longer where a chargeback,
dispute, or legal claim is outstanding. We cannot delete those on your behalf; the
app store’s and RevenueCat’s privacy policies explain how to contact them.
Analytics data. PostHog keeps analytics events for up to one year and
session replays for 30 days, then deletes them. When you delete an account
you had signed in to, we ask PostHog to delete your profile and its recordings
sooner — normally within a day. Turning off Share analytics stops new
collection but does not shorten these periods for data already collected.
Anonymous accounts. An account with no email address attached cannot be
recovered by us or by you — there is nothing to identify it with. If you lose
your device, uninstall the app, or clear its data, that garden is gone.
We also delete unused anonymous accounts automatically. If an anonymous
account has had no activity for 30 days and holds no plants, no photos, and no
completed onboarding answers, we delete it and its data permanently. An account
you are still using is never deleted this way. Adding your email address — or
signing in with Google or Apple — removes your account from this process entirely
and is the only way to keep your garden permanently. We may change this period,
and will update this Policy if we do.
We and our service providers may process and store your personal information in
the United States and other countries whose data-protection laws may differ from
those in your country of residence. Where we transfer personal information across
borders, we take steps to ensure it remains protected in accordance with
applicable law. By using the Services, you understand that your personal
information may be transferred to countries outside your country of residence.
Our subscription-management provider, RevenueCat, is based in the United States;
our product-analytics provider, PostHog, stores analytics data and screen
replays in the United States (Virginia); and the app store that takes your
payment operates globally and transfers payment information internationally.
Each relies on its own transfer safeguards,
such as the European Commission’s Standard Contractual Clauses (with the UK
Addendum where applicable) and, where applicable, certification under the
EU–U.S., UK, and Swiss–U.S. Data Privacy Frameworks.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights over
your personal information:
- Access / portability — confirm whether we process your information and
obtain a copy.
- Correction — correct inaccurate or incomplete information.
- Deletion — request deletion of your information, subject to legal
exceptions.
- Opt out — opt out of marketing communications and, where applicable, of
certain processing.
- Withdraw consent — where processing is based on consent, withdraw it at any
time (without affecting prior processing).
- Non-discrimination — we will not discriminate against you for exercising
your rights.
How to exercise your rights. Email us at support@kipostracker.com with the
request you would like to make. We may need to verify your identity before acting
on your request. Where permitted, you may use an authorized agent, in which case
we will verify the agent’s authority.
Canada (PIPEDA and provincial privacy law)
Kipos is operated from Ontario, Canada, and we handle personal information in
accordance with the Personal Information Protection and Electronic Documents Act
(PIPEDA) and applicable provincial privacy legislation.
We collect, use, and disclose your personal information only for the purposes
identified in this Policy, and we rely on your consent — express where the
information is sensitive or the purpose would not be obvious, and implied where
the purpose is evident from the circumstances, such as storing the plant data you
enter so we can show it back to you. You may withdraw consent at any time, subject
to legal or contractual restrictions and reasonable notice; withdrawing consent
for processing that is necessary to run the Services may mean we can no longer
provide them to you.
You have the right to access the personal information we hold about you and to
request correction of anything inaccurate. Contact us at
support@kipostracker.com and we will respond within the time PIPEDA allows.
If you are not satisfied with our response, you may complain to the
Office of the Privacy Commissioner of Canada, or to
your provincial privacy commissioner where one has jurisdiction.
As described under International Transfers,
your personal information may be stored or processed outside Canada, including in
the United States, where it may be accessible to foreign courts and law
enforcement under the laws of that country.
United States — state privacy rights
If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana,
Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey,
Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, your state’s privacy
law gives you rights over your personal information. Depending on your state,
these include the right to know what we collect and how we use it, to obtain a
copy, to correct it, to delete it, and to opt out of targeted advertising, the
sale of personal information, and profiling that produces legal or similarly
significant effects.
We do none of those last three. We do not sell personal information, we do not
share it for cross-context behavioral advertising or targeted advertising, and we
do not profile you in a way that produces legal or similarly significant effects —
so there is nothing for you to opt out of.
Using the categories defined by the California Consumer Privacy Act, as amended,
in the preceding 12 months we may have collected the following categories of
personal information:
- Identifiers (e.g., email address, device identifiers, IP address).
- Internet or other electronic network activity (e.g., app usage and
interaction data, and sampled screen replays with typed text and images
masked).
- Geolocation data (approximate location only: a general, city-level area
inferred from your IP address, and the climate or frost band you tell us you
garden in. We do not collect precise GPS location).
- Visual information (plant photos you provide).
- Commercial information (subscription and transaction records, plan,
renewal dates, and amounts, if you purchase).
- Financial information — we do not collect or store payment-method
information of any kind. No card number, no card brand, no last four digits,
no billing address. Your payment is taken by the app store and its details are
never passed to us.
- Inferences (e.g., care preferences derived from your plant data).
The only sensitive personal information we collect, as California law
defines that term, is your account login credentials — your email address together
with your password. We use them solely to authenticate you and secure your
account. We do not use or disclose sensitive personal information to infer
characteristics about you, and we do not use it for any purpose that would give
you the right to limit its use under California law. We do not collect precise
geolocation, government identifiers, racial or ethnic origin, religious beliefs,
health information, biometric data, or the contents of your mail, email, or
messages. We do not use or disclose personal information for purposes other than
those described in this Policy.
We collect this information from you directly, automatically through your use of
the Services, and from service providers, and we use and disclose it for the
business purposes described in this Policy. We do not sell personal information
and do not “share” it for cross-context behavioral advertising as those terms
are defined under California law.
To exercise any of these rights, contact us at support@kipostracker.com. We
may need to verify your identity before acting on your request, and you may use an
authorized agent. If we decline your request, you may appeal by replying with
“APPEAL” in the subject line; we will respond with our decision and our reasons,
and tell you how to contact your state attorney general if you remain
unsatisfied. We will not discriminate against you for exercising any of these
rights.
European Economic Area, Switzerland, and United Kingdom (GDPR / UK GDPR)
For individuals in the EEA, Switzerland, and the UK:
Controller. Kipos, operated by Yazan Badran, is the controller of the
personal information described in this Policy. You can contact us at
support@kipostracker.com, by post at 2967 Dundas St. W. #295D, Toronto, ON
M6P 1Z2, Canada, or by phone at +1 437 212 8843. We have not appointed an
EU or UK representative; if that changes, this Policy will be updated. The app store acts
as an independent controller for the payment processing described above.
Legal bases. We rely on the following legal bases to process your personal
information:
- Performance of a contract — to create your account and provide the
Services you request (including, in app versions 1.1.2 and earlier, plant
identification and care plans), and to
administer a subscription you have purchased through the app store.
- Consent — for camera/photo access, notifications, and any processing that
requires consent. You may withdraw consent at any time.
- Legitimate interests — to secure the Services, prevent abuse, understand
usage through product analytics and sampled session replay (which you can
switch off in the app at any time), and improve our features, where those
interests are not overridden by your rights.
- Legal obligation — to comply with applicable law and respond to lawful
requests, including tax, accounting, and anti-money-laundering obligations
attached to payments.
Your rights. You have the rights to access, rectification, erasure,
restriction of processing, objection to processing (including direct marketing),
data portability, and to withdraw consent. Where we use automated processing (such
as AI plant identification and care personalization in app versions 1.1.2 and
earlier), you may request more
information; these features do not produce legal or similarly significant effects
about you.
International transfers. When we transfer your personal information outside the
EEA, Switzerland, or the UK (for example, to the United States), we rely on
appropriate safeguards such as the European Commission’s Standard Contractual
Clauses (and the UK Addendum), or another lawful transfer mechanism.
Complaints. You have the right to lodge a complaint with your local data
protection authority. You can find your EU authority via the
European Data Protection Board,
the UK Information Commissioner’s Office, or the
Swiss FDPIC.
Changes to This Policy
We may update this Policy from time to time. When we make material changes, we
will update the “Effective Date” above and, where appropriate, provide additional
notice (for example, within the app). Your continued use of the Services after an
update means you accept the revised Policy.
If you have any questions or concerns about this Policy or our privacy practices,
please contact us at:
Kipos
Email: support@kipostracker.com
Post: 2967 Dundas St. W. #295D, Toronto, ON M6P 1Z2, Canada
Phone: +1 437 212 8843